A data flow classification management method and system

Abstract

The patent of the present invention provides a data circulation classification management method and system, including file identification and operation information extraction, file circulation identification and analysis on the server side, and early warning steps. The invention effectively helps enterprises manage knowledge product files in the enterprise, Prevent files from being sent out by remote control programs, and prevent important knowledge product files from being sent out to the Internet. Enterprises can effectively check the flow of files in real time and carry out standardized management. It effectively provides documents for enterprises to carry out standardized management and control, and prevents the intellectual property documents of enterprises from being circulated to the Internet and competitors.

Description

technical field [0001] The invention belongs to the technical field of computer information security, and in particular relates to a data flow classification management method and system. Background technique [0002] The prior art method for whether a document has secrets theft and leakage can be roughly as follows: identify whether the target computer document contains a set keyword in an active scanning mode, that is, scan the computer file in a queue scanning and recursive scanning mode, according to The file extension is determined to be the file type, and keyword matching is carried out; or whether there is external circulation information in the document information is identified according to the keyword, and in the identified document information, the manager can view the content information of the document and perform manual auditing Records check and count the circulation of files. The prior art has the following disadvantages for whether the documents are stolen o...

AI Technical Summary

Problems solved by technology

[0002] The prior art method for whether a document has secrets theft and leakage can be roughly as follows: identify whether the target computer document contains a set keyword in an active scanning mode, that is, scan the computer file in a queue scanning and recursive scanning mode, according to The file extension is determined to be the file type, and keyword matching is carried out; or whether there is external circulation information in the document information is identified according to the keyword, and in the identified document information, the manager can view the content information of the document and perform manual auditing Records check and count the circulation of files. The prior art has the following disadvantages for whether the documents are stolen or leaked: the outgoing situation of the files cannot be found in time; the circulation of the files in the network cannot be detected; the file cannot be synchronized Graphical recording of operations; manual recording is required in massive audit data; background access methods of remote control programs cannot be judged and blocked; similar files or files of the same classification cannot be identified, and misjudgments are high