Mail blocking method and device based on sensitive information recognition

Abstract

The invention discloses a mail blocking method and device based on sensitive information recognition, and the method comprises the steps: obtaining a mail which is sent by a user from an intranet to an extranet; carrying out the recognition of sensitive information of the obtained mail, blocking the mail and reminding a user when the mail is recognized to contain the sensitive information; obtaining the mail after the main is edited by the user, and enabling the edited mail to be sent. The method can achieve the complete checking, filtering and monitoring of a Web mail and a client mail, can effectively reduce possibility that employees of enterprises leaks information and secrets through information extranet mails, and achieves the blocking, prevention and monitoring of the leakage of sensitive information of the mails. The method achieves a fine grit purpose of person monitoring, mailbox monitoring, time monitoring and content monitoring. The method greatly improves the capability of information leakage prevention, and reduces the risk of sensitive information leakage of the mails.

Description

technical field [0001] The invention relates to the field of network information technology, in particular to a method and device for blocking emails based on sensitive information identification. Background technique [0002] With the rapid development of Internet applications, computer networks are rapidly becoming popular in various fields of economy and life, and information acquisition, sharing and dissemination are more convenient. Enterprises rely more and more on the network, and the importance of information security is also increasing. [0003] The Internet also brings unprecedented risks of mixed threats to enterprises. Employees freely and uncontrollably access illegal websites, transmit sensitive information, publish illegal speeches, and leak sensitive business information, etc., seriously affecting enterprise network security and causing irreparable losses. Traditional network protection equipment (such as firewalls, intrusion detection systems, etc.) is the ...

AI Technical Summary

Problems solved by technology

[0003] The Internet also brings unprecedented risks of mixed threats to enterprises. Employees freely and uncontrollably access illegal websites, transmit sensitive information, publish illegal speeches, leak sensitive business information, etc., seriously affecting enterprise network security and causing irreparable losses.

Traditional network protection equipment (such as firewalls, intrusion detection systems, etc.) is the basic equipment to solve network security problems. Its access control, network attack event detection and other functions can resist most attacks from the external network; Sensitive information contained in email titles, email texts, email attachments, etc.

However, compared with the security of the network layer, the security incidents caused by the behavior of sending emails from the internal network to the external network are more hidden and difficult to detect, so the losses are even greater

Images