A method and device for assessing the risk of data leakage

Abstract

The present invention discloses a method and an apparatus for assessing the risk of data leakage. The method for assessing the risk of data leakage comprises: collecting the normal operation behavior to the sensitive data of a terminal user; assessing the probability distribution of the normal operation behavior, and obtaining a behavior model of the terminal user; and carrying out risk assessment on the test operation behavior to the sensitive data by using the behavior model, and determining a risk value of the test operation behavior. According to the technical scheme disclosed by the present invention, by collecting the normal operation behavior to the sensitive data of the terminal user, the time, the access quantity, and the access density for the terminal user to access the sensitive data are collected, especially the screen capture operation from the third-party software is collected, and the risk value of data leakage is calculated by using the behavior statistics feature of the terminal user, so as to discover the data leakage behavior with high risks; and the method has relatively high objectivity and interpretability, so that data leakage due to data information stolen by using the third-party software to carry out the screen capture operation can be effectively prevented.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a method and device for assessing data leakage risks. Background technique [0002] With the development of communication technology and computer technology, as well as the popularization of electronic equipment in social life, both individuals and organizations are using computers to complete more and more affairs, so that sensitive information is passing through fragile communication lines between computers. between transfers. Today, the scale and scope of data breaches is rapidly expanding, and while these large-scale data breaches pose risks to social institutions, they also expose consumers to the loss of personal information, whether it is credit card numbers, medical records, or passwords. and bank account numbers, are likely targets for cybercriminals. [0003] At present, the ways of data leakage can be classified into three types: 1. Leakage in th...

AI Technical Summary

Problems solved by technology

[0003] At present, the ways of data leakage can be classified into three types: 1. Leakage in the state of use: 1) technical data leakage or damage due to operational errors; 2) printing, cutting, copying, pasting, saving as, renaming, etc. Operation leaked data

2. Leakage in the storage state: 1) The data of the data center, server, and database are downloaded and shared at will; data breach due to theft, loss or repair

[0005] However, for the behavior of stealing data information by using third-party software to perform screenshot operations, the existing technology cannot effectively prevent data leakage caused by this behavior

Images