Sensitive information illegal copy identification method, apparatus and device, and storage medium

Abstract

The invention discloses a sensitive information illegal copy identification method and device, equipment and a storage medium, and the method comprises the steps: obtaining the file copy information of a to-be-investigated employee, and enabling the file copy information to comprise a file name; based on a dictionary library of sensitive information classification, feature words corresponding to work categories not belonging to employees in the file names are extracted, and the dictionary library comprises a plurality of work categories and a plurality of feature words corresponding to the work categories; And at least carrying out logistic regression training on the extracted feature words, and determining whether illegal copying is carried out according to a training result. According tothe scheme, the feature words, not belonging to the work category, in the files copied by the employees are extracted through the dictionary library, the feature words are subjected to logistic regression training, and whether illegal copying is carried out or not is determined according to the training result. And when it is determined that the illegal copy exists, human intervention and investigation can be carried out to prevent the illegally copied employee from leaking the copied sensitive information.

Description

technical field [0001] The present invention generally relates to the field of information security, and in particular relates to an identification method, device, equipment and storage medium for illegal copying of sensitive information. Background technique [0002] With the development of network technology and storage technology, the duplication, storage and transmission of data and files have brought great convenience. However, it also poses a great challenge to the information security of enterprises, and leaks of sensitive information of enterprises occur from time to time. For example, internal data leakage incidents caused by employees' intentional or unintentional copying of corporate files are common in enterprises. At present, due to the inability to obtain the internal information of the copied files and the purpose of the copy, it is difficult to prevent employees from copying the internal data of the enterprise to the private storage space in a timely manner ...

AI Technical Summary

Problems solved by technology

However, it also poses a great challenge to the information security of enterprises, and leaks of sensitive information of enterprises occur from time to time

For example, it is common in enterprises to have internal data leakage incidents caused by employees intentionally or unintentionally copying enterprise files

At present, due to the inability to obtain the internal information of the copied files and the purpose of the copy, it is difficult to prevent employees from copying the internal data of the enterprise to the private storage space in a timely manner from a single file name, and there is no relatively complete detection technology for sensitive information being illegally copied and leaked

Images