Sensitive information leakage detection method and device and storage medium

Abstract

The invention discloses a sensitive information leakage detection method. The method comprises the steps of collecting a to-be-detected network data packet; classifying the network data packets to bedetected; respectively sending the network data packet to be detected to a plurality of processors, and performing parallel TCP stream restoration processing by adopting the processors to obtain restored text information; carrying out natural language processing on the restored text information, judging whether sensitive text information exists in the restored text information or not, and calculating the leakage rate of the sensitive text information; and judging a network data packet where the sensitive text information is located as a sensitive information leakage data packet, performing traceability analysis on a source address of the sensitive information leakage data packet, and positioning a sensitive information leakage source. According to the sensitive information leakage detection method disclosed by the invention, the capture speed of the data packet can be improved, and the time for identifying and detecting the sensitive information of the network is shortened. The invention further discloses a sensitive information leakage detection device and a storage medium.

Description

technical field [0001] The present invention relates to the technical field of sensitive information detection, in particular to a sensitive information leakage detection method, device and storage medium. Background technique [0002] With the rapid advancement of enterprise information construction, more and more OA office systems, internal mail systems, and instant messaging tools have been widely used, which brings great convenience to daily work and life. But at the same time of convenience, there are also many information security issues, and various sensitive information leakage incidents occur from time to time. [0003] At present, most enterprises generally adopt two preventive measures on the issue of "disclosure of sensitive information": one is to strengthen the training of confidentiality system for relevant secret-related staff; Conduct a confidentiality check. Although these methods have solved some problems to a certain extent, there is still a risk of sen...

AI Technical Summary

Problems solved by technology

[0008] The data packet capture speed of the network sensitive information detection technology is limited, and it is easy to cause packet loss; due to the existence of system calls and data copying from kernel space to user space, the capture speed will often decrease, resulting in packet loss; if the processing Improper data structure design will lead to high space complexity and time complexity of TCP stream restoration; the amount of text data restored by the network in real time is huge, and retrieval and analysis are very time-consuming

Images