A data security management and control method and system based on data classification and classification

Abstract

The invention discloses a data security management and control method and system based on data classification and grading. The method includes the following steps: discovering, vectorizing the data set within the management range; classifying, discovering and vectorizing the document, according to the classification model Carry out classification; identify important business data, and determine whether the document is important business data according to the classification result based on the important business data identification model; classify, define the security level of the document according to the identified important business data according to the classification model ;Identify, record the important features of the document in the important business data after the classification, record the identification ID and the important features of the document in the document header, and store the detailed content of the identified data in a third-party database; The important business data formed in the business data perception step is analyzed and controlled. Through the scheme of the invention, a data security management and control system is constructed from the perspective of combining security management and data management, an objective and accurate evaluation system, and an index evaluation method is used to quantify the results of security management and control and guide the improvement of management and control.

Description

technical field [0001] The present invention relates to the field of data security, in particular to a data security management and control method and system. Background technique [0002] DLP, data leakage prevention technology, is a strategy and technology that prevents specified data or information assets of an enterprise from flowing out of the enterprise in a form that violates security policies through certain technical means. DLP technology can process data storage, use and transmission, identify and process data content, ensure data can be transparently processed, intelligently encrypted, has high stability and system compatibility, and can form a detailed data content level audit log. The core technical points of DLP include transmission protocol analysis, data format content recognition, high-speed rule matching, natural semantic analysis, machine learning, cluster analysis, data feature matching, etc. [0003] DLP at this stage generally uses three basic detecti...

AI Technical Summary

Problems solved by technology

[0005] Does not have the ability to define the security level of documents; does not have the ability to discover the distribution of important documents; does not have the ability to identify document feature attributes within the document; does not have the ability to control document use restrictions; does not have the ability to discover abnormal behaviors of document use ;Does not have the ability to express data security index; does not have the ability to evaluate data security

Images