Data security control method and system

By constructing a security posture association chain at the central control node and utilizing data source type symbols and associated feature values, the problem of insufficient identification of cross-asset threat attack chains in existing technologies is solved. This enables dynamic identification of attack paths and intelligent allocation of resources, thereby improving security operation efficiency.

CN121644201APending Publication Date: 2026-03-10SHANDONG HUIZHENG INFORMATION TECH CO LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202511899276.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-16
Publication Date
2026-03-10

AI Technical Summary

Technical Problem

Existing data security management methods are unable to effectively identify advanced persistent threat attack chains that span multiple stages and assets, resulting in missed alerts or delayed detection. Furthermore, they lack the ability to dynamically mine deep logical connections and behavioral patterns in security data, leading to low response efficiency for security operations personnel.

Method used

By acquiring and aggregating raw security data from multiple data source nodes at the central control node, and utilizing data source type symbols, data association feature values, and preset association threshold sets, a security posture association chain is constructed to identify potential associated security event chains. Furthermore, horizontal and vertical security chain sets are derived to achieve dynamic identification and response to attack paths.

Benefits of technology

It enables unified management of cybersecurity risks, accurately captures the chain-like behaviors of attackers' lateral movement and privilege escalation, dynamically adjusts monitoring resources and response strategies, and improves the efficiency and accuracy of security operations.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses a data security management and control method and system, which are applied to a network security system comprising a plurality of data source nodes and a central management and control node. The method comprises the following steps: gathering multi-source original security data through a central management and control node, and configuring a data source type symbol and an association or influence characteristic value for each node; according to a preset association threshold set associated with the data source type, the center node comprehensively processes the information, and constructs a system-level security situation association chain representing different security domains, asset groups and logical association among the different security domains and asset groups in the network; and finally, the specific security event or log is dynamically allocated to the specific logic security space or asset container identified by the chain. The corresponding system comprises a plurality of collaborative modules such as data aggregation and feature association, strategy library interface, associated event identification, security chain set derivation, situation topology synthesis, security event mapping and dynamic control strategy. According to the method, the transformation from fragmented alarm to global situation cognition is realized, a complex attack chain can be effectively identified, context-based accurate dynamic response is supported, and the automation and intelligence level of safe operation is improved.
Need to check novelty before this filing date? Find Prior Art