A kind of sensitive information leakage detection method and device

Abstract

The embodiments of the present application provide a sensitive information leakage detection method and device, which relate to the field of data security technology. The sensitive information leakage detection method includes: intercepting all response data by monitoring the network traffic outlet of the target organization; Whether it matches the set feature database; if yes, extract sensitive information and access information associated with the sensitive information from the response data; then judge whether the access information matches the preset cloud intelligence library; if yes, then Obtain the leakage path of sensitive information, and output an alarm message including the leakage path to indicate that sensitive information has been maliciously accessed, and can quickly and accurately detect sensitive information leakage, with high flexibility and comprehensive coverage, and can monitor the entire traffic exit of the target organization At the same time, it can also conduct path tracking analysis on the leakage of sensitive information to maintain data security in a timely manner.

Description

technical field [0001] The present application relates to the technical field of data security, in particular, to a sensitive information leakage detection method and device. Background technique [0002] With the development of Internet technology, accessing and storing user information on the Internet has become a common way. When a user browses the web, the client and the server make requests and receive the returned content from the server. Due to improper handling, sensitive information involving user privacy or that needs to be kept secret is easily leaked. In the existing sensitive information leakage detection method, usually after the client initiates a request, the server returns the data, and the back-end module judges whether there is sensitive information in the return according to the keyword matching. alarm. [0003] For sensitive information leakage detection methods, there are other methods, such as Comparative Document 1: CN201710452471.X A data leakage d...

AI Technical Summary

Problems solved by technology

[0004] However, in practice, it is found that due to the simple keyword matching mechanism and language differences, the detection accuracy is low, the flexibility is low, and it is impossible to track and analyze sensitive information leakage.

At the same time, for comparison file 1, when detecting whether sensitive data is leaked through the fingerprint feature matching method, the leakage path of the sensitive data cannot be tracked and analyzed, and an accurate warning prompt cannot be given; for comparison file 2, only abnormal access initiation of sensitive information can be determined. Programs and abnormal access receiving programs, which can only determine the origin of abnormal access, and cannot track and analyze the leakage path of sensitive information, so that data security cannot be maintained in a timely manner

It can be seen that the existing technology has low flexibility and accuracy, and cannot track and analyze sensitive information leakage paths, so it cannot maintain data security in a timely manner

Images