Business data security risk identification method and system

Abstract

The embodiment of the invention provides a business data security risk identification method and system, and the method comprises the steps: obtaining a business data flow topological graph accordingto the data classification grading information, a network topological graph and security domain division information of an information system; carrying out portraying on an attack link according to network attack mode information and the business data flow topological graph to obtain an attack link portraying; and analyzing the network attack link according to the attack link portrait to obtain asecurity risk identification result. The method and the system have high targeting performance and directivity. Meanwhile, the strength of data security management in the information system is enhanced, the management strategy and granularity are refined, the requirement for data security management in the big data era is better met, a security guarantee is provided for security management of dynamic service data of the big data platform, and meanwhile a foundation is provided for subsequent security situation analysis of the big data security platform.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer technology, and in particular to a method and system for identifying business data security risks. Background technique [0002] Security risk assessment is to use scientific methods and means from the perspective of risk management to systematically analyze the threats and vulnerabilities faced by networks and information systems, assess the degree of harm that may be caused by security incidents, and propose targeted measures. Protective countermeasures and corrective actions against threats. The risk assessment work runs through the entire life cycle of the information system, including the planning phase, design phase, implementation phase, operation phase, and abandonment phase. [0003] The security risk assessment is mainly based on the "Information Security Risk Assessment Specification", ISO / IEC 13335 IT Security Management Guidelines, BS7799-1 (ISO / IEC 17799) risk manag...

AI Technical Summary

Problems solved by technology

Data management, use authorization control, and protection risks of business use flow are all very complex

Furthermore, in the era of big data, one of the manifestations of data application security risks is within the enterprise, because the failure of big data application security risk management and control will endanger the development of enterprise business on the one hand, and even trigger social incidents on the other hand, causing considerable great social harm

Therefore, internal data security risk management and control of enterprises is very important, while traditional security risk assessment methods tend to ignore technical analysis for various reasons, and more focus on strengthening security management from the internal control system

Images