Method and system for realizing data leakage prevention

Abstract

The invention discloses a method and a system for realizing data leakage prevention. The method comprises the steps that preprocessed text data is preprocessed to form vector data; the vector data is used as input data of a K-MEDOIDS clustering algorithm, and unsupervised learning is performed according to preset rules to form a clustering model; an external release file is detected through the clustering model; whether the external release file is a secret leakage file is judged; if yes, the external release file is not allowed to be released externally; and otherwise the external release file is allowed to be released externally. The K-MEDOIDS clustering algorithm is adopted to perform unsupervised learning training on the preprocessed text data, the external release file is detected through the clustering model, and therefore the problems that in traditional DLP technologies, keyword search is hidebound in a basic detection technology, and a file cannot be detected through an EDM and an IDM after file content is modified in an advanced detection technology are solved; and meanwhile, the number of categories of the K-MEDOIDS algorithm does not influence the clustering result, the algorithm is more flexible than an SVM algorithm, and the detection result of the file cannot be influenced even under the condition that a keyword is replaced.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a method and system for realizing data leakage protection. Background technique [0002] With the rapid development of information technology, computers and networks have become necessary tools and approaches for daily office work, communication and collaboration. However, while the information system improves work efficiency, it also raises security requirements for information storage, access control, and access control of computer terminals and servers in the information system. According to the data of the National Computer Information Security Evaluation Center, 97% of the units that caused economic losses due to the leakage of important internal confidential data through the network were caused by the intentional or unintentional leakage of internal employees. DLP (Data Leakage Prevention, Data Leakage Prevention) technology is becoming one of the most...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present invention provides a method and system for realizing data leakage protection, which can effectively overcome the singleness of the basic detection method keyword (word) comparison in the traditional DLP technology, and the rigidity of the advanced detection method EDM and IDM file comparison The problem of sexuality and the poor performance of SVM in multi-category classification

Images