Secret-associated network information leakage risk monitoring method

Abstract

The invention discloses a secret-associated network information leakage risk monitoring method. User operations are recorded in real time in each client, a complete behavior, that a file flows out ofthe client, of a user this time is recovered by taking the event that the file flows out of the client as a starting point, and then whether or not a single behavior has a leakage hazard is analyzed and judged in the client according to security level management provisions in a secret-associated network; and the behaviors of the various clients in the secret-associated network are uploaded to a behavior library of a server, all leakage hazard behaviors related to the behaviors of the clients are tracked and analyzed out, therefore, the secret-associated files are effectively prevented from flowing out of the secret-associated network, and leakage events are avoided. According to the method, the dilemma that current secret-associated network security protection means are powerless for the behaviors that malicious leakers leak secrets by using normal printing and burning ways is solved, and the defects of an existing monitoring method are overcome. The method is wider in monitoring coverage, higher in judgment accuracy rate and convenient for audit management of security protection personnel.

Description

technical field [0001] The invention relates to a network information leakage risk monitoring method, in particular to a secret-related network information leakage risk monitoring method. Background technique [0002] The national secrets-related network is managed in a hierarchical protection mode, and it is mainly used in the government, military, military industry and other fields. The national secret network carries a large amount of national secret information, and its security requirements are extremely high. Once a leak occurs, it will bring huge losses to the country. Under the hierarchical protection management system, the secret-related network is completely physically isolated from the Internet. The export of secret-related information to the secret-related network mainly relies on the process approval management mechanism and the centralized output management mechanism. The secret-related information is exported to the secret-related network in the form of files....

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a method for monitoring the risk of information leakage on a secret-related network, which solves the problem of leakage caused by the incomplete supervision of the current secret-related network on the behavior of hidden dangers of secret leakage