Big data desensitization method and system

Abstract

The invention provides a big data desensitization method and system. The big data desensitization method specifically comprises: firstly, source data of a big data platform being subjected to scanningdiscovery, data analysis and sensitive data grading classification; the data desensitization module monitoring an access request of the big data platform, performing desensitization processing on a requested data result set by utilizing a Hive hook mechanism and an HBase coprocessor mechanism according to a user role, request data content and a preset desensitization algorithm rule, and finally returning desensitized data to the big data platform; on the basis, performing desensitization strategy making, desensitization algorithm and parameter setting, strategy management and issuing. A complete solution from sensitive data identification to dynamic data desensitization in a big data environment is realized.

Description

technical field

[0001] The invention relates to the field of information security, in particular to a big data desensitization method and system. Background technique

[0002] A large amount of sensitive information may be stored in the data accessed by the big data platform. Once leaked or illegally used, it will bring irreparable losses to individuals, enterprises and even the country. For this reason, big data privacy protection is getting more and more attention. Data desensitization realizes the protection of sensitive data by masking and deforming sensitive data through given rules and policies. Data desensitization expands the use range and sharing objects of original data without reducing security, and is the most effective sensitive data protection method in the big data environment.

[0003] A good data desensitization process must have the following characteristics: the desensitized data should have most of the characteristics of the original data to ensure busi...

Images