Full-life-cycle-oriented data security anomaly detection method and system
A full life cycle, data security technology, applied in the field of abnormal data behavior, to achieve the effect of taking into account the complexity of implementation, taking into account the detection accuracy, and meeting the needs of refined management
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0051] Aiming at the problem of accurate detection of abnormal data behavior in the big data environment, and the problem of unified monitoring of the whole life cycle of data production / collection, transmission, storage, use, sharing, and destruction, this embodiment provides a full life cycle data security anomaly detection methods such as figure 1 shown, including:
[0052] Unified data model construction: Driven by tasks, collect task-related full life cycle data, extract relevant data that users focus on, and establish a unified data model;
[0053] Data behavior analysis: conduct real-time data behavior analysis and historical data behavior analysis, extract data behavior characteristics to establish a feature library, establish a multi-dimensional dynamic data behavior baseline and form a baseline library, and keep updating;
[0054] Abnormal data behavior detection: discover abnormal data behavior based on the feature database and baseline database, first detect known...
Embodiment 2
[0078] This embodiment is on the basis of embodiment 1:
[0079] This embodiment provides a data security anomaly detection system oriented to the whole life cycle, including:
[0080] The unified data model building module is used to collect task-related full life cycle data driven by tasks, extract relevant data that users focus on, and establish a unified data model;
[0081] The data behavior analysis module is used for real-time data behavior analysis and historical data behavior analysis, extracting data behavior characteristics to establish a feature library, establishing a multi-dimensional dynamic data behavior baseline and forming a baseline library, which is constantly updated;
[0082] The data abnormal behavior detection module is used to discover abnormal data behaviors based on the feature database and the baseline database. When the dynamic data behavior is baseline, it is judged as abnormal.
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


