Data security assessment system and method and storage medium

Abstract

The invention relates to the technical field of data security management, in particular to a data security assessment system and method and a storage medium, and the system comprises a data security assessment platform, a potential risk division unit, a data risk analysis unit, a periodic loss analysis unit, a storage performance analysis unit and a management response unit. According to the method, data security level assessment feedback analysis is carried out on the management information, meanwhile, the storage risk of the data is analyzed, so that storage security management is carried out on the current storage data, and analysis is carried out from the aspect of loss change of the current storage equipment under long-term use; according to the method, the current storage device is used for acquiring the influence condition of the current storage device on the data storage security and the like, and the storage security performance is evaluated and analyzed in a layer-by-layer progressive manner, so that on one hand, the security and the security level of the current storage data can be intuitively known, and on the other hand, reasonable and targeted data storage management can be carried out according to the displayed numerical value.

Description

Technical Field

[0001] The present invention relates to the technical field of data security management, and in particular to a data security assessment system, method and storage medium. Background Art

[0002] With the advent of the big data era, all kinds of companies are facing more and more data leakage and privacy protection issues. Data security assessment, risk assessment and compliance assessment can help companies identify and solve potential data security issues and reduce the risk of data leakage and privacy infringement. Data security assessment is a systematic method used to evaluate the security of data stored, processed and transmitted within a company. However, in existing data storage security assessment technologies, it is impossible to analyze the potential risks of data storage under the current storage solution and environment, thereby reducing data storage security. It is also impossible to conduct multi-angle assessment and analysis of current data storage risks, reducing the accuracy of data storage security assessment. It is also impossible to conduct storage security analysis in combination with the defects of the equipment itself, thereby failing to accurately assess the data storage security level. In view of the above technical defects, a solution is now proposed. Summary of the invention

[0003] The purpose of the present invention is to provide a data security assessment system, method and storage medium to solve the technical defects mentioned above. The present invention performs data security level assessment feedback analysis on management information, and analyzes the data storage risk itself by combining information, so as to perform storage security management on the current stored data according to the information feedback. By analyzing the change in the loss of the current storage device itself under long-term use, the impact of the current storage device on data storage security is understood, and storage security performance evaluation and analysis is performed in a step-by-step manner. On the one hand, it helps to intuitively understand the security and security level of the current stored data, and on the other hand, it helps to perform reasonable and targeted data storage management according to the displayed values ​​to improve the security of data storage.

[0004] Preferably, the object of the present invention can be achieved by the following technical solutions: a data security assessment system, comprising a data security assessment platform, a potential risk classification unit, a data risk analysis unit, a cycle loss analysis unit, a storage performance analysis unit, and a management response unit; The data security assessment platform is used to collect potential risk information of currently stored data and send the potential risk information to the potential risk classification unit; After receiving the potential risk information, the potential risk classification unit immediately performs data potential risk supervision analysis on the potential risk information, determines and processes the obtained potential risk value and potential interference value, and obtains a control signal; The data risk analysis unit is used to collect management information of currently stored data, and perform data security level assessment feedback analysis on the management information to obtain a data security level SD, perform discrimination processing on the obtained data security level SD, and obtain an alarm signal; The periodic loss analysis unit is used to collect dynamic risk information of the current storage device, and perform storage loss interference risk analysis on the dynamic risk information to obtain a periodic attenuation coefficient ZJ; The storage performance analysis unit is used to retrieve the data security level SD and the periodic attenuation coefficient ZJ of the current stored data, and perform storage security performance evaluation and analysis to obtain the storage security level.

[0005] Preferably, the data potential risk supervision and analysis process of the potential risk division unit is as follows: The current data storage period is obtained and set as a time threshold, and the potential risk information of the currently stored data within the time threshold is obtained, the potential risk information includes a data risk index and an external interference index, and the data risk index and the external interference index are compared and analyzed with the preset data risk index interval and the preset external interference index interval stored in the internal data entry, and the risk coefficient set for the data risk index in the preset data risk index interval and the interference coefficient set for the external interference index in the preset external interference index interval are obtained respectively; The risk coefficient and interference coefficient corresponding to the current stored data within the time threshold are obtained, and are set as potential risk values ​​and potential interference values. The potential risk values ​​and potential interference values ​​are determined and processed to obtain a pipe adjustment signal.

[0006] Preferably, the data security level assessment feedback analysis process of the data risk analysis unit is as follows: Obtain management information of currently stored data within a time threshold, including a permission division index and an access connection index; The permission division index indicates the total access duration corresponding to the accounts whose authorization to access the currently stored data has been cancelled but not deleted among the total number of authorized access accounts; The access connection index indicates the maximum value of the duration between the start time and the interruption time of the keyless connection access in the access list of the current storage data.

[0007] Preferably, the potential risk value and potential interference value of the currently stored data within the time threshold are retrieved, and the potential risk value, potential interference value, authority division index and access connection index are set to QF, QG, QH and FL respectively; According to the formula, the data risk assessment coefficient AQ of the currently stored data is obtained, and the data risk assessment coefficient AQ is compared and analyzed with the preset AQmin and preset AQmax stored in the internal storage, AQmin<AQmax: the primary storage, secondary storage and tertiary storage are obtained, and the primary storage, secondary storage and tertiary storage are set as data security levels SD respectively, SD=1, 2, 3, and the data security level SD of the currently stored data is obtained, and the data security level SD is judged: If the data security level SD=1, no signal is generated; If the data security level SD=2 or the data security level SD=3, an alarm signal is generated.

[0008] Preferably, the storage loss interference risk analysis process of the periodic loss analysis unit is as follows: Obtain dynamic risk information of the current storage device corresponding to the current storage data within the time threshold, the dynamic risk information including component loss value and load resistance index; Obtain the component loss value and load resistance index corresponding to the moment when the current storage device begins to be used, and set them as the initial component value and initial load value respectively, and set the value obtained by subtracting the initial component value from the component loss value and the value obtained by subtracting the load resistance index from the initial load value as the periodic loss value and the periodic load value respectively; The periodic trend risk coefficient S is obtained according to the formula, and the periodic trend risk coefficient S is compared and analyzed with the preset periodic trend risk coefficient interval stored internally, so as to obtain the periodic attenuation coefficient ZJ set in the periodic trend risk coefficient interval corresponding to the preset periodic trend risk coefficient interval.

[0009] Preferably, the component loss value represents the sum of the vibration frequency and rust area of ​​the hard disk of the current storage device after data normalization; the load resistance index represents the time from the moment the hard disk of the current storage device starts to be used to the moment when the operating temperature exceeds the preset operating temperature threshold; Preferably, the storage security performance evaluation and analysis process of the storage performance analysis unit is as follows: The data security level SD and periodic attenuation coefficient ZJ of the currently stored data are obtained, and the product value obtained by multiplying the numerical values ​​corresponding to the data security level SD and the periodic attenuation coefficient ZJ is set as the storage security performance coefficient. The storage security performance coefficient is compared and analyzed with the preset storage security performance coefficient range entered and stored internally, and the storage security level set in the preset storage security performance coefficient range corresponding to the storage security performance coefficient is obtained.

[0010] The beneficial effects of the present invention are as follows: The present invention conducts preliminary analysis from the perspective of potential impact to understand the potential risk of stored data, so as to manage and adjust the current storage scheme and current storage device, which is helpful to improve the security level of stored data, and further conducts data security level assessment feedback analysis on management information, and analyzes the storage risk of data itself by combining information, so as to perform storage security management of current stored data according to information feedback; The present invention analyzes the changes in the loss of the current storage device itself under long-term use to understand the impact of the current storage device on data storage security, etc., and performs storage security performance evaluation and analysis in a step-by-step manner. On the one hand, it helps to intuitively understand the security and security level of the current stored data, and on the other hand, it helps to perform reasonable and targeted data storage management according to the displayed values ​​to improve the security of data storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] The present invention will be further described below in conjunction with the accompanying drawings; Figure 1 It is a flowchart of the system of the present invention; Figure 2 It is a reference analysis diagram of the method of the present invention. DETAILED DESCRIPTION

[0012] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0013] Example 1: Please refer to Figure 1 to Figure 2 As shown, the present invention is a data security assessment system, including a data security assessment platform, a potential risk classification unit, a data risk analysis unit, a periodic loss analysis unit, a storage performance analysis unit and a management response unit, the data security assessment platform is bidirectionally connected to the potential risk classification unit and the periodic loss analysis unit, the data security assessment platform is unidirectionally connected to the data risk analysis unit and the storage performance analysis unit, the data risk analysis unit and the storage performance analysis unit are unidirectionally connected to the management response unit, and the potential risk classification unit is unidirectionally connected to the management response unit; The data security assessment platform is used to collect potential risk information of currently stored data and send the potential risk information to the potential risk classification unit. After receiving the potential risk information, the potential risk classification unit immediately performs data potential risk supervision and analysis on the potential risk information, so as to manage and adjust the current storage scheme and the current storage device to reduce the potential risk of the stored data, thereby helping to improve the security level of the stored data. The specific data potential risk supervision and analysis process is as follows: The current data storage period is obtained and set as a time threshold, and the potential risk information of the currently stored data within the time threshold is obtained, the potential risk information includes a data risk index and an external interference index, and the data risk index and the external interference index are compared and analyzed with the preset data risk index interval and the preset external interference index interval stored in the internal data entry, and the risk coefficient set for the data risk index in the preset data risk index interval and the interference coefficient set for the external interference index in the preset external interference index interval are obtained respectively; Obtain the risk coefficient and interference coefficient corresponding to the currently stored data within the time threshold, set them as potential risk values ​​and potential interference values, and send the potential risk values ​​and potential interference values ​​to the data security assessment platform; Determine and process the potential risk value and potential interference value: If the potential risk value and the potential interference value are greater than or equal to the corresponding preset threshold, a control adjustment signal is generated and sent to the management response unit. After receiving the control adjustment signal, the management response unit immediately performs a preset warning operation corresponding to the control adjustment signal, so as to manage and adjust the current storage solution and the current storage device to reduce the potential risk of the stored data, thereby helping to improve the security level of the stored data; If neither the potential risk value nor the potential interference value is greater than or equal to the corresponding preset threshold, no signal is generated; In the embodiment of the present invention, the preset data risk index interval and the preset external interference index interval are both set with corresponding risk coefficients and interference coefficients, and the set values ​​are set according to personnel; In the embodiment of the present invention, the data risk index indicates the number of times data is lost or tampered with under the current storage solution. It should be noted that the data risk index reflects the potential risk of the current storage solution. In the embodiment of the present invention, the external interference index indicates the number of values ​​corresponding to the environmental data of the current storage device that exceed the preset threshold value within the historical g time thresholds, where g is a natural number greater than zero, and the environmental data includes electromagnetic interference values, temperature values, etc. It should be noted that the external interference index reflects the risk probability of the environment of the current storage device affecting the data; The data risk analysis unit is used to collect management information of currently stored data, and perform data security level assessment feedback analysis on the management information to understand the data security risk situation of the currently stored data, so as to perform storage security management on the currently stored data according to the information feedback situation, so as to improve the security of the currently stored data. The specific data security level assessment feedback analysis process is as follows: Obtain management information of currently stored data within a time threshold, including a permission division index and an access connection index; In the embodiment of the present invention, the authority division index indicates the total access duration corresponding to the accounts whose authorized access has been cancelled but not deleted in the total number of authorized access accounts of the currently stored data. It should be noted that the larger the value of the authority division index is, the greater the risk of loss or leakage of the currently stored data is; In the embodiment of the present invention, the access connection index represents the maximum value of the duration between the start time and the interruption time of the keyless connection access in the access list of the current storage data. It should be noted that the larger the value of the access connection index is, the greater the abnormal risk of the actual access management under the current storage solution is, and the greater the risk of data loss or leakage is; Retrieving a potential risk value and a potential interference value of currently stored data within a time threshold, and setting the potential risk value, the potential interference value, the authority division index, and the access connection index to QF, QG, QH, and FL, respectively; According to the formula The data risk assessment coefficient of the currently stored data is obtained, where a1, a2, a3 and a4 are preset proportional factor coefficients of the potential risk value, potential interference value, authority division index and access connection index respectively. The proportional factor coefficient is used to correct the deviation of various parameters in the formula calculation process, so as to make the calculation result more accurate. A5 is the preset error correction factor coefficient. A1, a2, a3, a4 and a5 are all greater than zero. AQ is the data risk assessment coefficient of the currently stored data. The data risk assessment coefficient AQ is compared and analyzed with the preset AQmin and preset AQmax stored in its internal input. AQmin<AQmax: If the data risk assessment coefficient AQ is less than AQmin, it is determined to be primary storage; If AQmin≤data risk assessment coefficient AQ≤AQmax, it is determined to be secondary storage; If the data risk assessment coefficient AQ ≥ AQmax, it is determined to be three-level storage, among which the storage risks corresponding to the primary storage, secondary storage and tertiary storage are abnormally increased. The primary storage, secondary storage and tertiary storage are set to data security levels SD, SD=1, 2, 3, respectively, that is, data security level SD=1 indicates primary storage, data security level SD=2 indicates secondary storage, data security level SD=3 indicates tertiary storage, and the data security level SD of the current storage data is obtained, and the data security level SD is judged: If the data security level SD=1, no signal is generated; If the data security level SD=2 or the data security level SD=3, an alarm signal is generated and sent to the management response unit. After receiving the alarm signal, the management response unit immediately displays the preset warning text corresponding to the alarm signal, so as to perform storage security management on the current stored data according to the information feedback to improve the security of the current stored data.

[0014] Embodiment 2: The periodic loss analysis unit is used to collect dynamic risk information of the current storage device and perform storage loss interference risk analysis on the dynamic risk information to understand the change of the data storage security level of the current storage device, that is, the change of the device loss of the current storage device itself under long-term use. The specific storage loss interference risk analysis process is as follows: Obtain dynamic risk information of the current storage device corresponding to the current storage data within the time threshold, the dynamic risk information including component loss value and load resistance index; In the embodiment of the present invention, the component loss value represents the sum of the vibration frequency and the rust area of ​​the current storage device hard disk after data normalization. It should be noted that the greater the component loss value, the greater the risk of the current storage device hard disk, and the greater the data risk; In the embodiment of the present invention, the load resistance index indicates the time from the moment when the hard disk of the current storage device starts to be used to the moment when the operating temperature exceeds the preset operating temperature threshold. It should be noted that the smaller the value of the load resistance index is, the greater the hard disk loss risk is, and the greater the data storage risk is; Obtain the component loss value and load resistance index corresponding to the moment when the current storage device begins to be used, and set them as the initial component value and initial load value respectively; subtract the component loss value from the initial component value and the initial load value from the load resistance index as the periodic loss value and periodic load value respectively. It should be noted that the larger the values ​​of the periodic loss value and the periodic load value are, the greater the data storage risk is; In the embodiment of the present invention, according to the formula Obtain the periodic trend risk coefficient, where ZS represents the periodic loss value, ZF represents the periodic load value, f1 and f2 are respectively the preset weight factor coefficients of the periodic loss value and the periodic load value, f3 is the preset fault tolerance factor coefficient, f1, f2 and f3 are all greater than zero, and the periodic trend risk coefficient S is compared and analyzed with the preset periodic trend risk coefficient interval stored in the internal data entry, and then the periodic attenuation coefficient ZJ set in the periodic trend risk coefficient S corresponding to the preset periodic trend risk coefficient interval is obtained, and the periodic attenuation coefficient is sent to the data security assessment platform; In the embodiment of the present invention, the periodic attenuation coefficient ZJ is a manually set value, and each preset periodic trend risk coefficient interval is set with a corresponding periodic attenuation coefficient ZJ, and the larger the value of the periodic attenuation coefficient ZJ, the greater the data storage risk; The storage performance analysis unit is used to retrieve the data security level SD and the periodic attenuation coefficient ZJ of the current storage data, and perform storage security performance evaluation and analysis to understand the overall security of the current storage data. The specific storage security performance evaluation and analysis process is as follows: The data security level SD and the periodic attenuation coefficient ZJ of the currently stored data are obtained, and the product value obtained by multiplying the values ​​corresponding to the data security level SD and the periodic attenuation coefficient ZJ is set as the storage security performance coefficient, and the storage security performance coefficient is compared and analyzed with the preset storage security performance coefficient interval entered and stored internally, and the storage security level set in the preset storage security performance coefficient interval corresponding to the storage security performance coefficient is obtained, and the storage security level is sent to the management response unit. After receiving the storage security level, the management response unit immediately displays the preset warning text corresponding to the storage security level, which, on the one hand, helps to intuitively understand the security and security level of the currently stored data, and on the other hand, helps to perform reasonable and targeted data storage management according to the displayed values, so as to improve the security of data storage; In the embodiment of the present invention, the storage security level is a manually set value, each preset storage safety performance coefficient interval is set with a corresponding storage security level, and the larger the value of the storage security level, the greater the data storage risk.

[0015] Embodiment 3: A data security assessment method comprises the following steps: Step 1: Collect the potential risk information of the currently stored data and conduct data potential risk supervision analysis to obtain the potential risk value and potential interference value, and compare and analyze the potential risk value and potential interference value. If a control signal is obtained, feedback management is provided; Step 2: Collect the management information of the currently stored data and conduct data security level assessment feedback analysis. At the same time, analyze the potential risk value, potential interference value, authority division index and access connection index through information fusion to obtain the data security level SD; Step 3: Identify and process the obtained data security level SD. If an alarm signal is obtained, feedback management is provided. Step 4: Collect the dynamic risk information of the current storage device and perform storage loss interference risk analysis, compare and analyze the obtained periodic trend risk coefficient S with the preset periodic trend risk coefficient interval to obtain the periodic attenuation coefficient ZJ; Step 5: Perform storage security performance evaluation and analysis on the data security level SD and the periodic attenuation coefficient ZJ in a progressive manner to obtain the storage security level; A computer-readable storage medium storing a computer program, wherein the computer program implements a data security assessment method when executed by a processor; In summary, the present invention conducts a preliminary analysis from the perspective of potential impact to understand the potential risks of stored data, so as to manage and adjust the current storage scheme and the current storage device, which helps to improve the security level of stored data, and further conducts data security level evaluation feedback analysis on the management information. At the same time, the data storage risk itself is analyzed by combining information, so as to perform storage security management on the current stored data according to the information feedback. By analyzing from the perspective of the change in the loss of the current storage device itself under long-term use, the impact of the current storage device on data storage security, etc. is understood, and storage security performance evaluation and analysis is performed in a step-by-step manner. On the one hand, it helps to intuitively understand the security and security level of the current stored data, and on the other hand, it helps to conduct reasonable and targeted data storage management according to the displayed values ​​to improve the security of data storage.

[0016] The threshold is set to facilitate comparison. The size of the threshold depends on the amount of sample data and the number of bases set by technicians in this field for each group of sample data; as long as it does not affect the proportional relationship between the parameter and the quantized value.

[0017] The above formulas are obtained by collecting a large amount of data for software simulation and selecting a formula that is close to the actual value. The coefficients in the formula are set by technical personnel in this field according to actual conditions. The above is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited to this. Any technical personnel familiar with the technical field within the technical scope disclosed by the present invention, according to the technical solution and the inventive concept of the present invention, make equivalent replacement or change, which should be covered within the protection scope of the present invention.

Claims

1. A data security assessment system, characterized in that: It includes a data security assessment platform, a potential risk classification unit, a data risk analysis unit, a cycle loss analysis unit, a storage performance analysis unit, and a management response unit; The data security assessment platform is used to collect potential risk information of currently stored data and send the potential risk information to the potential risk classification unit; After receiving the potential risk information, the potential risk classification unit immediately performs data potential risk supervision analysis on the potential risk information, determines and processes the obtained potential risk value and potential interference value, and obtains a control signal; The data risk analysis unit is used to collect management information of currently stored data, and perform data security level assessment feedback analysis on the management information to obtain a data security level SD, perform discrimination processing on the obtained data security level SD, and obtain an alarm signal; The periodic loss analysis unit is used to collect dynamic risk information of the current storage device, and perform storage loss interference risk analysis on the dynamic risk information to obtain a periodic attenuation coefficient ZJ; The storage performance analysis unit is used to retrieve the data security level SD and the periodic attenuation coefficient ZJ of the currently stored data, and perform storage security performance evaluation and analysis to obtain the storage security level.

2. A data security assessment system according to claim 1, characterized in that: The data potential risk supervision and analysis process of the potential risk division unit is as follows: The current data storage period is obtained and set as a time threshold, and the potential risk information of the currently stored data within the time threshold is obtained. The potential risk information includes a data risk index and an external interference index. The data risk index and the external interference index are compared and analyzed with the preset data risk index interval and the preset external interference index interval stored in the internal data entry, and the risk coefficient set for the data risk index in the preset data risk index interval and the interference coefficient set for the external interference index in the preset external interference index interval are obtained respectively; The risk coefficient and interference coefficient corresponding to the current stored data within the time threshold are obtained, and are set as potential risk values ​​and potential interference values. The potential risk values ​​and potential interference values ​​are determined and processed to obtain a pipe adjustment signal.

3. A data security assessment system according to claim 2, characterized in that: The data security level assessment feedback analysis process of the data risk analysis unit is as follows: Obtain management information of currently stored data within a time threshold, including a permission division index and an access connection index; The permission division index indicates the total access duration corresponding to the accounts whose authorization to access the currently stored data has been cancelled but not deleted among the total number of authorized access accounts; The access connection index indicates the maximum value of the duration between the start time and the interruption time of the keyless connection access in the access list of the current storage data.

4. A data security assessment system according to claim 3, characterized in that: Retrieving a potential risk value and a potential interference value of currently stored data within a time threshold, and setting the potential risk value, the potential interference value, the authority division index, and the access connection index to QF, QG, QH, and FL, respectively; According to the formula, the data risk assessment coefficient AQ of the currently stored data is obtained, and the data risk assessment coefficient AQ is compared and analyzed with the preset AQmin and preset AQmax stored in the internal storage, AQmin<AQmax: the primary storage, secondary storage and tertiary storage are obtained, and the primary storage, secondary storage and tertiary storage are set as data security levels SD respectively, SD=1, 2, 3, and the data security level SD of the currently stored data is obtained, and the data security level SD is judged: If the data security level SD=1, no signal is generated; If the data security level SD=2 or the data security level SD=3, an alarm signal is generated.

5. A data security assessment system according to claim 4, characterized in that: The storage loss interference risk analysis process of the cycle loss analysis unit is as follows: Obtain dynamic risk information of the current storage device corresponding to the current storage data within the time threshold, the dynamic risk information including component loss value and load resistance index; Obtain the component loss value and load resistance index corresponding to the moment when the current storage device begins to be used, and set them as the initial component value and initial load value respectively, and set the value obtained by subtracting the initial component value from the component loss value and the value obtained by subtracting the load resistance index from the initial load value as the periodic loss value and the periodic load value respectively; The periodic trend risk coefficient S is obtained according to the formula, and the periodic trend risk coefficient S is compared and analyzed with the preset periodic trend risk coefficient interval stored internally, so as to obtain the periodic attenuation coefficient ZJ set in the periodic trend risk coefficient interval corresponding to the preset periodic trend risk coefficient interval.

6. A data security assessment system according to claim 5, characterized in that: The component loss value represents the sum of the vibration frequency and rust area of ​​the current storage device hard disk after data normalization; the load resistance index represents the time between the start of use of the current storage device hard disk and the time when the operating temperature exceeds the preset operating temperature threshold.

7. A data security assessment system according to claim 6, characterized in that: The storage security performance evaluation and analysis process of the storage performance analysis unit is as follows: The data security level SD and periodic attenuation coefficient ZJ of the currently stored data are obtained, and the product value obtained by multiplying the numerical values ​​corresponding to the data security level SD and the periodic attenuation coefficient ZJ is set as the storage security performance coefficient. The storage security performance coefficient is compared and analyzed with the preset storage security performance coefficient range entered and stored internally, and the storage security level set in the preset storage security performance coefficient range corresponding to the storage security performance coefficient is obtained.

8. A data security assessment method, the method being applied to a data security assessment system as claimed in claim 7, characterized in that: The following steps are involved: Step 1: Collect the potential risk information of the currently stored data and conduct data potential risk supervision analysis to obtain the potential risk value and potential interference value, and compare and analyze the potential risk value and potential interference value. If a control signal is obtained, feedback management is provided; Step 2: Collect the management information of the currently stored data and conduct data security level assessment feedback analysis. At the same time, analyze the potential risk value, potential interference value, authority division index and access connection index through information fusion to obtain the data security level SD; Step 3: Identify and process the obtained data security level SD. If an alarm signal is obtained, feedback management is provided. Step 4: Collect the dynamic risk information of the current storage device and perform storage loss interference risk analysis, compare and analyze the obtained periodic trend risk coefficient S with the preset periodic trend risk coefficient interval to obtain the periodic attenuation coefficient ZJ; Step 5: Perform storage security performance evaluation and analysis on the data security level SD and the periodic attenuation coefficient ZJ in a progressive manner to obtain the storage security level.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to claim 8 is implemented.

Images