Data security control method and system based on data classification and grading

Abstract

The invention discloses a data security control method and system based on data classification and grading. The method includes the following steps of finding, wherein data sets in the management range are vectorized; classifying, wherein found and vectorized documents are classified according to a classifying model; important service data identifying, wherein whether the documents are important service data or not is judged according to an important service data identifying model for the classification results; grading, wherein for identified important service data, the security level of the documents is defined according to a grading model; labeling, wherein document important characteristics in the important service data obtained after grading are recorded, identification ID and the document important characteristics are recorded in a document header, and detailed content of the labeled data is stored in a third-party database; the important service data formed by the important service data perception step are analyzed and controlled. By means of the scheme, the data security control system is constructed from the visual angle of combining security management and data management, the system is evaluated subjectively and accurately, the security control result is quantized in an index assessment mode to guide control improvement.

Description

technical field [0001] The present invention relates to the field of data security, in particular to a data security management and control method and system. Background technique [0002] DLP, data leakage prevention technology, is a strategy and technology that prevents specified data or information assets of an enterprise from flowing out of the enterprise in a form that violates security policies through certain technical means. DLP technology can process data storage, use and transmission, identify and process data content, ensure data can be transparently processed, intelligently encrypted, has high stability and system compatibility, and can form a detailed data content level audit log. The core technical points of DLP include transmission protocol analysis, data format content recognition, high-speed rule matching, natural semantic analysis, machine learning, cluster analysis, data feature matching, etc. [0003] DLP at this stage generally uses three basic detecti...

AI Technical Summary

Problems solved by technology

[0005] Does not have the ability to define the security level of documents; does not have the ability to discover the distribution of important documents; does not have the ability to identify document feature attributes within the document; does not have the ability to control document use restrictions; does not have the ability to discover abnormal behaviors of document use ;Does not have the ability to express data security index; does not have the ability to evaluate data security

Images