Data security assessment method and assessment system

By evaluating the consistency of the sample storage data and its backup storage data in the data backup system, the data recovery probability is generated, and the problem of abnormal backup data in the storage process is solved, and the accuracy of data recovery is improved.

CN119397562AActive Publication Date: 2025-02-07湖北省电子信息产品质量监督检验院
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
CN202411427593.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-14
Publication Date
2025-02-07
Estimated Expiration
2044-10-14

AI Technical Summary

Technical Problem

During the data backup phase, the backup data may be disturbed during the storage process, resulting in abnormal backup data, which will lead to inability to accurately restore data.

Method used

Provide data security assessment methods and systems to generate security values ​​to represent the probability of data recovery by comparing the consistency of sample stored data with their backup stored data. The method includes reading the backup time, backup address and backup range in the backup log, and evaluating the consistency of the data based on this information.

Benefits of technology

By evaluating the consistency of backup data, data exception areas can be determined, thereby improving the accuracy of data recovery and ensuring the integrity and reliability of data in stored procedures.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119397562A_ABST
    Figure CN119397562A_ABST
Patent Text Reader

Abstract

The invention relates to a data security assessment method and system, and the method comprises the steps: obtaining sample storage data and backup storage data of the sample data, and the number of the backup storage data is at least one; evaluating the consistency of the sample storage data and the backup storage data to obtain a consistency result; the safety value of the sample storage data is given according to the consistency result, the safety value is the recovery probability of the sample storage data, the step of obtaining the backup storage data of the sample data comprises reading the backup time, the backup address and the backup range in the backup log, and when the consistency of the sample storage data and the backup storage data is evaluated, the backup storage data is obtained. And evaluating according to the backup time, the backup address and the backup range. According to the data security assessment method and assessment system disclosed by the invention, the backup data can be assessed to evaluate the accuracy of data recovery by using the backup data.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a data security assessment method and assessment system. Background Art

[0002] Data security refers to a series of measures and technologies to protect data from unauthorized access, use, disclosure, destruction or tampering, with the goal of ensuring the confidentiality, integrity and availability of data. Data security involves multiple aspects such as collection, access, transmission, storage and backup.

[0003] Data security in the collection stage involves data desensitization and data leakage, data security in the access stage involves permission management and dissemination scope, data security in the transmission stage involves data encryption and channel security, and data security in the storage and backup stage involves data backup and data recovery.

[0004] At the data backup stage, the backup method currently used is mainly direct backup, and some also use off-site backup and cloud backup to restore data. At the backup stage, multiple verification methods are used to ensure the accuracy of the backup data. However, if there is interference during the storage process, the backup data may be abnormal. At this time, using the abnormal backup data cannot accurately restore the data. Summary of the invention

[0005] The present application provides a data security assessment method and an assessment system, which can assess backup data to evaluate the accuracy of data recovery using the backup data.

[0006] The above-mentioned purpose of the present application is achieved through the following technical solutions: In a first aspect, the present application provides a data security assessment method, including: Obtaining sample storage data and backup storage data of the sample data, where the number of the backup storage data is at least one; Evaluate the consistency of sample storage data and backup storage data to obtain consistency results; The safety value of the sample storage data is given according to the consistency result, and the safety value is the recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

[0007] In a possible implementation manner of the first aspect, evaluating consistency of the sample storage data and the backup storage data includes: generating a first inspection curve using the sample storage data and generating a second inspection curve using the backup storage data; Generate a first spectrum graph and a second spectrum graph using the first inspection curve and the second inspection curve, respectively; determining a difference between the first spectrogram and the second spectrogram, the difference being located in the second spectrogram; generating a screening curve using the difference and superimposing the screening curve onto the second inspection curve, determining a starting position and a cutoff position of the screening curve on the second inspection curve; Determine the data anomaly area based on the starting and ending positions.

[0008] In a possible implementation manner of the first aspect, generating a first inspection curve using the sample storage data includes: Select an inspection area on the sample storage data and sequentially create inspection data blocks within the inspection area, with the lengths of adjacent inspection data blocks being the same; Accumulate the numbers included in the inspection data block to obtain an accumulated value; Create a first inspection curve with the order position of the inspection data block as the horizontal axis and the accumulated value of the inspection data block as the vertical axis; The method of using the backup storage data to generate the second inspection curve is the same as the method of using the sample storage data to generate the first inspection curve.

[0009] In a possible implementation manner of the first aspect, the method further includes evaluating the smoothness of the first inspection curve and adjusting the accumulated value of the corresponding inspection data block according to the smoothness.

[0010] In a possible implementation manner of the first aspect, evaluating the smoothness of the first inspection curve includes: Randomly select multiple points on the first inspection curve and record them as inspection points; The differences between adjacent checkpoints are sequentially calculated to obtain a difference series, and the secondary difference series of the difference series is calculated at the same time; The fluctuation range of the quadratic difference series is used as the smoothness value of the first inspection curve.

[0011] In a possible implementation manner of the first aspect, adjusting the accumulated value of the corresponding inspection data block includes: Selecting at least one point on the quadratic difference sequence as an adjustment point, and the number of adjustment points is multiple; Changing the value of the adjustment point so that the smoothness value of the first inspection curve is greater than or equal to the allowable value; The changed value of the adjustment point is assigned to the corresponding inspection data block and the accumulated value of the inspection data block is adjusted.

[0012] In a possible implementation manner of the first aspect, after determining the data abnormal area, the method further includes: Repeatedly select checkpoints on the first check curve, and there are two groups of checkpoints located at the starting position and the end position of the data abnormal area respectively; The two checkpoints in a group are assigned positive and negative adjustments, respectively; The starting position and the ending position of the screening curve in the second inspection curve are determined again.

[0013] In a second aspect, the present application provides a data security assessment device, comprising: A data acquisition unit, used to obtain sample storage data and backup storage data of the sample data, where the number of backup storage data is at least one; A data evaluation unit is used to evaluate the consistency of sample storage data and backup storage data to obtain a consistency result; A result output unit is used to provide a safety value of the sample storage data according to the consistency result, and the safety value is a recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

[0014] In a third aspect, the present application provides a data security assessment system, the system comprising: one or more memories for storing instructions; and One or more processors, used to call and run the instructions from the memory to execute the method as described in the first aspect and any possible implementation of the first aspect.

[0015] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium comprises: Program, when the program is executed by a processor, the method described in the first aspect and any possible implementation of the first aspect is executed.

[0016] In a fifth aspect, the present application provides a computer program product, comprising program instructions. When the program instructions are executed by a computing device, the method described in the first aspect and any possible implementation of the first aspect is executed.

[0017] In a sixth aspect, the present application provides a chip system, which includes a processor for implementing the functions involved in the above aspects, for example, generating, receiving, sending, or processing the data and / or information involved in the above methods.

[0018] The chip system may be composed of chips, or may include chips and other discrete devices.

[0019] In a possible design, the chip system also includes a memory, which is used to store necessary program instructions and data. The processor and the memory can be decoupled and respectively set on different devices, connected by wired or wireless means, or the processor and the memory can also be coupled on the same device. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a schematic flowchart of the steps of the data security assessment method provided in this application.

[0021] Figure 2 This is a schematic diagram of abnormal data in backup storage data provided by the present application.

[0022] Figure 3 It is a schematic diagram of a first inspection curve provided in this application.

[0023] Figure 4 It is a schematic diagram of a first spectrum diagram provided in this application.

[0024] Figure 5 It is a schematic diagram of a second spectrum diagram provided by the present application. DETAILED DESCRIPTION

[0025] The technical solution in this application is further described in detail below in conjunction with the accompanying drawings.

[0026] This application discloses a data security assessment method, please refer to Figure 1 In some examples, the data security assessment method disclosed in this application includes the following steps: S101, obtaining sample storage data and backup storage data of the sample data, where the number of the backup storage data is at least one; S102, evaluating the consistency of the sample storage data and the backup storage data to obtain a consistency result; S103, providing a safety value of the sample storage data according to the consistency result, where the safety value is a recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

[0027] In general, the problem to be solved by the present application is to determine whether the sample storage data and the backup storage data of the sample data are consistent. After obtaining the backup storage data of the sample data, the consistency of the sample storage data and the backup storage data will be evaluated.

[0028] Here, the part of the backup storage data that is different from the sample storage data is called storage error (abnormal data). The role of evaluating consistency is to determine the number and location of storage errors, such as Figure 2 shown.

[0029] For example, to verify the consistency of two sets of data, the MD5 algorithm is currently used for verification. The core idea of ​​the MD5 algorithm is to transform input data of any length through a series of complex transformations and finally generate a 128-bit hash value. This algorithm can be used to compare whether two sets of data are consistent.

[0030] For example, if two sets of data are both 10,000 bits, two 128-bit hash values ​​will be generated. If the two 128-bit hash values ​​are the same, it means that the two sets of data are the same, otherwise it means that the two sets of data are different. One disadvantage of this method is that it is impossible to determine where the difference is, and it is impossible to determine the number of differences.

[0031] The specific method for evaluating the consistency of sample storage data and backup storage data is: S201, generating a first inspection curve using sample storage data and generating a second inspection curve using backup storage data; S202, using the first inspection curve and the second inspection curve to generate a first frequency spectrum graph and a second frequency spectrum graph respectively; S203, determining a difference between the first spectrum graph and the second spectrum graph, where the difference is located in the second spectrum graph; S204, using the difference to generate a screening curve and superimposing the screening curve on the second inspection curve, and determining a starting position and a cutoff position of the screening curve on the second inspection curve; S205: Determine a data abnormality region according to the starting position and the ending position.

[0032] The contents of step S201 to step S205 adopt the method of grouping data for processing. A group of data represents a point. These points are arranged in sequence in the coordinate system. The horizontal coordinate of the point is the serial number of the data group, and the vertical coordinate of the point is the accumulated value of the data in the data group.

[0033] By connecting these points in order and performing smoothing, a curve can be obtained, which is the first inspection curve generated by using the sample storage data mentioned in step S201 ( Figure 3 as shown) and using the backup stored data to generate a second inspection curve (reference Figure 3 ).

[0034] Next, in step S202, a first frequency spectrum is generated using the first inspection curve and the second inspection curve. Figure 4 shown) and the second spectrum diagram ( Figure 5 As shown, Figure 5The dashed lines in the figure indicate differences), the first spectrum graph represents the composition of the first inspection curve, and the second spectrum graph represents the composition of the second inspection curve. Then in step S203, the difference between the first spectrum graph and the second spectrum graph is determined, and the difference is located in the second spectrum graph.

[0035] In step S204, the difference is used to generate a screening curve and the screening curve is superimposed on the second inspection curve to determine the starting position and the end position of the screening curve on the second inspection curve. The difference is used here to generate the screening curve by generating a wavelet with the parameters of the difference (frequency, amplitude), that is, the screening curve, and then superimposing the screening curve on the second inspection curve.

[0036] When the screening curve is superimposed on the second inspection curve, a new waveform is obtained. The waveform has a starting position and an end position. At this time, the data abnormal area can be determined according to the starting position and the end position.

[0037] The specific method is: the starting position and the end position can be determined by coordinates, that is, the horizontal axis range of the data anomaly area is determined. At this time, the horizontal axis range of the data anomaly area needs to be appropriately expanded to determine the horizontal axis range of the data anomaly area. The data groups within the horizontal axis range of the data anomaly area are all suspected objects. At this time, the MD5 algorithm is used for verification.

[0038] Using this method, all data anomaly areas can be found in one processing process, and then storage errors can be screened based on data anomaly area pairs.

[0039] The method of generating the first inspection curve using the sample storage data is as follows: Select an inspection area on the sample storage data and sequentially create inspection data blocks within the inspection area, with the lengths of adjacent inspection data blocks being the same; Accumulate the numbers included in the inspection data block to obtain an accumulated value; Create a first inspection curve with the order position of the inspection data block as the horizontal axis and the accumulated value of the inspection data block as the vertical axis; The method of using the backup storage data to generate the second inspection curve is the same as the method of using the sample storage data to generate the first inspection curve.

[0040] In some examples, a step of evaluating the smoothness of the first inspection curve and adjusting the accumulated value of the corresponding inspection data block according to the smoothness is added, and the purpose of this step is to further clarify the data abnormal area. It should be understood that when a storage error occurs in a data block, the following situations may occur: One error: 1010010101010101001010101…… 1010010101010101001010100…… Multi-bit error: 1010010101010101001010101…… 1010011101010101001110100…… The accumulated value obtained at this time may have a very small difference, which may lead to inaccurate position when determining the data abnormality area. It is necessary to evaluate the smoothness of the first inspection curve and adjust the accumulated value of the corresponding inspection data block according to the smoothness. The purpose of adjusting the accumulated value of the corresponding inspection data block is to amplify the difference.

[0041] The specific method for evaluating the smoothness of the first inspection curve is: S301, randomly selecting a plurality of points on the first inspection curve and recording them as inspection points; S302, sequentially calculating the differences between adjacent checkpoints to obtain a difference sequence, and simultaneously calculating a secondary difference sequence of the difference sequence; S303: Using the fluctuation range of the quadratic difference series as the smoothness value of the first inspection curve.

[0042] The contents from step S301 to step S303 are to determine the smoothness value of the first inspection curve according to the variation degree of the difference between the inspection points.

[0043] The way to adjust the accumulated value of the corresponding check data block is as follows: Selecting at least one point on the quadratic difference sequence as an adjustment point, and the number of adjustment points is multiple; Changing the value of the adjustment point so that the smoothness value of the first inspection curve is greater than or equal to the allowable value; The changed value of the adjustment point is assigned to the corresponding inspection data block and the accumulated value of the inspection data block is adjusted.

[0044] After determining the data anomaly area, you also need to use the following methods to handle it: S401, repeatedly selecting checkpoints on the first check curve, where there are two groups of checkpoints located at the start position and the end position of the data abnormal region respectively; S402, two checkpoints in a group are assigned positive adjustment and negative adjustment respectively; S403, determining again the starting position and the ending position of the screening curve on the second inspection curve.

[0045] The contents of step S401 to step S403 are to further clarify the starting position and the ending position of the data anomaly area. The specific method is to select check points at the starting position and the ending position of the data anomaly area respectively, and then assign positive adjustment and reverse adjustment to two check points in a group respectively, in order to amplify the difference, and finally determine the starting position and the ending position of the screening curve at the second check curve again.

[0046] When determining the starting and ending positions of the data anomaly area, uncertainty may occur. This is because if there are exactly two storage errors, the storage errors will not be recognized. At this time, it is necessary to check the data blocks for multiple divisions to reduce the probability of storage errors not being recognized.

[0047] The present application also provides a data security assessment device, including: A data acquisition unit, used to obtain sample storage data and backup storage data of the sample data, where the number of backup storage data is at least one; A data evaluation unit is used to evaluate the consistency of sample storage data and backup storage data to obtain a consistency result; A result output unit is used to provide a safety value of the sample storage data according to the consistency result, and the safety value is a recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

[0048] Furthermore, it also includes: A first generating unit, configured to generate a first inspection curve using the sample storage data and generate a second inspection curve using the backup storage data; A second generating unit, configured to generate a first frequency spectrum diagram and a second frequency spectrum diagram respectively using the first inspection curve and the second inspection curve; a difference determination unit, configured to determine a difference between the first spectrum graph and the second spectrum graph, the difference being located in the second spectrum graph; a first processing unit, configured to generate a screening curve using the difference and superimpose the screening curve on the second inspection curve, and determine a starting position and a cutoff position of the screening curve on the second inspection curve; The second processing unit is used to determine the data abnormal area according to the starting position and the ending position.

[0049] Furthermore, it also includes: A data block creation unit, used for selecting an inspection area on the sample storage data and sequentially creating inspection data blocks in the inspection area, with the lengths of adjacent inspection data blocks being the same; An accumulation unit, used for accumulating the numbers included in the inspection data block to obtain an accumulated value; A creating unit, used for creating a first inspection curve with the sequential position of the inspection data block as the horizontal coordinate and the accumulated value of the inspection data block as the vertical coordinate; The method of using the backup storage data to generate the second inspection curve is the same as the method of using the sample storage data to generate the first inspection curve.

[0050] Furthermore, the method further includes evaluating the smoothness of the first inspection curve and adjusting the accumulated value of the corresponding inspection data block according to the smoothness.

[0051] Furthermore, it also includes: A first selection unit, used for randomly selecting a plurality of points on the first inspection curve, recorded as inspection points; The third processing unit is used to sequentially calculate the difference between adjacent checkpoints to obtain a difference sequence, and simultaneously calculate a secondary difference sequence of the difference sequence; The result unit is used to use the fluctuation range of the quadratic difference series as the smoothness value of the first inspection curve.

[0052] Furthermore, it also includes: A second selection unit is used to select at least one point on the quadratic difference series as an adjustment point, and the number of the adjustment points is multiple; A first value adjustment unit, used for changing the value of the adjustment point so that the smoothness value of the first inspection curve is greater than or equal to the allowable value; The fourth processing unit is used to assign the value of the changed adjustment point to the corresponding inspection data block and adjust the accumulated value of the inspection data block.

[0053] Furthermore, it also includes: A third selection unit is used to repeatedly select check points on the first check curve, where there are two groups of check points located at the starting position and the ending position of the data abnormal area respectively; A second value adjustment unit is used to assign a positive adjustment and a negative adjustment to two checkpoints in a group respectively; The position re-determining unit is used to re-determine the starting position and the ending position of the screening curve in the second inspection curve.

[0054] In one example, the unit in any of the above devices can be one or more integrated circuits configured to implement the above methods, such as: one or more application specific integrated circuits (ASICs), or, one or more digital signal processors (DSPs), or, one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms.

[0055] For another example, when the units in the device can be implemented in the form of a processing element scheduling program, the processing element can be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call a program. For another example, these units can be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0056] Various objects such as various messages / information / equipment / network elements / systems / devices / actions / operations / processes / concepts that may appear in this application are named. It can be understood that these specific names do not constitute a limitation on the relevant objects. The names assigned may change with factors such as scenarios, contexts or usage habits. The understanding of the technical meaning of the technical terms in this application should be mainly determined from the functions and technical effects embodied / executed in the technical scheme.

[0057] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0058] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0059] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0060] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0061] It should also be understood that in various embodiments of the present application, the first, second, etc. are only used to indicate that multiple objects are different. For example, the first time window and the second time window are only used to indicate different time windows. They should not have any impact on the time window itself, and the first, second, etc. mentioned above should not impose any limitations on the embodiments of the present application.

[0062] It should also be understood that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between different embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0063] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a computer-readable storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned computer-readable storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0064] The present application also provides a data security assessment system, the system comprising: one or more memories for storing instructions; and One or more processors are used to call and run the instructions from the memory to execute the method as described above.

[0065] The present application also provides a computer program product, which includes instructions. When the instructions are executed, the terminal device and the network device perform operations of the terminal device and the network device corresponding to the above method.

[0066] The present application also provides a chip system, which includes a processor for implementing the functions involved in the above content, such as generating, receiving, sending, or processing the data and / or information involved in the above method.

[0067] The chip system may be composed of chips, or may include chips and other discrete devices.

[0068] The processor mentioned in any of the above places can be a CPU, a microprocessor, an ASIC, or one or more integrated circuits for executing programs for controlling the above-mentioned feedback information transmission method.

[0069] In a possible design, the chip system also includes a memory, which is used to store necessary program instructions and data. The processor and the memory can be decoupled and respectively set on different devices, connected by wire or wireless means to support the chip system to implement various functions in the above embodiments. Alternatively, the processor and the memory can also be coupled on the same device.

[0070] Optionally, the computer instructions are stored in a memory.

[0071] Optionally, the memory is a storage unit within the chip, such as a register, a cache, etc. The memory can also be a storage unit within the terminal located outside the chip, such as a ROM or other types of static storage devices that can store static information and instructions, RAM, etc.

[0072] It can be understood that the memory in the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories.

[0073] The non-volatile memory may be a ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), or a flash memory.

[0074] The volatile memory may be a RAM, which is used as an external cache. There are many different types of RAM, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct memory bus RAM.

[0075] The embodiments of this specific implementation method are all preferred embodiments of the present application, and are not intended to limit the protection scope of the present application. Therefore, all equivalent changes made based on the structure, shape, and principle of the present application should be included in the protection scope of the present application.

Claims

1. A data security assessment method, characterized in that: include: Obtaining sample storage data and backup storage data of the sample data, where the number of the backup storage data is at least one; Evaluate the consistency of sample storage data and backup storage data to obtain consistency results; The safety value of the sample storage data is given according to the consistency result, and the safety value is the recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

2. The data security assessment method according to claim 1, characterized in that: Evaluation of the consistency of sample storage data and backup storage data includes: generating a first inspection curve using the sample storage data and generating a second inspection curve using the backup storage data; Generate a first spectrum graph and a second spectrum graph using the first inspection curve and the second inspection curve, respectively; determining a difference between the first spectrogram and the second spectrogram, the difference being located in the second spectrogram; generating a screening curve using the difference and superimposing the screening curve onto the second inspection curve, determining a starting position and a cutoff position of the screening curve on the second inspection curve; Determine the data anomaly area based on the starting and ending positions.

3. The data security assessment method according to claim 2, characterized in that: Generating a first inspection curve using the sample storage data includes: Select an inspection area on the sample storage data and sequentially create inspection data blocks within the inspection area, with the lengths of adjacent inspection data blocks being the same; Accumulate the numbers included in the inspection data block to obtain an accumulated value; Create a first inspection curve with the order position of the inspection data block as the horizontal axis and the accumulated value of the inspection data block as the vertical axis; The method of using the backup storage data to generate the second inspection curve is the same as the method of using the sample storage data to generate the first inspection curve.

4. The data security assessment method according to any one of claims 1 to 3, characterized in that: The method also includes evaluating the smoothness of the first inspection curve and adjusting the accumulated value of the corresponding inspection data block according to the smoothness.

5. The data security assessment method according to claim 4, characterized in that: Evaluation of the smoothness of the first inspection curve includes: Randomly select multiple points on the first inspection curve and record them as inspection points; The differences between adjacent checkpoints are sequentially calculated to obtain a difference series, and the secondary difference series of the difference series is calculated at the same time; The fluctuation range of the quadratic difference series is used as the smoothness value of the first inspection curve.

6. The data security assessment method according to claim 5, characterized in that: Adjusting the accumulated value of the corresponding inspection data block includes: Selecting at least one point on the quadratic difference sequence as an adjustment point, and the number of adjustment points is multiple; Changing the value of the adjustment point so that the smoothness value of the first inspection curve is greater than or equal to the allowable value; The changed value of the adjustment point is assigned to the corresponding inspection data block and the accumulated value of the inspection data block is adjusted.

7. The data security assessment method according to claim 5, characterized in that: After the data anomaly area is determined, it also includes: Repeatedly select checkpoints on the first check curve, and there are two groups of checkpoints located at the starting position and the end position of the data abnormal area respectively; The two checkpoints in a group are assigned positive and negative adjustments, respectively; The starting position and the ending position of the screening curve in the second inspection curve are determined again.

8. A data security assessment device, characterized in that: include: A data acquisition unit, used to obtain sample storage data and backup storage data of the sample data, where the number of backup storage data is at least one; A data evaluation unit is used to evaluate the consistency of sample storage data and backup storage data to obtain a consistency result; A result output unit is used to provide a safety value of the sample storage data according to the consistency result, and the safety value is a recovery probability of the sample storage data; Wherein, obtaining the backup storage data of the sample data includes reading the backup time, backup address and backup range in the backup log; When evaluating the consistency of sample storage data and backup storage data, the evaluation is performed based on the backup time, backup address, and backup scope.

9. A data security assessment system, characterized in that: The system comprises: one or more memories for storing instructions; and One or more processors, configured to call and execute the instructions from the memory to perform the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that The computer readable storage medium comprises: The program, when the program is executed by a processor, the method according to any one of claims 1 to 7 is executed.

Citation Information

Patent Citations

  • Backup data recovery time determination method, apparatus and device, and storage medium

    CN112286733A

  • Data backup method and device, data recovery method and device and computer equipment

    CN115756955A

  • Copy number variations detecting method based on read-depth and analysis apparatus

    KR102273257B1

  • Apparatus and method for controlling data recovery

    US20080178185A1

  • System and method for managing consistency among volumes based on application information

    US20080228833A1