Method and system for ensuring computer information security in open environment

Abstract

The invention provides a method and system for ensuring computer information security in an open environment. According to the method, on the basis of a computer operating system, an isolated and closed secure desktop is constructed with driver layer isolation technologies such as network isolation, storage isolation, application isolation and peripheral isolation. The system comprises a login control module, a secure desktop switching module, a network isolation module, a storage isolation module, an application isolation module, a peripheral isolation module, a virtual disk module, a disk transparent encryption module, a file transparent encryption module and a file import and export module; the secure desktop is used for completing secret-related work, and a system desktop is used for completing non-secret work. The method and system have the advantages that normal work is ensured in the open environment, and meanwhile important data is protected from leakage or divulgation or diffusion; with the secure desktop serving as an identifier for identifying process legality, the purpose of omitting manual setting of white list program strategies is achieved.

Description

technical field [0001] The present invention belongs to the technical field of information security, and in particular relates to data security protection. Using drive layer isolation technologies such as network isolation, storage isolation, application isolation, and peripheral isolation, a "closed" security desktop is constructed, and the security desktop is used for secret-related work. , to access the security information system, thereby preventing the leakage of internal data. Background technique [0002] With the popularization and application of computer and network systems, internal leaks and internal attacks have become the biggest hidden dangers that threaten network security applications, such as confidential documents, sensitive information, important data, design drawings, formulas, software source codes, etc. through different channels, Once methods and means are lost and leaked, once they fall into the hands of competitors or even hostile forces, the consequ...

AI Technical Summary

Problems solved by technology

[0015] Compared with the existing technology, the positive effect of the present invention is to solve the long-standing defects of the existing technology and products, overcome various disadvantages caused by manually setting the "white list program" rules, and aim at data security protection Problems in products such as document transparent encryption software, mandatory centralized control system, document security management system and secret disk products provide a new way to solve problems

Images