Zero-trust data monitoring and early warning method, device and system and storage medium

Abstract

The invention discloses a zero-trust data monitoring and early warning method, device and system and a storage medium. The method comprises the following steps: in response to a sensitive data resource access request, obtaining identity information of an access subject user carried in the sensitive data resource access request; under the condition that the identity information is successfully authenticated, obtaining pre-configured accessible sensitive data corresponding to the identity information and an access frequency threshold value of the accessible sensitive data corresponding to the identity information and the security level of the accessible sensitive data; and if it is monitored that the access frequency of the access subject user to any piece of accessible sensitive data exceeds the corresponding access frequency threshold, determining an alarm level according to the security level of any piece of accessible sensitive data, and generating alarm information corresponding to the alarm level. According to the method provided by the embodiment of the invention, the sensitive data can be detected and pre-warned, so that pre-monitoring and pre-warning are achieved, and the risk of enterprise data management is reduced.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a zero-trust data monitoring and early warning method, device, system and storage medium. Background technique [0002] With the continuous development of the network, the boundary between the internal and external network is becoming more and more blurred, the traditional security boundary is gradually disappearing, and the IT structure of the enterprise is developing from "bounded" to "unbounded". Passing identity authentication does not mean that the subject is safe. The characteristic of zero trust is that it requires continuous trust evaluation. Once abnormal behavior is found, the policy needs to be adjusted. Therefore, for zero trust, authentication is static and trust is dynamic. The existing network of enterprises is becoming more and more complex, and the volume of data is constantly increasing. As a new network security model, zero trust can increase the bound...

AI Technical Summary

Problems solved by technology

[0004] To this end, the present invention provides a zero-trust data monitoring and early warning method, device, system and storage medium to solve the problems in the prior art due to failure to access resources The lack of security of sensitive data caused by the refinement of the security control of sensitive data

Images