Log desensitization method, device, terminal device and computer-readable storage medium

Abstract

The present application provides a log desensitization method, apparatus, terminal device, and computer-readable storage medium, the method comprising: obtaining device security data and environmental security data of a target terminal device; determining a target security level of the target terminal device based on the device security data and environmental security data; obtaining a log desensitization policy corresponding to the target security level based on the target security level; and desensitizing the log of the target terminal device based on the log desensitization policy corresponding to the target security level. The log desensitization method provided by the present application determines the security level associated with the device, and thus can determine the desensitization policy corresponding to the security level based on the security level associated with the device, thereby achieving the effect of different security levels corresponding to different desensitization policies, and improving the flexibility of the device when desensitizing the log.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a log desensitization method, apparatus, terminal device, and computer-readable storage medium. Background Art

[0002] In the prior art, the same desensitization method is usually used to desensitize the logs in the device. In other words, when desensitizing the logs in the device with a high security level, the desensitization method is the same as that used when desensitizing the logs in the device with a low security level. However, not all devices have the same security level, and the use of a unified desensitization method has poor flexibility. Summary of the invention

[0003] The log desensitization provided in this application can perform different degrees of desensitization on the logs in the device according to the different security levels of the terminal device, thereby improving the flexibility of log desensitization.

[0004] In a first aspect, the present application provides a log desensitization method, the method comprising:

[0005] Obtain device security data and environmental security data of the target terminal device;

[0006] Determining a target security level of the target terminal device according to the device security data and the environmental security data;

[0007] According to the target security level, obtaining a log desensitization strategy corresponding to the target security level;

[0008] The logs of the target terminal device are desensitized according to the log desensitization policy corresponding to the target security level.

[0009] In some embodiments of the present application, determining the target security level of the target terminal device according to the device security data and the environment security data includes:

[0010] Determining a first security level of the target terminal device according to the device security data;

[0011] Determining a second security level of the target terminal device according to the environmental security data;

[0012] A target security level of the target terminal device is determined according to the first security level and the second security level.

[0013] In some embodiments of the present application, the device security data includes a sensitive information protection policy of the target terminal, and determining the first security level of the target terminal device according to the device security data includes:

[0014] Determining the security protection level of the target terminal according to the sensitive information protection strategy of the target terminal;

[0015] A first security level of the target terminal device is determined according to the security protection level of the target terminal device.

[0016] In some embodiments of the present application, determining the security protection level of the target terminal according to the sensitive information protection policy of the target terminal includes:

[0017] Obtaining the protection success rate of the sensitive information protection strategy;

[0018] The security protection degree of the target terminal is determined according to the protection success rate.

[0019] In some embodiments of the present application, the environmental security data includes the intrusion frequency of the target terminal device and the current geographical location information of the target terminal device, and determining the second security level of the target terminal device according to the environmental security data includes:

[0020] Determining the environmental security level of the target terminal device according to the intrusion frequency and the geographical location information;

[0021] A second security level of the target terminal device is determined according to the environmental security level.

[0022] In some embodiments of the present application, determining the target security level of the target terminal device according to the first security level and the second security level includes:

[0023] respectively determining a weight of the first security level and a weight of the second security level;

[0024] A target security level of the target terminal device is determined according to the first security level, the weight of the first security level, the second security level, and the weight of the second security level.

[0025] In some embodiments of the present application, obtaining a log desensitization policy corresponding to the target security level according to the target security level includes:

[0026] Obtain a comparison table of preset security levels and desensitization strategies;

[0027] According to the comparison table of the security level and the desensitization strategy, obtain the log desensitization strategy corresponding to the target security level.

[0028] In a second aspect, the present application further provides a log desensitization device, the device comprising:

[0029] A first acquisition module, used to acquire device security data and environmental security data of a target terminal device;

[0030] A determination module, configured to determine a target security level of the target terminal device according to the device security data and the environmental security data;

[0031] A second acquisition module is used to acquire a log desensitization strategy corresponding to the target security level according to the target security level;

[0032] The desensitization module is used to desensitize the logs of the target terminal device according to the log desensitization strategy corresponding to the target security level.

[0033] In some embodiments of the present application, the determination module is specifically used to:

[0034] Determining a first security level of the target terminal device according to the device security data;

[0035] Determining a second security level of the target terminal device according to the environmental security data;

[0036] A target security level of the target terminal device is determined according to the first security level and the second security level.

[0037] In some embodiments of the present application, the determining module is further configured to:

[0038] Determining the security protection level of the target terminal according to the sensitive information protection strategy of the target terminal;

[0039] A first security level of the target terminal device is determined according to the security protection level of the target terminal device.

[0040] In some embodiments of the present application, the determining module is further configured to:

[0041] Obtaining the protection success rate of the sensitive information protection strategy;

[0042] The security protection degree of the target terminal is determined according to the protection success rate.

[0043] In some embodiments of the present application, the determining module is further configured to:

[0044] Determining the environmental security level of the target terminal device according to the intrusion frequency and the geographical location information;

[0045] A second security level of the target terminal device is determined according to the environmental security level.

[0046] In some embodiments of the present application, the determining module is further configured to:

[0047] respectively determining a weight of the first security level and a weight of the second security level;

[0048] A target security level of the target terminal device is determined according to the first security level, the weight of the first security level, the second security level, and the weight of the second security level.

[0049] In some embodiments of the present application, the second acquisition module is specifically used to:

[0050] Obtain a comparison table of preset security levels and desensitization strategies;

[0051] According to the comparison table of the security level and the desensitization strategy, obtain the log desensitization strategy corresponding to the target security level.

[0052] In a third aspect, the present application also provides a terminal device, comprising a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps in any one of the log desensitization methods.

[0053] In a fourth aspect, the present application also provides a computer-readable storage medium, on which a computer program is stored, and the computer program is executed by a processor to implement the steps in any one of the log desensitization methods.

[0054] The log desensitization method provided in the present application determines the security level associated with the device, and thus can determine the desensitization strategy corresponding to the security level according to the security level associated with the device, thereby achieving the effect that different security levels correspond to different desensitization strategies, and improving the flexibility of the device in desensitizing the logs. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0056] Figure 1 It is a scenario diagram of the log desensitization system provided in an embodiment of the present application;

[0057] Figure 2 This is a flow chart of an embodiment of the log desensitization method in the embodiment of the present application;

[0058] Figure 3It is a functional module schematic diagram of the log desensitization device in the embodiment of the present application;

[0059] Figure 4 It is a schematic diagram of the structure of the terminal device in the embodiment of the present application. DETAILED DESCRIPTION

[0060] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of this application.

[0061] In the description of the present application, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the feature. In the description of the present application, "plurality" means two or more, unless otherwise clearly and specifically defined.

[0062] In this application, the word "exemplary" is used to mean "used as an example, illustration or description". Any embodiment described as "exemplary" in this application is not necessarily to be construed as being more preferred or advantageous than other embodiments. At the same time, it is to be understood that in the specific implementation of this application, when user information, user data and other related data are involved, when the above embodiments of this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data shall comply with relevant laws, regulations and standards of relevant countries and regions.

[0063] In order to enable any person skilled in the art to implement and use the present application, the following description is provided. In the following description, details are listed for the purpose of explanation. It should be understood that those of ordinary skill in the art will recognize that the present application can be implemented without using these specific details. In other examples, known structures and processes will not be elaborated in detail to avoid unnecessary details that make the description of the present application obscure. Therefore, the present application is not intended to be limited to the embodiments shown, but is consistent with the widest range of principles and features disclosed in the present application.

[0064] The present application provides a log desensitization method, apparatus, device, and storage medium, which are described in detail below.

[0065] See also Figure 1 , Figure 1The following is a schematic diagram of a log desensitization system provided in an embodiment of the present application. The log desensitization system may include a terminal device 100 and a storage device 200. The storage device 200 may transmit data to the terminal device 100. Figure 1 The terminal device 100 in the storage device 200 can obtain the logs stored in the storage device 200 to execute the log desensitization method in the present application.

[0066] In the embodiment of the present application, the terminal device 100 includes but is not limited to a desktop computer, a portable computer, a network server, a PDA (Personal Digital Assistant), a tablet computer, a wireless terminal device, an embedded device, etc.

[0067] In an embodiment of the present application, communication between the terminal device 100 and the storage device 200 can be achieved through any communication method, including but not limited to mobile communications based on the 3rd Generation Partnership Project (3GPP), Long Term Evolution (LTE), and Worldwide Interoperability for Microwave Access (WiMAX), or computer network communications based on the TCP / IP Protocol Suite (TCP / IP) and User Datagram Protocol (UDP).

[0068] It should be noted that Figure 1 The scenario diagram of the log desensitization system shown is only an example. The log desensitization system and scenario described in the embodiment of the present application are intended to more clearly illustrate the technical solution of the embodiment of the present application, and do not constitute a limitation on the technical solution provided in the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of the log desensitization system and the emergence of new business scenarios, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0069] like Figure 2 As shown, Figure 2 This is a flow chart of an embodiment of the log desensitization method in the embodiment of the present application. The log desensitization method may include the following steps 201 to 204:

[0070] 201. Obtain device security data and environmental security data of the target terminal device.

[0071] In the embodiment of the present application, the target terminal device can refer to any terminal device that can generate a log file during operation, or a terminal device that can store a log file, and the specific details are not limited here. The log can be a record file generated by various terminal devices such as computer logs during operation, which is used to record the details of the operation, so that when a problem occurs in the terminal device, the cause of the problem can be found according to the log.

[0072] It can be seen that the logs contain various data that may involve sensitive information, such as the operation details of the device. Therefore, the logs need to be desensitized. For example, encrypting sensitive data is a common desensitization method.

[0073] Since this application needs to determine different desensitization methods according to the specific security level of the device, in order to determine the security level of the device, it is necessary to determine the current data of the device that is used to characterize the security level of the device. Among them, device security data can refer to data related to security information of the device itself, such as: whether the device itself has security protection software such as firewalls, etc. When the device has software such as firewalls, the security factor is higher than the security factor when firewalls and other protection software are not installed; environmental security data can refer to data used to characterize whether the environment in which the device is located is safe, for example: whether the network in which the device is located is a public network or a private network, and the security factor of a private network is higher than that of a public network.

[0074] In addition, relevant security data can be obtained by installing corresponding detection software. For example, the detection software can detect whether there is security software such as a firewall in the terminal device, or detect the network environment of the terminal device.

[0075] 202. Determine a target security level of a target terminal device based on the device security data and the environmental security data.

[0076] The target security level in this application is based on the device security data and the environmental security data. If the device security data and the environmental security data change, the target security level will also change accordingly.

[0077] According to the above embodiment, after obtaining the device security data and the environmental security data, the target security level of the target terminal device can be determined. For example: if the target terminal device has security protection software such as a firewall installed, and is in a private network at the same time, the target security level of the target terminal device can be determined to be high. If the target terminal device has security protection software such as a firewall installed, but is in a public network, or the target terminal device has no security protection software such as a firewall installed, but is in a private network, the target security level of the target terminal device can be determined to be medium. If the target terminal device has no security protection software such as a firewall installed, and is in a public network at the same time, the target security level of the target terminal device can be determined to be low.

[0078] It should be noted that the device safety data and environmental safety data involved in this embodiment are only one or several of them. In specific circumstances, the device safety data and environmental safety data may also include other types of data, which are not specifically limited here.

[0079] In order to better implement the embodiments of the present application, in one embodiment of the present application, the target security level of the target terminal device is determined according to the device security data and the environmental security data, including:

[0080] According to the device security data, the first security level of the target terminal device is determined; according to the environmental security data, the second security level of the target terminal device is determined; according to the first security level and the second security level, the target security level of the target terminal device is determined.

[0081] The above embodiment shows a solution for directly determining the target security level of a target terminal device based on the device security data and the environmental security data. In order to make the final target security level more accurate, the first security level of the terminal device can be determined based on the device security data, and the first security level can be the security level of the terminal device itself.

[0082] After the first security level is determined, the second security level of the terminal device is determined according to the environmental security data. The second security level may be the environmental security level of the terminal device.

[0083] Specifically, the first security level can be determined as the first level, the second level, the third level, etc. according to the equipment security data; the second security level can be determined as the first level, the second level, the third level, etc. according to the environment security data. It should be noted that the higher the security level, the higher the security of the equipment.

[0084] Specifically, for the first security level, if the terminal device not only has a firewall installed, but also has other security protections installed, it can be determined that the first security level of the terminal device can be the third level. If only one type of protection software is installed, it can be determined that the first security level of the terminal device can be the second level. If no security protection software is installed, the first security level of the terminal device can be the first level.

[0085] Regarding the second security level, if the terminal device is in a private network, such as a local area network, the second security level of the terminal device can be the third level. If the terminal device is in a public network, such as the Internet, but the frequency of access by other devices is low, it can be determined that the second security level of the terminal device can be the second level. If the terminal device is in a public network, but the frequency of access by other devices is high, it can be determined that the second security level of the terminal device can be the first level.

[0086] The above-mentioned determination of the first security level and the second security level of the terminal device is only one of many implementation methods, which is not specifically limited here.

[0087] After determining the first and second security levels, the target security level can be determined by the following formula ①:

[0088] (x+y) / 2=z……①

[0089] Among them, x is the first security level, y is the second security level, and z is the target security level. Assuming that the first security level only has the first, second, and third levels, and the second security level is the first, second, and third level, of course, in actual situations, the first security level and the second security level may not only have three levels, and can be set according to specific circumstances.

[0090] At this time, if the first security level is the first level and the second security level is the second level, substitute the above formula ①, then it can be determined that the target security level is 1.5. In order to facilitate the correspondence with the subsequent desensitization strategy, it is also necessary to convert the target security level into an integer security level. At this time, according to the rounding rule, 1.5 can be converted to 2. At this time, the target security level is the second level.

[0091] This embodiment only provides an implementation method for determining the target security level of a target terminal device based on a first security level and a second security level. Of course, other implementation methods for determining the target security level of a target terminal device based on a first security level and a second security level are also included, and the specific implementation methods are not limited here.

[0092] In order to better implement the embodiment of the present application, in one embodiment of the present application, the device security data includes a sensitive information protection policy of the target terminal, and the first security level of the target terminal device is determined according to the device security data, including:

[0093] According to the sensitive information protection strategy of the target terminal, the security protection level of the target terminal is determined; according to the security protection level of the target terminal device, the first security level of the target terminal device is determined.

[0094] According to the above embodiment, the first security level of the target terminal device can be determined by determining whether the terminal device has installed security protection software. However, for the same security protection software, different security protection settings, that is, sensitive information protection strategies, are also different. For example: when generating relevant logs, sensitive information can be encrypted multiple times, or sensitive information can be encrypted once, or sensitive information can be partially encrypted, such as only encrypting the privacy data of some users, or not encrypting any sensitive data, etc.

[0095] Therefore, the corresponding security protection level can be determined according to the specific sensitive information protection strategy. For example, the security protection level for multiple encryption of sensitive information can be high, the security protection level for single encryption of sensitive information can be relatively high, the security protection level for only encrypting the private data of some users can be medium, and the security protection level for not encrypting any sensitive data can be low.

[0096] When the security protection level is high, the first security level of the target terminal device can be the fourth level; when the security protection level is relatively high, the first security level of the target terminal device can be the third level; when the security protection level is medium, the first security level of the target terminal device can be the second level; when the security protection level is low, the first security level of the target terminal device can be the first level.

[0097] It should be noted that the first security level of the target terminal device determined according to the sensitive information protection strategy provided in this embodiment is only one of many embodiments and is not specifically limited here.

[0098] In order to better implement the embodiments of the present application, in one embodiment of the present application, the security protection level of the target terminal is determined according to the sensitive information protection strategy of the target terminal, including:

[0099] Obtain the protection success rate of the sensitive information protection strategy; determine the security protection level of the target terminal based on the protection success rate.

[0100] In the above embodiment, a sensitive information protection strategy is disclosed. However, as the encryption method of sensitive data is different, the specific protection effect is also different. The embodiment of the present application also provides an implementation method for determining the security protection level of the target terminal based on the protection success rate.

[0101] For example: when the protection success rate of the sensitive information protection strategy is 100% to 76%, it can be determined that the security protection level of the target terminal is high; when the protection success rate of the sensitive information protection strategy is 75% to 51%, it can be determined that the security protection level of the target terminal is relatively high; when the protection success rate of the sensitive information protection strategy is 50% to 26%, it can be determined that the security protection level of the target terminal is medium; when the protection success rate of the sensitive information protection strategy is 25% to 0%, it can be determined that the security protection level of the target terminal is low.

[0102] It should be noted that the method of determining the security protection level of the target terminal according to the protection success rate provided in this embodiment is only one of many embodiments and is not specifically limited here.

[0103] In order to better implement the embodiment of the present application, in one embodiment of the present application, the environmental security data includes the intrusion frequency of the target terminal device and the current geographical location information of the target terminal device, and the second security level of the target terminal device is determined according to the environmental security data, including:

[0104] The environmental security level of the target terminal device is determined based on the intrusion frequency and geographical location information; and the second security level of the target terminal device is determined based on the environmental security level.

[0105] According to the above embodiment, the second security level of the target terminal device can be determined by the network environment of the target terminal device. In order to make the second security level more accurate, this embodiment can also determine the second security level of the terminal device by the frequency of intrusion and geographical location information.

[0106] For example, when the intrusion frequency is low and the terminal device is located in China, the environmental security level of the target terminal device can be high; when the intrusion frequency is low and the terminal device is located outside China, the environmental security level of the target terminal device can be high; when the intrusion frequency is high and the terminal device is located in China, the environmental security level of the target terminal device can be medium; when the intrusion frequency is high and the terminal device is located outside China, the environmental security level of the target terminal device can be low.

[0107] Therefore, after the environmental safety level of the target terminal device is determined, the second security level of the target terminal device can be determined. For example, when the environmental safety level of the target terminal device is high, the second security level of the terminal device can be the fourth level; when the environmental safety level of the target terminal device is relatively high, the second security level of the terminal device can be the third level; when the environmental safety level of the target terminal device is medium, the second security level of the terminal device can be the second level; when the environmental safety level of the target terminal device is low, the second security level of the terminal device can be the first level.

[0108] It should be noted that the second security level of the target terminal device determined according to the intrusion frequency and geographical location information provided in this embodiment is only one of many embodiments and is not specifically limited here.

[0109] In order to better implement the embodiment of the present application, in one embodiment of the present application, determining the target security level of the target terminal device according to the first security level and the second security level includes:

[0110] The weight of the first security level and the weight of the second security level are determined respectively; and the target security level of the target terminal device is determined according to the first security level, the weight of the first security level, the second security level and the weight of the second security level.

[0111] According to the above embodiment, the first security level can refer to the security level of the terminal device itself, and the second security level can refer to the security level of the terminal device in relation to the environment. In the above formula ①, the target security level is obtained only by averaging. However, depending on different actual situations, the proportions of the first security level and the second security level may be different. Therefore, it is necessary to add corresponding weights to the first security level and the second security level so that the target security level finally obtained is more accurate.

[0112] For example, if the terminal device is located in China, it can be considered that the terminal device has a higher environmental safety level, so the weight of the second security level can be appropriately increased. For example, the weight of the first security level can be 0.4, and the weight of the second security level can be 0.6. Therefore, the weights of the first security level and the second security level can be determined according to actual conditions.

[0113] After the weights of the first and second security levels are determined, the target security level can be calculated according to the following formula ②:

[0114] ax+by=z,a+b=1……②

[0115] Wherein, a and b represent the weights of the first security level and the second security level respectively; x represents the first security level; y represents the second security level; and z represents the target security level. If the target security level is a non-integer, the non-integer target security level can be converted into an integer by rounding.

[0116] 203. According to the target security level, obtain a log desensitization strategy corresponding to the target security level.

[0117] According to the above embodiment, after the target security level of the terminal device is determined, it is necessary to determine the log desensitization strategy corresponding to the target security level to desensitize the sensitive information in the log of the terminal device.

[0118] Among them, different log desensitization strategies can be stored in different storage devices, and one storage device can correspond to a target security level. After obtaining the target security level, the log desensitization strategy in the storage device corresponding to the target security level can be obtained. For example: when the target security level is the first level, the log desensitization strategy in the first storage device can be obtained. According to the above embodiment, the first level can be the lowest security level, so the log desensitization strategy in the first storage device can be a more stringent desensitization strategy, such as multiple encryption.

[0119] In order to better implement the embodiment of the present application, in an embodiment of the present application, according to the target security level, a log desensitization strategy corresponding to the target security level is obtained, including:

[0120] Obtain a comparison table of preset security levels and desensitization strategies; based on the comparison table of security levels and desensitization strategies, obtain the log desensitization strategy corresponding to the target security level.

[0121] According to the above embodiments, different log desensitization strategies can be stored in different storage devices. In order to save storage costs, identification marks can be added to different log desensitization strategies, and the identification information can be stored in a comparison table of security levels and desensitization strategies, so that after the target security level is determined, the log desensitization strategy corresponding to the target security level can be determined directly according to the comparison table of security levels and desensitization strategies.

[0122] 204. Desensitize the logs of the target terminal device according to the log desensitization policy corresponding to the target security level.

[0123] When the log desensitization policy corresponding to the target security level is obtained, the logs can be desensitized directly according to the execution method in the log desensitization policy. The details will not be repeated here.

[0124] The log desensitization method provided in the present application determines the security level associated with the device, and thus can determine the desensitization strategy corresponding to the security level according to the security level associated with the device, thereby achieving the effect that different security levels correspond to different desensitization strategies, and improving the flexibility of the device in desensitizing the logs.

[0125] In order to better implement the log desensitization method in the embodiment of the present application, in addition to the log desensitization method, the embodiment of the present application also provides a log desensitization device, such as Figure 3 As shown, the device 300 includes:

[0126] The first acquisition module 301 is used to acquire device security data and environmental security data of a target terminal device;

[0127] A determination module 302, for determining a target security level of a target terminal device according to the device security data and the environmental security data;

[0128] The second acquisition module 303 is used to acquire a log desensitization strategy corresponding to the target security level according to the target security level;

[0129] The desensitization module 304 is used to desensitize the logs of the target terminal device according to the log desensitization policy corresponding to the target security level.

[0130] The log desensitization device provided in the present application obtains the device security data and environmental security data of the target terminal device through the first acquisition module 301, and then determines the device-related security level according to the device security data and the environmental security data through the determination module 302, so that the desensitization strategy corresponding to the security level can be determined according to the device-related security level through the second acquisition module 303, and finally the logs in the device are desensitized through the desensitization module 304, so as to achieve the effect that different security levels correspond to different desensitization strategies, thereby improving the flexibility of the device in desensitizing the logs.

[0131] In some embodiments of the present application, the determination module 302 is specifically used to:

[0132] Determine a first security level of the target terminal device according to the device security data;

[0133] Determine the second security level of the target terminal device according to the environmental security data;

[0134] A target security level of the target terminal device is determined according to the first security level and the second security level.

[0135] In some embodiments of the present application, the determination module 302 is further configured to:

[0136] Determine the security protection level of the target terminal based on the sensitive information protection strategy of the target terminal;

[0137] According to the security protection level of the target terminal device, a first security level of the target terminal device is determined.

[0138] In some embodiments of the present application, the determination module 302 is further configured to:

[0139] Obtain the protection success rate of sensitive information protection strategies;

[0140] Determine the security protection level of the target terminal based on the protection success rate.

[0141] In some embodiments of the present application, the determination module 302 is further configured to:

[0142] Determine the environmental security level of the target terminal device based on the intrusion frequency and geographic location information;

[0143] According to the environmental security level, the second security level of the target terminal device is determined.

[0144] In some embodiments of the present application, the determination module 302 is further configured to:

[0145] respectively determining a weight of the first security level and a weight of the second security level;

[0146] A target security level of the target terminal device is determined according to the first security level, the weight of the first security level, the second security level, and the weight of the second security level.

[0147] In some embodiments of the present application, the second acquisition module 303 is specifically used to:

[0148] Obtain a comparison table of preset security levels and desensitization strategies;

[0149] According to the comparison table of security levels and desensitization strategies, obtain the log desensitization strategy corresponding to the target security level.

[0150] The present application also provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and executable on the processor, and the processor executes the computer program to implement the steps in any one of the log desensitization methods in the present application. Figure 4 As shown, it shows a schematic diagram of the structure of the terminal device involved in the embodiment of the present application, specifically:

[0151] The terminal device may include one or more processing core processors 401, one or more computer-readable storage media memories 402, a power supply 403, an input unit 404 and other components. Those skilled in the art will appreciate that Figure 4 The terminal device structure shown in the figure does not constitute a limitation on the terminal device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently. Among them:

[0152] The processor 401 is the control center of the terminal device, and uses various interfaces and lines to connect various parts of the entire terminal device. By running or executing software programs and / or modules stored in the memory 402, and calling data stored in the memory 402, the processor 401 executes various functions of the terminal device and processes data, thereby monitoring the terminal device as a whole. Optionally, the processor 401 may include one or more processing cores; the processor 401 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. Preferably, the processor 401 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, the user interface and the application program, etc., and the modem processor mainly processes wireless communication. It is understandable that the above-mentioned modem processor may not be integrated into the processor 401.

[0153] The memory 402 can be used to store software programs and modules. The processor 401 executes various functional applications and data processing by running the software programs and modules stored in the memory 402. The memory 402 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the terminal device, etc. In addition, the memory 402 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices. Accordingly, the memory 402 may also include a memory controller to provide the processor 401 with access to the memory 402.

[0154] The terminal device also includes a power supply 403 for supplying power to each component. Preferably, the power supply 403 can be logically connected to the processor 401 through a power management system, so as to manage charging, discharging, power consumption management and other functions through the power management system. The power supply 403 can also include any components such as one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, and power status indicators.

[0155] The terminal device may further include an input unit 404, which may be used to receive input digital or character information and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.

[0156] Although not shown, the terminal device may further include a display unit, etc., which will not be described in detail herein. Specifically in this embodiment, the processor 401 in the terminal device will load the executable files corresponding to the processes of one or more application programs into the memory 402 according to the following instructions, and the processor 401 will run the application programs stored in the memory 402, thereby realizing various functions, such as:

[0157] Obtain device security data and environmental security data of the target terminal device;

[0158] Determine the target security level of the target terminal device based on the device security data and environmental security data;

[0159] According to the target security level, obtain the log desensitization strategy corresponding to the target security level;

[0160] According to the log desensitization policy corresponding to the target security level, the logs of the target terminal device are desensitized.

[0161] A person of ordinary skill in the art will appreciate that all or part of the steps in the various methods of the above embodiments may be completed by instructions, or by controlling related hardware through instructions. The instructions may be stored in a computer-readable storage medium and loaded and executed by a processor.

[0162] To this end, an embodiment of the present application provides a computer-readable storage medium, which may include: a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, etc. A computer program is stored thereon, and the computer program is loaded by a processor to execute the steps in any log desensitization method provided in an embodiment of the present application. For example, the computer program loaded by the processor can execute the following steps:

[0163] Obtain device security data and environmental security data of the target terminal device;

[0164] Determine the target security level of the target terminal device based on the device security data and environmental security data;

[0165] According to the target security level, obtain the log desensitization strategy corresponding to the target security level;

[0166] According to the log desensitization policy corresponding to the target security level, the logs of the target terminal device are desensitized.

[0167] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the detailed description of other embodiments above, and will not be repeated here.

[0168] In specific implementation, the above units or structures can be implemented as independent entities, or can be arbitrarily combined to be implemented as the same or several entities. The specific implementation of the above units or structures can refer to the previous method embodiments, which will not be repeated here.

[0169] The specific implementation of the above operations can be found in the previous embodiments, which will not be described in detail here.

[0170] The above is a detailed introduction to a log desensitization method and device provided in an embodiment of the present application. This article uses specific examples to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A log desensitization method, characterized in that: The method comprises: Acquire device security data and environmental security data of a target terminal device, wherein the device security data indicates security protection software installed on the target terminal device and a sensitive information protection strategy adopted by the security protection software; Determining, according to the sensitive information protection policy of the target terminal, the security protection degree of the sensitive information protection policy for the target terminal; Determining a first security level of the target terminal device according to the security protection level of the target terminal device; Determining a second security level of the target terminal device according to the environmental security data; Determining a target security level of the target terminal device according to the first security level and the second security level; According to the target security level, obtaining a log desensitization strategy corresponding to the target security level; The logs of the target terminal device are desensitized according to the log desensitization policy corresponding to the target security level.

2. The log desensitization method according to claim 1, characterized in that: The determining the security protection level of the target terminal according to the sensitive information protection strategy of the target terminal includes: Obtaining the protection success rate of the sensitive information protection strategy; The security protection degree of the target terminal is determined according to the protection success rate.

3. The log desensitization method according to claim 1, characterized in that: The environmental security data includes the intrusion frequency of the target terminal device and the current geographical location information of the target terminal device, and determining the second security level of the target terminal device according to the environmental security data includes: Determining the environmental security level of the target terminal device according to the intrusion frequency and the geographical location information; A second security level of the target terminal device is determined according to the environmental security level.

4. The log desensitization method according to claim 1, characterized in that: The determining, according to the first security level and the second security level, a target security level of the target terminal device includes: respectively determining a weight of the first security level and a weight of the second security level; A target security level of the target terminal device is determined according to the first security level, the weight of the first security level, the second security level, and the weight of the second security level.

5. The log desensitization method according to claim 1, characterized in that: The acquiring, according to the target security level, a log desensitization strategy corresponding to the target security level includes: Obtain a comparison table of preset security levels and desensitization strategies; According to the comparison table of the security level and the desensitization strategy, obtain the log desensitization strategy corresponding to the target security level.

6. A log desensitization device, characterized in that: The device comprises: A first acquisition module is used to acquire device security data and environmental security data of a target terminal device, wherein the device security data indicates the security protection software installed on the target terminal device and the sensitive information protection strategy adopted by the security protection software; a determination module, configured to determine, according to the sensitive information protection policy of the target terminal, the security protection degree of the sensitive information protection policy for the target terminal; determine, according to the security protection degree of the target terminal device, a first security level of the target terminal device; determine, according to the environmental security data, a second security level of the target terminal device; and determine, according to the first security level and the second security level, a target security level of the target terminal device; A second acquisition module is used to acquire a log desensitization strategy corresponding to the target security level according to the target security level; The desensitization module is used to desensitize the logs of the target terminal device according to the log desensitization strategy corresponding to the target security level.

7. A terminal device, characterized in that: The terminal device includes a processor, a memory, and a computer program stored in the memory and executable on the processor, and the processor executes the computer program to implement the steps in the log desensitization method described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the steps in the log desensitization method according to any one of claims 1 to 5.

Images