Method and device for constructing file derivative graph

Abstract

The invention discloses a method and device for constructing a file derivative graph. The method comprises the following steps: aiming at any to-be-monitored file, executing the following graph initialization operations: creating a file node F0 corresponding to the current version of the file, determining a device node D (F0) corresponding to the current storage device of the current version, andcreating an edge between the F0 and the D (F0); after a preset file derivation operation is monitored, executing the following graph updating operations for the derivation operation: creating a file node Fn corresponding to the derived version, and determining a corresponding device node D (Fn) according to the current storage device of the derived version; and an edge between the Fn and the D (Fn) being created, an edge between the Fn-1 and the Fn being created, and the Fn-1 being a file node corresponding to the version before derivation. The file derivative graph is constructed through model construction and is used for representing the storage relationship between each file and the storage device, so that the device storing the file containing the private data can be positioned, and the device leaking the private data can be positioned.

Description

technical field [0001] The embodiments of this specification relate to the field of information security, and in particular to a method and device for constructing a file derivative graph. Background technique [0002] Many devices in the enterprise contain sensitive files, such as business confidential files or private files. Enterprises have security requirements for leak prevention for these sensitive files, which allow these sensitive files to be transferred between internal devices without being leaked to the outside. In order to keep these sensitive files from being leaked, many anti-leakage strategies exist. However, the existing anti-leakage strategy cannot guarantee that all sensitive files will not be leaked. When sensitive files are leaked, in order to take remedial measures against the devices or employees who leaked sensitive files, such as downloading patches or warning employees, it is usually necessary to locate the leaked sensitive files first. equipment or...

AI Technical Summary

Problems solved by technology

However, the existing anti-leakage strategy cannot guarantee that all sensitive files will not be leaked. When sensitive files are leaked, in order to take remedial measures against the devices or employees who leaked sensitive files, such as downloading patches or warning employees, it is usually necessary to locate the leaked sensitive files first. equipment or staff

[0003] However, none of the existing anti-leakage strategies can locate the devices or employees that leaked sensitive files. Enterprises can only check all devices and employees in the enterprise one by one when sensitive files are leaked, which is time-consuming and labor-intensive.

Images