Dynamic data leakage prevention system and method

A data dynamic and anti-leak technology, applied in the field of data security, can solve problems such as inability to be treated differently, affecting work efficiency, and restricting the improvement of productivity.

Inactive Publication Date: 2017-02-22
北京明朝万达科技股份有限公司
View PDF4 Cites 52 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Once the control method is issued, all data on the terminal will be processed uniformly regardless of whether it is confidential or sensitive, and cannot be treated differently, which affects work efficiency to a certain extent and restricts the improvement of productivity

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Dynamic data leakage prevention system and method
  • Dynamic data leakage prevention system and method
  • Dynamic data leakage prevention system and method

Examples

Experimental program
Comparison scheme
Effect test

no. 1 example

[0058] Such as Image 6 As shown, a large bank hangs the DLP system on the egress switch by side to monitor the network data sent by the enterprise. Enabled built-in policy sets such as financials, confidential data, etc., pattern-matched account information, and developed the following keyword lists as appropriate:

[0059] Keyword / Top Secret / Confidential / Secret / Secret

[0060] Security Solution / Security Solution / Network Topology

[0061] Meeting Minutes / Meeting / Scoring Criteria / Account

[0062] Financial Data / Annual Report / Quarterly Report / President

[0063] Bidding Specifications / Construction General Issue / Construction General Letter / Olympic Safety Guarantee / Technical Specifications

[0064] Board of Directors

[0065] The amount of data monitored in a week:

[0066] A total of 2,273,881 messages were processed

[0067] 11.76GB of data traffic filtered

[0068] A total of 6502 matching records

[0069] 1,440 violations discovered

[0070] In this example, DLP is d...

no. 2 example

[0077] as attached Figure 7 As shown, a large bank customer upgrades the existing terminal plaintext outgoing function. Before the transformation, the plaintext outgoing function only needs to be registered and then sent out, and there is a risk of leakage. After the transformation, when the user uses the plaintext outbound scanning function, the module will scan the content of the file and automatically determine the subsequent outbound actions that need to be performed according to the importance of the sensitive content contained in the file, as shown below:

[0078] Documents are directly sent out in plain text

[0079] After the document is registered, it will be issued in plain text

[0080] After the document is approved, it will be issued in plain text

[0081] Refuse to send documents in plain text

[0082] The scheme provided by the present invention is aimed at dynamically preventing data leakage, defining the anti-leakage management and control objects on the d...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a dynamic data leakage prevention system and method. The method comprises a data filtering rule file storage module, a data management control policy storage module and a file scanning engine, wherein the data filtering rule file storage module is used for storing a data filtering file, and the data filtering rule file comprises a plurality of different types of data filtering rules; the data management control policy storage module is used for storing a data management control policy, and the data management control policy comprises corresponding relationships between the different types of data filtering rules and different levels of data management control schemes; and the file scanning engine loads the data filtering rule file and the data management control policy, scans data sent to outside according to the data filtering rule file when the data needs to be sent to the outside, and performs corresponding outside sending control on the data sent to the outside. According to the system and the method, data leakage prevention can be dynamically performed, a leakage prevention management control object is defined in data, and a terminal or a user is no longer taken as a subject, so that the flexibility and security of data security control are improved.

Description

technical field [0001] The invention relates to the field of data security, in particular to a data dynamic leakage prevention system and method. Background technique [0002] In the current information age, the issues of data security and information security are becoming more and more important, and static and passive data leakage prevention can no longer cope with the endless leakage methods. In this regard, Beijing Mingchao Wanda Technology Co., Ltd. proposed and implemented an improvement plan for dynamic data leakage prevention based on keywords, regular expressions and machine learning technology. [0003] At present, the industry generally adopts the traditional static method of controlling outgoing terminals or users to prevent data leakage. However, the emerging methods of using regular expressions, keywords, and machine learning technologies to scan files for encrypted protection still belong to the category of static protection. [0004] The current anti-leakag...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/62
CPCG06F21/6227G06F21/6236
Inventor 秦凯王志海王志华喻波何晋昊
Owner 北京明朝万达科技股份有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products