Information technology data anti-leakage monitoring system

Abstract

The invention relates to the technical field of information security protection, in particular to an information technology data anti-leakage monitoring system which comprises a real-time monitoring module, a transmission module, a preprocessing module, an intelligent analysis module, a fusion module, an early warning module, a database, a decision generation module, a decision execution module, a GSM module and a client. The preprocessing module is connected with the transmission module, the intelligent analysis module is connected with the preprocessing module, the fusion module is connected with the intelligent analysis module, the decision module and the early warning module are connected with the fusion module, the database is connected with the decision execution module, and the GSM module is connected with the early warning module and the decision generation module. The decision execution module is connected with the decision generation module; in this way, the technical problems that in the prior art, the protection effect of data leakage prevention measures is limited, and increasingly complex and hidden data leakage threats are difficult to deal with are solved.

Description

Technical Field

[0001] The present invention relates to the field of information security protection technology, and in particular to an information technology data leakage prevention monitoring system. Background Art

[0002] With the rapid development of information technology, data has become the core asset of enterprise operations. Its security is directly related to the survival and development of the enterprise. However, with the widespread application of technologies such as cloud computing, big data, and the Internet of Things, the risk of data leakage has also increased. Data leakage will not only cause economic losses to the enterprise, but may also affect the reputation and competitiveness of the enterprise. Therefore, data leakage prevention measures are needed to prevent data leakage.

[0003] However, traditional data leakage prevention measures, such as rule-matching-based firewalls and simple access control lists, have limited protection effects and are unable to cope with the increasingly complex and hidden threats of data leakage. Summary of the invention

[0004] The purpose of the present invention is to provide an information technology data leakage prevention monitoring system, aiming to solve the technical problem that the data leakage prevention measures in the prior art have limited protection effects and are difficult to cope with the increasingly complex and hidden data leakage threats.

[0005] To achieve the above-mentioned purpose, the present invention adopts an information technology data leakage prevention monitoring system, including a real-time monitoring module, a transmission module, a preprocessing module, an intelligent analysis module, a fusion module, an early warning module, a database, a decision generation module, a decision execution module, a GSM module and a client, the transmission module is connected to the real-time monitoring module, the preprocessing module is connected to the transmission module, the intelligent analysis module is connected to the preprocessing module, the fusion module is connected to the intelligent analysis module, the decision module and the early warning module are both connected to the fusion module, the database is connected to the decision execution module, the GSM module is connected to the early warning module and the decision generation module, and the decision execution module is connected to the decision generation module;

[0006] The real-time monitoring module is used to capture the data flow in the network in real time and transmit it to the pre-processing module through the transmission module;

[0007] The preprocessing module preprocesses the data and transmits it to the intelligent analysis module;

[0008] The intelligent analysis module performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data;

[0009] The fusion module combines the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a risk of leakage;

[0010] When there is a risk of leakage, an early warning is issued through the early warning module, decision information is generated through the decision generation module, and the early warning information and decision information are transmitted to the client through the GSM module;

[0011] The decision execution module executes decision information to prevent data leakage.

[0012] Among them, the intelligent analysis module includes a sensitive data monitoring unit, a deep behavior learning unit and an unstructured data detection unit, and the sensitive data monitoring unit, the deep behavior learning unit and the unstructured data detection unit are all connected to the preprocessing module.

[0013] Wherein, the information technology data leakage prevention monitoring system also includes a scoring module and an optimization module, the scoring module is connected to the fusion module, and the optimization module is connected to the scoring module.

[0014] Wherein, the information technology data leakage prevention monitoring system also includes a management module and a login module, the management module is connected to the intelligent analysis module, and the login module is connected to the management module.

[0015] Among them, the sensitive data monitoring unit adopts an efficient string matching algorithm (Aho-Corasick), and the deep behavior analysis unit combines machine learning and deep learning algorithms (LSTM or GRU).

[0016] The unstructured data detection unit uses natural language processing (NLP) technology and image recognition technology to perform sensitive information detection on unstructured data.

[0017] The information technology data leakage prevention monitoring system further includes a chart generation module and an access control module. The chart generation module is connected to the client, and the access control module is also connected to the client.

[0018] Wherein, the information technology data leakage prevention monitoring system also includes a sensing module and an adjustment module, and both the sensing module and the adjustment module are connected to the client.

[0019] An information technology data leakage prevention monitoring system of the present invention, when in use, captures data flow in the network in real time through the real-time monitoring module, and transmits the data to the preprocessing module through the transmission module. The preprocessing module preprocesses the data and then transmits it to the intelligent analysis module. The intelligent analysis module performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data. The fusion module fuses the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a leakage risk. When there is a leakage risk, an early warning is issued through the early warning module, and decision information is generated through the decision generation module. The early warning information and decision information are transmitted to the client through the GSM module, and the decision execution module executes the decision information to prevent data leakage. In this way, the technical problem that the data leakage prevention measures in the prior art have limited protection effects and are difficult to cope with increasingly complex and hidden data leakage threats is solved. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0021] Figure 1 It is a principle block diagram of the first embodiment of the present invention.

[0022] Figure 2 It is a principle block diagram of the second embodiment of the present invention.

[0023] Figure 3 It is a principle block diagram of the third embodiment of the present invention.

[0024] 101-real-time monitoring module, 102-transmission module, 103-preprocessing module, 104-intelligent analysis module, 105-fusion module, 106-early warning module, 107-database, 108-decision generation module, 109-decision execution module, 110-GSM module, 111-client, 112-scoring module, 113-optimization module, 114-management module, 115-login module, 116-sensitive data monitoring unit, 117-deep behavior learning unit, 118-unstructured data detection unit, 201-chart generation module, 202-access control module, 203-sensing module, 204-adjustment module, 301-identity authentication module, 302-interaction module, 303-encryption module. DETAILED DESCRIPTION

[0025] Embodiments of the present invention are described in detail below. Examples of the embodiments are shown in the accompanying drawings. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, but should not be construed as limiting the present invention.

[0026] The first embodiment of the present application is:

[0027] See also Figure 1 , Figure 1 It is a principle block diagram of the first embodiment of the present invention.

[0028] The present invention provides an information technology data leakage prevention monitoring system, comprising a real-time monitoring module 101, a transmission module 102, a preprocessing module 103, an intelligent analysis module 104, a fusion module 105, an early warning module 106, a database 107, a decision generation module 108, a decision execution module 109, a GSM module 110, a client 111, a scoring module 112, an optimization module 113, a management module 114 and a login module 115. The intelligent analysis module 104 comprises a sensitive data monitoring unit 116, a deep behavior learning unit 117 and an unstructured data detection unit 118. The above-mentioned scheme solves the technical problem that the data leakage prevention measures in the prior art have limited protection effects and are difficult to cope with the increasingly complex and hidden data leakage threats.

[0029] For this specific implementation, the real-time monitoring module 101 is used to capture the data flow in the network in real time, and transmit it to the pre-processing module 103 through the transmission module 102;

[0030] The preprocessing module 103 preprocesses the data and transmits it to the intelligent analysis module 104;

[0031] The intelligent analysis module 104 performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data;

[0032] The fusion module 105 combines the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a risk of leakage;

[0033] When there is a risk of leakage, an early warning is issued through the early warning module 106, and decision information is generated through the decision generation module 108. The early warning information and the decision information are transmitted to the client 111 through the GSM module 110;

[0034] The decision execution module 109 executes decision information to prevent data leakage.

[0035] Among them, the transmission module 102 is connected to the real-time monitoring module 101, the preprocessing module 103 is connected to the transmission module 102, the intelligent analysis module 104 is connected to the preprocessing module 103, the fusion module 105 is connected to the intelligent analysis module 104, the decision module and the early warning module 106 are both connected to the fusion module 105, the database 107 is connected to the decision execution module 109, the GSM module 110 is connected to the early warning module 106 and the decision generation module 108, the decision execution module 109 is connected to the decision generation module 108. When used specifically, the data flow in the network is captured in real time by the real-time monitoring module 101, and transmitted to the preprocessing module 103 through the transmission module 102. The preprocessing module 103 preprocesses the data and then transmits it to the intelligent analysis module 104. The intelligent analysis module 104 performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data. The fusion module 105 integrates the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a leakage risk. When there is a leakage risk, an early warning is issued through the early warning module 106, and decision information is generated through the decision generation module 108. The early warning information and decision information are transmitted to the client 111 through the GSM module 110. The decision execution module 109 executes the decision information to prevent data leakage. In this way, the technical problem that the data leakage prevention measures in the prior art have limited protection effects and are difficult to cope with the increasingly complex and hidden data leakage threats is solved.

[0036] Secondly, the sensitive data monitoring unit 116, the deep behavior learning unit 117 and the unstructured data detection unit 118 are all connected to the preprocessing module 103. The sensitive data monitoring unit 116 uses an efficient string matching algorithm (Aho-Corasick) to perform sensitive data detection on the data. The deep behavior learning unit 117 combines machine learning and deep learning algorithms (LSTM or GRU) to identify abnormal behavior of the data. The unstructured data detection unit 118 uses natural language processing technology (NLP) and image recognition technology to perform sensitive information detection on unstructured data.

[0037] At the same time, the scoring module 112 is connected to the fusion module 105, and the optimization module 113 is connected to the scoring module 112. The scoring module 112 is used to score the leakage risk, and the optimization module 113 makes optimization decisions according to the scoring results.

[0038] In addition, the management module 114 is connected to the intelligent analysis module 104 , and the login module 115 is connected to the management module 114 . The management module 114 is used by personnel to maintain the intelligent analysis module 104 , and the login module 115 is used for personnel to log in to the management module 114 .

[0039] When using an information technology data leakage prevention monitoring system of this embodiment, the real-time monitoring module 101 captures the data flow in the network in real time, and transmits it to the preprocessing module 103 through the transmission module 102. The preprocessing module 103 preprocesses the data and then transmits it to the intelligent analysis module 104. The intelligent analysis module 104 performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data. The fusion module 105 integrates the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a leakage risk. When there is a leakage risk, an early warning is issued through the early warning module 106, and decision information is generated through the decision generation module 108. The early warning information and decision information are transmitted to the client 111 through the GSM module 110. The decision execution module 109 executes the decision information to prevent data leakage. In this way, the technical problem that the data leakage prevention measures in the prior art have limited protection effects and are difficult to cope with the increasingly complex and hidden data leakage threats is solved.

[0040] The second embodiment of the present application is:

[0041] Based on the first embodiment, please refer to Figure 2 , Figure 2 It is a principle block diagram of the second embodiment of the present invention.

[0042] The present invention provides an information technology data leakage prevention monitoring system, which also includes a chart generation module 201, an access control module 202, a sensing module 203 and an adjustment module 204.

[0043] For this specific implementation, the chart generation module 201 is connected to the client 111, and the access control module 202 is also connected to the client 111. The chart generation module 201 can generate charts of warning information and decision information and display them on the client 111. The access control module 202 can perform access permission control and only authorized personnel can use it.

[0044] The sensing module 203 and the adjusting module 204 are both connected to the client 111 . The sensing module 203 senses whether someone is using the client 111 , and the adjusting module 204 adjusts the brightness of the client 111 according to the sensing information of the sensing module 203 .

[0045] Using an information technology data leakage prevention monitoring system of this embodiment, the chart generation module 201 can generate charts of warning information and decision information and display them on the client 111, the access control module 202 can perform access permission control, and only authorized personnel can use it, the sensing module 203 senses whether someone is using the client 111, and the adjustment module 204 adjusts the brightness of the client 111 according to the sensing information of the sensing module 203.

[0046] The third embodiment of the present application is:

[0047] Based on the second embodiment, please refer to Figure 3 , Figure 3 It is a principle block diagram of the third embodiment of the present invention.

[0048] The present invention provides an information technology data leakage prevention monitoring system, which also includes an identity authentication module 301 , an interaction module 302 and an encryption module 303 .

[0049] According to this specific implementation, the identity verification module 301 is connected to the login module 115 , and the identity verification module 301 can verify the identity of the person who logs into the management module 114 .

[0050] The interaction module 302 is connected to the database 107 , and the interaction module 302 can realize the interaction between the database 107 and external decision-making solutions and update them regularly.

[0051] Secondly, the encryption module 303 is connected to the transmission module 102, and the encryption module 303 can realize data encryption transmission.

[0052] Using an information technology data leakage prevention monitoring system of this embodiment, the identity authentication module 301 can authenticate the identity of the person logging into the management module 114, the interaction module 302 can realize the interaction between the database 107 and the external decision-making plan and update it regularly, and the encryption module 303 can realize data encryption transmission.

[0053] What is disclosed above is only a preferred embodiment of the present invention, and it certainly cannot be used to limit the scope of rights of the present invention. Ordinary technicians in this field can understand that all or part of the processes of the above embodiment and equivalent changes made according to the claims of the present invention still fall within the scope of the invention.

Claims

1. An information technology data leakage prevention monitoring system, characterized in that: It includes a real-time monitoring module, a transmission module, a preprocessing module, an intelligent analysis module, a fusion module, an early warning module, a database, a decision generation module, a decision execution module, a GSM module and a client, wherein the transmission module is connected to the real-time monitoring module, the preprocessing module is connected to the transmission module, the intelligent analysis module is connected to the preprocessing module, the fusion module is connected to the intelligent analysis module, the decision module and the early warning module are both connected to the fusion module, the database is connected to the decision execution module, the GSM module is connected to the early warning module and the decision generation module, and the decision execution module is connected to the decision generation module; The real-time monitoring module is used to capture the data flow in the network in real time and transmit it to the pre-processing module through the transmission module; The preprocessing module preprocesses the data and transmits it to the intelligent analysis module; The intelligent analysis module performs sensitive data detection, abnormal behavior identification and unstructured data detection on the data; The fusion module combines the results of sensitive data detection, abnormal behavior identification and unstructured data detection to determine whether there is a risk of leakage; When there is a risk of leakage, an early warning is issued through the early warning module, decision information is generated through the decision generation module, and the early warning information and decision information are transmitted to the client through the GSM module; The decision execution module executes decision information to prevent data leakage.

2. The information technology data leakage prevention monitoring system according to claim 1, characterized in that: The intelligent analysis module includes a sensitive data monitoring unit, a deep behavior learning unit and an unstructured data detection unit, and the sensitive data monitoring unit, the deep behavior learning unit and the unstructured data detection unit are all connected to the preprocessing module.

3. The information technology data leakage prevention monitoring system according to claim 2, characterized in that: The information technology data leakage prevention monitoring system also includes a scoring module and an optimization module. The scoring module is connected to the fusion module, and the optimization module is connected to the scoring module.

4. The information technology data leakage prevention monitoring system according to claim 3, characterized in that: The information technology data leakage prevention monitoring system also includes a management module and a login module. The management module is connected to the intelligent analysis module, and the login module is connected to the management module.

5. The information technology data leakage prevention monitoring system according to claim 4, characterized in that: The sensitive data monitoring unit adopts an efficient string matching algorithm, and the deep behavior analysis unit combines machine learning and deep learning algorithms.

6. The information technology data leakage prevention monitoring system according to claim 5, characterized in that: The unstructured data detection unit uses natural language processing technology and image recognition technology to perform sensitive information detection on unstructured data.

7. The information technology data leakage prevention monitoring system according to claim 6, characterized in that: The information technology data leakage prevention monitoring system further includes a chart generation module and an access control module. The chart generation module is connected to the client, and the access control module is also connected to the client.

8. The information technology data leakage prevention monitoring system according to claim 7, characterized in that: The information technology data leakage prevention monitoring system further includes a sensing module and an adjustment module, and both the sensing module and the adjustment module are connected to the client.

Images