Data security control method and data security control platform

Abstract

The invention discloses a data security control method and a data security control platform. The method includes S1, partitioning data according to type and security classification; S2, performing encryption, identity authentication, access control, security audit, tracking and forensics on the data according to a data partitioning result, and distributing corresponding security protection tools for security protection; S3, collecting and normalizing log information generated by the security protection tools, and creating a full-life-cycle security view of the data. The data security control method and the data security control platform have the advantages that fine-grained differential full-life-cycle protection of big data can be achieved, utilization rate of the security protection tools can be increased, and the big data can be subjected to tracking and forensics.

Description

technical field [0001] The invention relates to a data security management and control method and platform, belonging to the technical field of data security. Background technique [0002] With the development of enterprise business and informatization, business data, as a kind of enterprise assets (data assets), presents the characteristics of large quantity, diversity and high value, and data assets have entered the era of big data. The significance of data security is not limited to the data itself, but also directly affects whether data can be upgraded to data assets to serve the business development of enterprises and the improvement of core competitiveness; in 2014, the state proposed that "information security is related to national security", and It shows that the data security of the enterprise is related to the security of the enterprise and the national security. [0003] However, the current security protection methods and technologies cannot meet the diverse an...

AI Technical Summary

Problems solved by technology

At present, the granularity of protection strategies for data assets is relatively coarse, and there are some unreasonable situations where some data protection is insufficient and some data protection is too harsh, which affects business use.

[0005] (2) The security protection products of enterprises only focus on the equipment they protect, lacking a unified security view

For example, firewalls only focus on network layer protection, terminal desk management security software only focuses on terminal protection, security protection products lack linkage, security views are fragmented, and lack a unified security management view for all devices on the entire network, making it impossible to know all devices An overall security protection situation of

[0006] (3) In the big data scenario, data faces different security risks at each stage of the life cycle and has different security protection requirements. However, at present, there is a lack of security protection for the entire life cycle of data, and it is impossible to generate, The unified security protection and management of the complete life cycle of access, transmission, recovery, and destruction cannot guarantee the security of data in all aspects of storage, transmission, use, and destruction.

[0007] (4) After a security violation event occurs, it is difficult to quickly and accurately locate the responsible person

Images