Security risk evaluation system for cloud printing data transmission

Abstract

The invention discloses a security risk evaluation system for cloud printing data transmission, and relates to the field of cloud printing data transmission security, and the system comprises the following components: a data acquisition module which establishes connection with a server or an interface related to cloud printing data transmission according to configuration information, and performs data acquisition according to a set acquisition frequency; according to the invention, analysis and risk assessment are carried out on a real-time data set through an anomaly detection algorithm and a risk assessment model adopted by the data analysis module, multiple risk factors and indexes are comprehensively considered, quantitative assessment is carried out on abnormal conditions, and the risk assessment accuracy is improved. Therefore, the risk level and possible loss can be judged more accurately, so that the system can discover potential safety risks in time, and the accuracy and efficiency of risk identification are greatly improved.

Description

Technical Field

[0001] The present invention relates to the field of cloud printing data transmission security, and in particular to a security risk assessment system for cloud printing data transmission. Background Art

[0002] With the rapid development of information technology, cloud computing technology has rapidly become an important support for informatization in various fields with its powerful computing power and flexible resource allocation methods. Cloud printing, as an innovative application of cloud computing technology in the field of printing services, has realized the remote, centralized and intelligent printing services through the support of cloud computing platforms. Cloud printing data transmission is the core link in cloud printing services, which involves the safe and efficient transmission of users' printing tasks from local devices (such as computers and mobile phones) to cloud servers, and then the cloud servers distribute the tasks to the target printers for printing.

[0003] However, with the widespread use of cloud printing services, security risks in the data transmission process have gradually been exposed. Traditional security risk assessment methods often rely on post-event analysis, that is, backtracking and analyzing events after security risk events occur to find out the causes and solutions to the problems. They are unable to discover and respond to potential risks in real time, which is obviously insufficient for scenarios with high real-time requirements such as cloud printing data transmission.

[0004] Therefore, how to achieve real-time security monitoring and risk assessment of the cloud printing data transmission process, and timely discover and warn of potential risks has become an urgent problem to be solved in the current cloud printing service field. However, most of the security risk assessment systems for cloud printing data transmission on the market can only meet some of the requirements of the above characteristics. They are unable to timely discover abnormal situations and assess their risk levels through real-time collection and analysis of data in the cloud printing data transmission process, and immediately trigger the early warning mechanism. Therefore, developing a security risk assessment system for cloud printing data transmission that can comprehensively realize the above characteristics is of great significance to improving the efficiency and accuracy of risk response and reducing the impact of security risks on business. Summary of the invention

[0005] The purpose of the present invention is to make up for the shortcomings of the existing technology and provide a security risk assessment system for cloud printing data transmission. It can monitor abnormal situations in the process of cloud printing data transmission in real time. Once potential risks are found, it will immediately trigger the early warning mechanism and notify relevant personnel in time to deal with them, thereby greatly improving the efficiency and accuracy of risk response and reducing the impact of security risks on business.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions: a safety risk assessment system, characterized in that the system includes the following components:

[0007] Data collection module: establishes a connection with a server or interface related to cloud printing data transmission according to the configuration information, and captures the relevant data of cloud printing data transmission from the connected data source in real time according to the set collection frequency;

[0008] Data analysis module: Analyzes the collected data, identifies abnormal situations, such as abnormal traffic and abnormal addresses, and conducts risk assessment on abnormal situations based on the preset security risk assessment model, and generates an assessment report based on the assessment results;

[0009] Early warning module: When the data analysis module identifies potential risks and assesses that the risk level exceeds the preset threshold, the early warning mechanism is triggered, and early warning information is generated. The early warning information is promptly notified to relevant personnel via SMS or email to remind them to pay attention to and deal with potential risks;

[0010] Security policy adjustment module: conducts in-depth analysis of warning information to understand the nature, source and scope of impact of risks, provide a basis for policy adjustment, and adaptively adjusts the security policy of cloud printing data transmission based on risk analysis results, such as strengthening identity authentication and restricting access rights to reduce potential risks.

[0011] Furthermore, the specific steps of the data acquisition module are:

[0012] (1) Initialize the data collection task: set the start time, frequency, and data source parameters of data collection, and establish a connection with the server or interface related to cloud printing data transmission according to the configuration information;

[0013] (2) Data collection: According to the set collection frequency, relevant data of cloud printing data transmission is captured from the connected data source in real time, and the collected raw data is cleaned and formatted to convert it into a data format suitable for subsequent analysis;

[0014] (3) Data sending: The preprocessed data is sent to the data analysis module for further processing.

[0015] Furthermore, the data analysis module specifically comprises the following steps:

[0016] (1) Anomaly detection: Receive pre-processed data from the data acquisition module, use the preset anomaly detection algorithm to analyze the data and identify abnormal situations;

[0017] (2) Risk assessment: Based on the security risk assessment model, conduct risk assessment on the identified abnormal situations, determine the risk level, and organize the risk assessment results into an assessment report, including abnormality details and risk level information;

[0018] (3) Sending results: Sending the evaluation report to the early warning module to trigger the corresponding early warning mechanism. Furthermore, the early warning module specifically includes the following steps:

[0019] (1) Risk level determination: Based on the received risk assessment report, check the risk level in the assessment report to determine whether it exceeds the preset warning threshold;

[0020] (2) Triggering an alarm: If the risk level exceeds the threshold, the early warning mechanism is triggered, and an early warning message is generated. According to the content of the early warning message and the preset notification rules, relevant personnel are notified.

[0021] Furthermore, the security policy adjustment module specifically comprises the following steps:

[0022] (1) Risk situation analysis: Receive warning information from the warning module and analyze the current security risk situation based on the risk level and abnormal details in the warning information;

[0023] (2) Policy adjustment: Based on the risk analysis results, determine the security policy that needs to be adjusted, and adjust the relevant security settings of cloud printing data transmission according to the determined adjustment policy;

[0024] (3) Record adjustment log: Record detailed information of policy adjustments, including adjustment time, adjustment content, and executor, for subsequent audit and traceability.

[0025] Furthermore, the data analysis module uses an anomaly detection algorithm and a risk assessment model to analyze and assess the risk of the real-time data set. For the anomaly detection algorithm, the formula is: Where n is the number of data items, w i is the weight of each data item, data i is the value of each data item in the real-time data set, mean i It is the mean of the corresponding data item in the historical data set. When the Score exceeds the preset threshold, it is judged as an abnormal situation. The risk assessment model conducts risk assessment based on the abnormal situation. The formula is: Risk_Level = α·Impact+β·Likelihood, where Impact is the impact of the abnormal situation on the business and data assets, Likelihood is the possibility of the abnormal situation, and α and β are weight coefficients, which are set according to the actual situation. When Risk_Level exceeds the preset threshold, the early warning module triggers the early warning mechanism, generates early warning information, and promptly notifies relevant personnel of the early warning information.

[0026] Furthermore, the early warning module uses a real-time data stream processing algorithm to process the early warning information, and its mathematical formula is: I(t) = P(t) ° O(t), wherein I(t) represents the input data stream at time t, that is, the early warning information sent by the early warning module, P(t) represents the data processing function at time t, and the input data stream O(t) is processed according to specific needs, O(t) represents the original output data or the data stream to be processed at time t, ° represents an operation or function application, which is used to represent the processing process of P(t) on O(t). Through real-time data stream processing, the accuracy and completeness of the early warning information can be ensured. Before sending the early warning information, it is also necessary to calculate the early warning information. The priority of the warning information is calculated as follows: Warning priority = h (risk level, historical warning records), where h is the warning priority calculation function. A specific priority value is calculated based on the input risk level and historical warning records. The risk level is obtained by the data analysis module based on the results of anomaly detection and analysis, reflecting the size and severity of the current risk. The historical warning records contain all warning information and its processing status that occurred in the past period of time. By calculating the warning priority, the warning module can sort and classify the warning information according to different priorities, thereby giving priority to those high-priority warning information to ensure that important risks are responded to in a timely and effective manner.

[0027] Furthermore, the security policy adjustment module uses a weighted sum algorithm and a connection utilization algorithm to adjust the policy and optimize the resources. The mathematical model of the weighted sum is: In this formula, the adjustment strategy represents the security strategy adjustment plan calculated based on the warning information, w i Represents the weight of the i-th warning information, which is a numerical value. It is used to measure the importance of the warning information in the adjustment strategy. i It represents the specific content or quantitative value of the i-th warning information. It can be any quantitative indicator related to the warning, such as risk level, attack type, affected resources, etc. It represents the sum of all warning information from i=1 to i=n, ​​where n is the total number of warning information. By calculating the adjustment strategy, the security policy adjustment module can understand the security threats and risk conditions faced by the current system and adjust the security policy based on this information. While adjusting the security policy, the security policy adjustment module also needs to consider the utilization of system resources and perform corresponding optimization. The connection utilization algorithm reflects the usage of the current system connection. The calculation formula is: When the connection utilization is too high, it means that the system may face too many connection requests, resulting in resource shortage or performance degradation. In this case, the security policy adjustment module can take a series of measures to optimize resource utilization, thereby achieving adaptive adjustment of security policies and dynamic optimization of resources.

[0028] Furthermore, the warning module also has the functions of risk level classification and warning level setting, and can classify warning information into different levels according to risk type and assessment results, so that relevant personnel can carry out targeted processing according to actual conditions.

[0029] Furthermore, the security policy adjustment module has a policy library management function, which can store and manage multiple security policies, and intelligently select and apply the best security policy combination based on warning information and current security status.

[0030] Compared with the existing technology, the security risk assessment system for cloud printing data transmission has the following beneficial effects:

[0031] 1. The present invention analyzes and evaluates the risk of real-time data sets through the anomaly detection algorithm and risk assessment model adopted by the data analysis module, comprehensively considers multiple risk factors and indicators, and conducts quantitative assessment of abnormal situations, so as to more accurately judge the risk level and possible losses, so that the system can timely discover potential security risks, greatly improving the accuracy and efficiency of risk identification.

[0032] 2. The present invention processes the warning information through the early warning module using a real-time data stream processing algorithm, which can process the data while it is being generated, ensuring that the early warning module responds immediately to security risks, can quickly discover and respond to potential security threats, reduce losses, and significantly improve the real-time and efficiency of cloud printing data transmission security risk assessment and early warning.

[0033] Other advantages, objectives and features of the present invention will be set forth in part in the following description and, in part, will be apparent to those skilled in the art based on an examination of the following or may be taught from the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0035] Figure 1This is a process operation diagram of the security risk assessment system for cloud printing data transmission. DETAILED DESCRIPTION

[0036] The technical solutions in the embodiments of the present invention are described clearly and completely below. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] Example 1: Implementation of a data analysis module based on anomaly detection algorithm and risk assessment

[0038] In this embodiment, the system collects various data in the cloud printing data transmission process in real time through the data acquisition module, including transmission speed v, data flow f, source address s, and target address d, and constructs a real-time data set D. The data analysis module uses an anomaly detection algorithm to analyze the real-time data set D. The anomaly detection algorithm uses the following formula to calculate the anomaly score Score:

[0039]

[0040] Where n is the number of data items, w i is the weight of each data item, data i is the value of each data item in the real-time data set, mean i is the mean of the corresponding data item in the historical data set. When the Score exceeds the preset threshold, it is determined to be an abnormal situation. The data analysis module conducts risk assessment on the abnormal situation based on the preset security risk assessment model and calculates the risk level Risk_Level using the following formula:

[0041] Risk_Level=α·Impact+β·Likelihood

[0042] Among them, Impact is the degree of influence of the abnormal situation on the business and data assets, Likelihood is the possibility of the abnormal situation occurring, α and β are weight coefficients, which are set according to the actual situation. When Risk_Level exceeds the preset threshold, the early warning module triggers the early warning mechanism, generates early warning information, and promptly notifies relevant personnel of the early warning information.

[0043] Example 2: Warning Notification and Priority Calculation

[0044] In this embodiment, it is described in detail how the early warning module receives early warning information, performs real-time data stream processing, and calculates the priority of the early warning information to ensure that important risks are handled promptly and effectively. As an important part of the entire risk early warning system, the early warning module is mainly responsible for triggering the early warning mechanism and generating early warning information when the data analysis module identifies that the potential risk level exceeds the preset threshold, and delivering this information to relevant personnel in real time and accurately so that they can take corresponding measures. The early warning module uses a real-time data stream processing algorithm to process the information received from the data analysis module. The mathematical model of data stream processing can be expressed as:

[0045] I(t)=P(t)°O(t)

[0046] Among them, I(t) represents the input data stream at time t, that is, the warning information sent by the warning module, P(t) represents the data processing function at time t, and the input data stream O(t) is processed according to specific needs. O(t) represents the original output data or the data stream to be processed at time t. Through real-time data stream processing, the warning module can ensure the accuracy and completeness of the warning information and provide strong support for subsequent risk response. Before sending the warning information, the warning module also needs to calculate the priority of the warning information. The calculation of the warning priority is crucial to ensure that important risks are handled in a timely manner. The calculation formula is:

[0047] Warning priority = h (risk level, historical warning records)

[0048] Among them, h is the warning priority calculation function, which calculates a specific priority value based on the input risk level and historical warning records. The risk level is obtained by the data analysis module based on the anomaly detection and analysis results, reflecting the size and severity of the current risk. The historical warning records contain all the warning information and their processing status that occurred in the past period of time. This information is of great significance for judging the urgency and importance of the current warning. The specific form of the warning priority calculation function (h) can be defined according to actual needs. For example, it can be a weighted summation function, in which the risk level and historical warning records are multiplied by different weight coefficients respectively, and then added to obtain the final priority value. By calculating the warning priority, the warning module can sort and classify the warning information according to different priorities, so as to give priority to those high-priority warning information and ensure that important risks are responded to in a timely and effective manner.

[0049] In summary, the early warning module can realize the rapid and accurate transmission and priority processing of early warning information through real-time data stream processing and early warning priority calculation, which provides important support for the effective operation of the cloud printing data transmission security risk early warning system.

[0050] Example 3: Security policy adjustment and resource optimization

[0051] In this embodiment, it is described in detail how the security policy adjustment module adaptively adjusts the security policy of cloud printing data transmission according to the early warning information, and optimizes resources in combination with real-time resource monitoring indicators to ensure that the security and performance of the system are in the best state. When the security policy adjustment module receives the early warning information, it first calculates the adjustment strategy according to the predefined mathematical model. The model considers multiple early warning information and their corresponding weights, and obtains the final adjustment strategy by weighted summation. The mathematical model is expressed as:

[0052]

[0053] In this formula, the adjustment strategy represents the security strategy adjustment plan calculated based on the warning information, w i It represents the weight of the i-th warning information, which is a numerical value used to measure the importance of the warning information in the adjustment strategy. i Represents the specific content or quantitative value of the i-th warning information. By calculating the adjustment strategy, the security policy adjustment module can understand the security threats and risk conditions faced by the current system, and adjust the security policy based on this information, such as strengthening access control, enabling additional security mechanisms, and updating security rules. While adjusting the security policy, the security policy adjustment module also needs to consider the utilization of system resources and perform corresponding optimization. Resource optimization aims to ensure that the system can efficiently utilize limited computing resources while meeting security requirements. A key resource monitoring indicator is connection utilization, which reflects the current use of system connections. The calculation formula for connection utilization is:

[0054]

[0055] When the connection utilization is too high, it means that the system may face too many connection requests, resulting in resource shortage or performance degradation. In this case, the security policy adjustment module can take a series of measures to optimize resource utilization, such as limiting the establishment of new connections, optimizing the management of existing connections, and improving the connection reuse rate. In addition to connection utilization, the security policy adjustment module will also consider other system performance monitoring indicators, such as the number of active sessions and buffer pool pages to be cleaned up. These indicators can provide information about system load, memory usage, and cache efficiency. By analyzing these indicators, the security policy adjustment module can comprehensively evaluate the performance and security of the system and make corresponding optimization decisions.

[0056] In summary, the security policy adjustment module in the embodiment realizes adaptive adjustment of security policies and dynamic optimization of resources by combining early warning information and real-time resource monitoring indicators, which not only improves the security of cloud printing data transmission, but also ensures the efficient operation of the system and the rational use of resources.

[0057] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A security risk assessment system for cloud printing data transmission, characterized in that: The system consists of the following components: Data collection module: establishes a connection with a server or interface related to cloud printing data transmission according to the configuration information, and captures the relevant data of cloud printing data transmission from the connected data source in real time according to the set collection frequency; Data analysis module: Analyzes the collected data, identifies abnormal situations, such as abnormal traffic and abnormal addresses, and conducts risk assessment on abnormal situations based on the preset security risk assessment model, and generates an assessment report based on the assessment results; Early warning module: When the data analysis module identifies potential risks and assesses that the risk level exceeds the preset threshold, the early warning mechanism is triggered, and early warning information is generated. The early warning information is promptly notified to relevant personnel via SMS or email to remind them to pay attention to and deal with potential risks; Security policy adjustment module: conducts in-depth analysis of warning information to understand the nature, source and scope of impact of risks, provide a basis for policy adjustment, and adaptively adjusts the security policy of cloud printing data transmission based on risk analysis results, such as strengthening identity authentication and restricting access rights to reduce potential risks.

2. The security risk assessment system for cloud printing data transmission according to claim 1 is characterized in that: The specific steps of the data acquisition module are as follows: (1) Initialize the data collection task: set the start time, frequency, and data source parameters of data collection, and establish a connection with the server or interface related to cloud printing data transmission according to the configuration information; (2) Data collection: According to the set collection frequency, relevant data of cloud printing data transmission is captured from the connected data source in real time, and the collected raw data is cleaned and formatted to convert it into a data format suitable for subsequent analysis; (3) Data sending: The preprocessed data is sent to the data analysis module for further processing.

3. The security risk assessment system for cloud printing data transmission according to claim 1 is characterized in that: The data analysis module has the following specific steps: (1) Anomaly detection: Receive pre-processed data from the data acquisition module, use the preset anomaly detection algorithm to analyze the data and identify abnormal situations; (2) Risk assessment: Based on the security risk assessment model, conduct risk assessment on the identified abnormal situations, determine the risk level, and organize the risk assessment results into an assessment report, including abnormality details and risk level information; (3) Result sending: The evaluation report is sent to the early warning module to trigger the corresponding early warning mechanism.

4. The security risk assessment system for cloud printing data transmission according to claim 1, characterized in that: The specific steps of the early warning module are as follows: (1) Risk level determination: Based on the received risk assessment report, check the risk level in the assessment report to determine whether it exceeds the preset warning threshold; (2) Triggering an alarm: If the risk level exceeds the threshold, the early warning mechanism is triggered, and an early warning message is generated. According to the content of the early warning message and the preset notification rules, relevant personnel are notified.

5. The security risk assessment system for cloud printing data transmission according to claim 1, characterized in that: The specific steps of the security policy adjustment module are as follows: (1) Risk situation analysis: Receive warning information from the warning module and analyze the current security risk situation based on the risk level and abnormal details in the warning information; (2) Policy adjustment: Based on the risk analysis results, determine the security policy that needs to be adjusted, and adjust the relevant security settings of cloud printing data transmission according to the determined adjustment policy; (3) Record adjustment log: Record detailed information of policy adjustments, including adjustment time, adjustment content, and executor, for subsequent audit and traceability.

6. The security risk assessment system for cloud printing data transmission according to claim 3 is characterized in that: The data analysis module uses anomaly detection algorithm and risk assessment model to analyze and assess the risk of real-time data sets. For the anomaly detection algorithm, the formula is: Where n is the number of data items, w i is the weight of each data item, data i is the value of each data item in the real-time data set, It is the mean of the corresponding data item in the historical data set. When the Score exceeds the preset threshold, it is judged as an abnormal situation. The risk assessment model conducts risk assessment based on the abnormal situation. The formula is: Risk_Level = α·Impact+β·Likelihood, where Impact is the impact of the abnormal situation on the business and data assets, Likelihood is the possibility of the abnormal situation, and α and β are weight coefficients, which are set according to the actual situation. When Risk_Level exceeds the preset threshold, the early warning module triggers the early warning mechanism, generates early warning information, and promptly notifies relevant personnel of the early warning information.

7. The security risk assessment system for cloud printing data transmission according to claim 4, characterized in that: The early warning module uses a real-time data stream processing algorithm to process the early warning information. The mathematical formula is: I(t) = P(t) ° O(t), where: I(t) represents the input data stream at time t, that is, the early warning information sent by the early warning module, P(t) represents the data processing function at time t, and the input data stream O(t) is processed according to specific needs. O(t) represents the original output data or the data stream to be processed at time t, ° represents an operation or function application, which is used to represent the processing process of P(t) on O(t). Through real-time data stream processing, the accuracy and completeness of the early warning information can be ensured. Before sending the early warning information, it is also necessary to calculate the early warning information. Priority, its calculation formula is: warning priority = h (risk level, historical warning records), where h is the warning priority calculation function, which calculates a specific priority value based on the input risk level and historical warning records. The risk level is derived by the data analysis module based on the results of anomaly detection and analysis, reflecting the size and severity of the current risk. The historical warning records contain all warning information and its processing status that occurred in the past period of time. By calculating the warning priority, the warning module can sort and classify the warning information according to different priorities, thereby giving priority to those high-priority warning information to ensure that important risks are responded to in a timely and effective manner.

8. The security risk assessment system for cloud printing data transmission according to claim 5, characterized in that: The security policy adjustment module uses a weighted sum algorithm and a connection utilization rate algorithm to adjust the policy and optimize the resources. The mathematical model of the weighted sum is: In this formula, the adjustment strategy represents the security strategy adjustment plan calculated based on the warning information, w i It represents the weight of the i-th warning information, which is a numerical value used to measure the importance of the warning information in the adjustment strategy. i It represents the specific content or quantitative value of the i-th warning information. It can be quantitative indicators related to the warning, such as risk level, attack type, and affected resources. By calculating the adjustment strategy, the security policy adjustment module can understand the security threats and risk conditions faced by the current system, and adjust the security policy based on this information. While adjusting the security policy, the security policy adjustment module also needs to consider the utilization of system resources and make corresponding optimizations. The connection utilization algorithm reflects the usage of the current system connection. The calculation formula is: When the connection utilization is too high, it means that the system may face too many connection requests, resulting in resource shortage or performance degradation. In this case, the security policy adjustment module can take a series of measures to optimize resource utilization, thereby achieving adaptive adjustment of security policies and dynamic optimization of resources.

9. The security risk assessment system for cloud printing data transmission according to claim 1, characterized in that: The warning module also has the functions of risk classification and warning level setting, and can classify warning information into different levels according to risk type and assessment results, so that relevant personnel can carry out targeted processing according to actual conditions.

10. The security risk assessment system for cloud printing data transmission according to claim 1, characterized in that: The security policy adjustment module has a policy library management function, can store and manage multiple security policies, and intelligently select and apply the best security policy combination based on warning information and current security conditions.

Images