Data encryption method for network platform

Abstract

The invention relates to the technical field of data encryption, and discloses a data encryption method for a network platform. The method comprises the following steps: acquiring a historical leakage record, performing feature extraction on the historical leakage record, recording simulated leakage, monitoring the simulated leakage record, performing preventive encryption when the influence of the simulated leakage does not reach a maximum value, continuously monitoring the influence after encryption, and outputting an optimal encryption strategy. And generating an encryption knowledge base, obtaining a real-time leakage record, and matching an encryption strategy for execution. According to the data encryption method and device, accurate and real-time data leakage risk assessment and targeted data encryption are fused, the data security of the network platform is effectively guaranteed, and the problems that traditional data encryption is high in computing power cost and difficult to accurately cope with the data leakage risk in a mass data scene of the network platform are solved.

Description

Technical Field

[0001] The present application relates to the technical field of data encryption, and in particular to a data encryption method for a network platform. Background Art

[0002] Under the background of the rapid development of Internet technology, the construction of network platforms has also shown a blowout growth. It is worth noting that no matter how large or small the network platform is, the amount of data is mostly much larger than the traditional network structure, and the problem that comes with it is the security of massive data.

[0003] Traditionally, data encryption is often used to solve the problem of data security in the network. However, for the massive data on the network platform, complete data encryption will bring an incalculable amount of computing power, which will bring huge computing power costs to the construction of the network platform and is not conducive to the construction of the network platform.

[0004] The inventor discovered that data encryption is an effective solution to data leakage in the existing data security technology for network platforms, and further deduced that only encrypting data that may have data leakage risks can effectively reduce the demand for computing power. However, based on the above ideas, the foreseeable problem is how to integrate accurate and real-time data leakage risk assessment with corresponding data encryption.

[0005] In summary, there is an urgent need for a new technical solution for data encryption on network platforms to achieve the integration of accurate and real-time data leakage risk assessment and targeted data encryption to ensure the security of data on network platforms. Summary of the invention

[0006] The purpose of this application is to provide a data encryption method for a network platform to solve the technical problems raised in the above background technology.

[0007] To achieve the above purpose, the present application discloses the following technical solution: a data encryption method for a network platform, comprising:

[0008] S1: Obtain historical leakage records; wherein the leakage records are used to characterize the leakage of data on the network platform, and the leakage records store the leakage impact that characterizes the quantified leakage damage;

[0009] S2: Extract features from the historical leakage records and save the generated leakage features; wherein the leakage features are used to characterize the characteristics of the leakage of data on the network platform;

[0010] S3: Simulating the leakage of data on the network platform based on the leakage record;

[0011] S4: When executing step S3, continuously monitoring the simulated leakage records corresponding to different leakage records; the simulated leakage records correspond to the leakage records;

[0012] S5: When executing step S4, when the simulated leakage impact does not reach the corresponding maximum value, calling a preset encryption tool library to perform preventive encryption of the data of the network platform based on the leakage record; wherein the encryption tool library stores a variety of encryption methods, and the encryption time and encryption complexity required for each encryption method are different;

[0013] S6: Continuously monitor the leakage impact after preventive encryption when executing step S5, and output the encryption strategy adopted when the minimum value corresponding to the simulated leakage impact is reached; wherein the encryption strategy is the selected encryption method, the corresponding encryption object and the encryption order;

[0014] S7: fix the leakage features and the corresponding encryption strategies to generate an encryption knowledge base;

[0015] S8: Obtain real-time leakage records to extract features and save real-time leakage features;

[0016] S9: Match the real-time leakage features in the encryption knowledge base, output the corresponding encryption strategy and execute it.

[0017] Preferably, the leakage record includes leakage cause, leakage time sequence, leakage logic sequence, leakage data source sequence and leakage impact;

[0018] Among them, the leakage cause is the cause of the leakage of the network platform data, the leakage time series is the corresponding time sequence of the leakage of the network platform data, the leakage logic sequence is the logically corresponding sequence when performing data leakage risk assessment, the leakage data source sequence is the sequence of data sources corresponding to the leakage of the network platform data, and the leakage impact is the quantitative value of the damage to the network platform caused by the leakage of the network platform data.

[0019] Preferably, the leakage characteristics include cause characteristics, time series characteristics, logic sequence characteristics, data source characteristics and impact characteristics;

[0020] Among them, the cause characteristics are the characteristics of the causes of the leakage of data on the network platform, the time series characteristics are the characteristics of the time-corresponding sequence of the leakage of data on the network platform, the logical sequence characteristics are the characteristics of the logically corresponding sequence when conducting data leakage risk assessment, the data source sequence characteristics are the characteristics of the sequence relationship on the data source corresponding to the leakage of data on the network platform, and the impact characteristics are the characteristics of the damage to the network platform caused by the leakage of data on the network platform.

[0021] Preferably, step S3 is specifically:

[0022] S31: parsing the leakage record and determining key parameters required for data leakage simulation based on the parsing result; the key parameters are quantitative parameters of the impact degree caused by the leakage of data on the network platform;

[0023] S32: Simulating the leakage of data on the network platform based on the pre-built simulated network platform and the key parameters obtained in step S31;

[0024] S34: Record the simulated process of data leakage on the network platform in step S32, and generate the simulated leakage record.

[0025] Preferably, step S4 specifically comprises: continuously monitoring the leakage of data on the network platform and simulating the leakage time series, the leakage logic sequence, the leakage data source sequence and the leakage impact corresponding to different leakage causes.

[0026] Preferably, step S5 is specifically:

[0027] S51: Setting a simulated leakage impact threshold, which is used to determine whether to adopt preventive encryption;

[0028] S52: comparing the simulated leakage impact with the simulated leakage impact threshold in real time, and executing step S53 when the condition for taking preventive encryption is met;

[0029] S53: Selecting the encryption strategy based on the leakage time sequence, the leakage logic sequence, the leakage data source sequence and the leakage impact, and executing the selected encryption strategy.

[0030] Preferably, step S6 is specifically:

[0031] S61: Continuously monitor the simulated leakage impact based on the preventive encryption when executing step S5;

[0032] S62: sorting the simulated leakage impacts obtained in step S61;

[0033] S63: Outputting the encryption strategy adopted when the minimum value corresponding to the simulated leakage impact is obtained.

[0034] Preferably, step S7 is specifically:

[0035] S71: Integrate the leakage feature and the encryption strategy;

[0036] S72: Using knowledge base technology to establish a framework of the encrypted knowledge base;

[0037] S73: mapping and associating the leakage feature and the encryption strategy within the framework of step S72, and fixing them;

[0038] S74: Enter and store the mapping and association between the leakage feature and the encryption strategy obtained in step S73 into the framework of the encryption knowledge base in step S72;

[0039] S75: Create a knowledge base index for step S74 and perform a knowledge base integrity check before outputting.

[0040] Preferably, step S8 is specifically:

[0041] S81: Obtain real-time leakage records;

[0042] S82: Extract features from the real-time leakage record to obtain and output real-time leakage features.

[0043] Preferably, step S9 is specifically:

[0044] S91: performing feature matching on the real-time leakage feature in the encrypted knowledge base;

[0045] S92: Output the encryption policy corresponding to the leakage feature that meets the feature matching condition and execute it.

[0046] Beneficial effects: The data encryption method for a network platform of the present application utilizes a series of steps, including obtaining historical leakage records, extracting features thereof, simulating leakage based on records, monitoring simulated leakage records, performing preventive encryption when the impact of simulated leakage has not reached the maximum value, continuously monitoring the impact after encryption and outputting the optimal encryption strategy, generating an encryption knowledge base, and obtaining real-time leakage records and matching encryption strategies. It realizes the integration of accurate and real-time data leakage risk assessment and targeted data encryption, effectively protects the data security of the network platform, and solves the problems of high computing power cost and difficulty in accurately responding to data leakage risks of traditional data encryption in the scenario of massive data on the network platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without paying any creative work.

[0048] Figure 1 A flowchart of a data encryption method for a network platform provided in an embodiment of the present application. DETAILED DESCRIPTION

[0049] The technical solutions in the embodiments of the present application are described clearly and completely below. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0050] In this article, the term "comprising" is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of more restrictions, the elements defined by the sentence "comprising..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0051] This embodiment discloses Figure 1 A data encryption method for a network platform is shown, comprising:

[0052] S1: Obtain historical leakage records; wherein the leakage records are used to characterize the leakage of data on the network platform, and the leakage records store the leakage impact that characterizes the quantified leakage damage;

[0053] S2: Extract features from historical leakage records and save the generated leakage features; wherein the leakage features are used to characterize the characteristics of the leakage of data on the network platform;

[0054] S3: Simulate the leakage of network platform data based on leakage records;

[0055] S4: When executing step S3, continuously monitor the simulated leakage records corresponding to different leakage records; the simulated leakage records correspond to the leakage records;

[0056] S5: When executing step S4, when the simulated leakage impact does not reach the corresponding maximum value, calling a preset encryption tool library to perform preventive encryption of the data on the network platform based on the leakage record; wherein the encryption tool library stores a variety of encryption methods, and the encryption time and encryption complexity required for each encryption method are different;

[0057] S6: Continuously monitor the leakage impact after preventive encryption when executing step S5, and output the encryption strategy adopted when simulating the minimum value corresponding to the leakage impact; wherein the encryption strategy is the selected encryption method, the corresponding encryption object and the encryption order;

[0058] S7: fix the leakage features and the corresponding encryption strategies to generate an encryption knowledge base;

[0059] S8: Obtain real-time leakage records to extract features and save real-time leakage features;

[0060] S9: Match the real-time leakage features in the encryption knowledge base, output the corresponding encryption strategy and execute it.

[0061] Based on the above, this embodiment utilizes a series of steps such as obtaining historical leakage records, extracting features thereof, simulating leakage based on records, monitoring simulated leakage records, performing preventive encryption when the impact of simulated leakage has not reached the maximum value, continuously monitoring the impact after encryption and outputting the optimal encryption strategy, generating an encryption knowledge base, and obtaining real-time leakage records and matching encryption strategies. It realizes the integration of accurate and real-time data leakage risk assessment and targeted data encryption, effectively protects the data security of the network platform, and solves the problems of high computing power cost and difficulty in accurately responding to data leakage risks of traditional data encryption in the scenario of massive data on the network platform.

[0062] Specifically, the leakage record includes leakage cause, leakage time series, leakage logic sequence, leakage data source sequence and leakage impact;

[0063] Among them, the leakage cause is the cause of the leakage of the network platform data, the leakage time series is the corresponding time sequence of the leakage of the network platform data, the leakage logic sequence is the logically corresponding sequence when conducting data leakage risk assessment, the leakage data source sequence is the sequence of the data source corresponding to the leakage of the network platform data, and the leakage impact is the quantitative value of the damage to the network platform caused by the leakage of the network platform data.

[0064] Based on the above, this embodiment uses the specific contents such as leakage causes, leakage time series, leakage logic sequence, leakage data source sequence and leakage impact contained in the clear leakage records to achieve a comprehensive and detailed quantitative representation of the data leakage situation of the network platform, which provides a detailed data foundation for subsequent operations such as data leakage simulation, risk assessment and formulation of encryption strategies based on this information, and helps to more accurately respond to data security issues on the network platform.

[0065] Specifically, leakage characteristics include cause characteristics, time series characteristics, logical sequence characteristics, data source characteristics, and impact characteristics;

[0066] Among them, the cause characteristics are the characteristics of the causes of the leakage of data on the network platform, the time series characteristics are the characteristics of the time sequence of the leakage of data on the network platform, the logical sequence characteristics are the characteristics of the logical sequence when conducting data leakage risk assessment, the data source sequence characteristics are the characteristics of the sequence of the data source corresponding to the leakage of data on the network platform, and the impact characteristics are the characteristics of the damage to the network platform caused by the leakage of data on the network platform.

[0067] Based on the above, this embodiment uses feature extraction of historical leakage records to obtain leakage features such as cause features, time series features, logical sequence features, data source features and impact features, thereby accurately grasping the characteristics of data leakage situations on the network platform from different dimensions, so that in the subsequent data leakage simulation, encryption strategy formulation and matching processes, work can be carried out more specifically based on these features, thereby improving the effectiveness of data encryption methods in dealing with different leakage situations.

[0068] Specifically, step S3 is as follows:

[0069] S31: Analyze the leakage record and determine the key parameters required for data leakage simulation based on the analysis results; the key parameters are quantitative parameters of the impact degree caused by the leakage of data on the network platform;

[0070] S32: Simulate the leakage of data on the network platform based on the pre-built simulated network platform and the key parameters obtained in step S31;

[0071] S34: Record the simulated process of data leakage on the network platform in step S32, and generate a simulated leakage record.

[0072] In a specific application, this embodiment parses the acquired leakage records, including parsing the leakage causes, leakage time series, leakage logic sequence, leakage data source sequence and leakage impact, etc. Based on the analysis, the specific context, time context, logical association and key elements such as the data source involved in the previous data leakage incidents are clarified, so as to lay the foundation for the subsequent accurate simulation of the leakage situation, so as to further determine the key parameters, for example, determining the time span and time node distribution of the simulated leakage according to the leakage time series; setting the simulation rules of the logical links such as data flow and access permission change in the simulation process with reference to the leakage logic sequence; and clarifying the simulation according to the leakage data source sequence. The data sources and data flows involved in the simulation are as follows; for example, the quantitative parameters of the possible impact of the simulated leakage incident on the various functions of the network platform, data integrity, etc. are determined in combination with the leakage impact; the existing network platform architecture technology and the determined simulation key parameters are used to truly reproduce the data storage, transmission, processing and other links of the network platform, so as to accurately simulate the data leakage situation, wherein the existing network platform architecture technology can be to build the simulation environment by creating virtual servers, simulating network topology, setting data storage and access rules, etc., and based on the set simulation rules and parameters, gradually introduce the simulated leakage incident in the built simulation environment. In a specific example, starting from the simulated data source, according to the leakage logic sequence and time series, simulate the abnormal flow of data in the network platform, unauthorized access, etc., to achieve the simulation of the data leakage process of the network platform. During the simulation process, the impact of the simulated leakage incident on various indicators of the network platform in the simulation environment, such as data integrity, availability, confidentiality, etc., is continuously monitored to ensure that the simulation results can truly reflect the actual leakage that may occur. During the entire simulation of the leakage incident, we continuously record every key step, changes in data status, impact on various indicators of the network platform, and other details to form a simulated leakage record. These records will serve as an important basis for subsequent monitoring, analysis, and formulation of preventive encryption strategies, so as to fully understand the overall picture of the simulated leakage incident and its specific impact on the network platform.

[0073] Based on the above, this embodiment uses leakage record analysis to determine key parameters, and conducts data leakage simulation based on a pre-built simulation network platform combined with key parameters, and finally records the simulation process to generate a simulated leakage record, thereby achieving effective simulation of data leakage in a simulated network platform environment. By accurately determining key parameters and rationally utilizing the simulation platform, it provides a simulation data basis that is closer to the actual situation for subsequent monitoring, evaluation, and formulation of preventive encryption strategies.

[0074] Specifically, step S4 is specifically: continuously monitoring the leakage of data on the network platform and simulating the leakage time series, leakage logic series, leakage data source series and leakage impact corresponding to different leakage causes.

[0075] In a specific application, this embodiment counts in real time the amount of simulated leakage data, the impact of simulated leakage, the state of simulated leakage data source, the time node of simulated leakage, the logical path of simulated leakage, etc. in the process of simulated leakage. For example, in real time, the amount of data involved in the process of simulated leakage is counted to understand the change in the scale of leakage. In addition, corresponding to the leakage impact in the leakage record, by setting relevant evaluation rules and algorithms in the simulation environment, the degree of impact of the simulated leakage event on various functions of the simulated network platform, data integrity, etc. is continuously evaluated, and quantitative records are made. In addition, the state changes of the data source involved in the simulated leakage event during the leakage process, such as data accessibility, data update, etc., are monitored in association with the leakage data source sequence in the leakage record. In addition, the various time nodes at which the simulated leakage event occurs in the simulated network platform are recorded, and the leakage time series in the leakage record is compared to analyze the law of the leakage process in the time dimension. In addition, the logical path followed by the simulated leakage event in the simulated network platform is tracked, that is, how the data is leaked through different operations, permission settings, etc., and the leakage logical sequence in the leakage record is monitored.

[0076] Based on the above, this embodiment utilizes the continuous monitoring of the leakage time series, leakage logic sequence, leakage data source sequence and leakage impact corresponding to different leakage causes during the data leakage simulation process, thereby realizing all-round dynamic monitoring of the simulated leakage situation, and being able to timely grasp the changes of various key elements in the simulation process, and providing real-time and comprehensive monitoring data support for subsequent operations such as determining whether to adopt preventive encryption and selecting appropriate encryption strategies.

[0077] Specifically, step S5 is as follows:

[0078] S51: Setting a simulated leakage impact threshold, which is used to determine whether to adopt preventive encryption;

[0079] S52: comparing the simulated leakage impact with the simulated leakage impact threshold in real time, and executing step S53 when the conditions for taking preventive encryption are met;

[0080] S53: Select an encryption strategy based on the leakage time sequence, leakage logic sequence, leakage data source sequence and leakage impact, and execute the selected encryption strategy.

[0081] It should be noted that the simulated leakage impact threshold of this embodiment is an empirical value known to those skilled in the art; in a specific application, according to the leakage impact information contained in the historical leakage records obtained previously, the impact range corresponding to different leakage situations is analyzed; combined with the network platform's own requirements for data security and the degree of risk that can be tolerated, a maximum value of the simulated leakage impact is set as the threshold; this threshold will be used as a key criterion for judging whether preventive encryption needs to be initiated. Once the simulated leakage impact reaches or exceeds the threshold, it may mean that the data leakage risk is already at a high level, and more urgent countermeasures need to be taken, and the focus is on the situation that does not reach the threshold for preventive encryption. Further, S52 obtains the quantitative value of the current simulated leakage impact in real time during the process of continuously monitoring the simulated leakage records (such as the leakage time series, leakage logic sequence, leakage data source sequence and leakage impact corresponding to different leakage causes performed by step S4). The simulated leakage impact value obtained in real time is compared with the maximum value threshold set in step S51 to ensure that it can be timely and accurately judged whether the current simulated leakage situation has not yet reached the level where emergency measures need to be initiated, but is at a stage where preventive encryption can be performed. When it is found through comparison that the impact of the simulated leakage does not reach the set maximum threshold, it is determined that the conditions for preventive encryption are currently met. This means that although the risk of data leakage has not yet reached an extremely serious level, there is already a certain potential risk, and encryption means are needed to prevent possible more serious consequences of data leakage in advance and protect the data security of the network platform. When selecting an encryption strategy, traverse each encryption method in the encryption tool library and learn in detail about the characteristics of each encryption method, such as encryption algorithm principles, encryption strength, encryption speed, and applicability to different data types. The purpose of this step is to fully grasp the optional encryption means so as to select the encryption method that best suits the current simulated leakage situation for preventive encryption.

[0082] As a preferred implementation of this embodiment, the applicability of the encryption method to the current simulated leakage situation is evaluated, and factors to be considered include but are not limited to:

[0083] Whether it is possible to effectively deal with the leakage causes involved in the current simulated leakage situation, such as whether it can resist similar external attacks or prevent data leakage caused by illegal operations of internal personnel;

[0084] For each type of data source in the sequence of data sources involved in the simulated leak, whether the encryption method can provide appropriate encryption coverage to ensure that all data sources that may be affected can be effectively protected;

[0085] According to the time series and logic sequence of the simulated leakage, whether the encryption method can reasonably play the encryption role in the corresponding time nodes and logical processes, for example, whether the encryption operation can be performed in time during the data transmission stage or the data storage stage.

[0086] Based on the above, this embodiment uses the setting of simulated leakage impact thresholds and real-time comparisons, and selects and executes encryption strategies based on leakage-related sequences and impacts when the conditions are met, thereby achieving flexible and targeted preventive encryption operations based on the actual degree of impact in simulated leakage scenarios. By reasonably setting thresholds and selecting strategies based on relevant information, the relationship between data security protection and computing power resource consumption is effectively balanced, thereby ensuring the security of network platform data under potential leakage risks.

[0087] Specifically, step S6 is as follows:

[0088] S61: Continuously monitor the simulated leakage impact based on the preventive encryption when executing step S5;

[0089] S62: sorting the simulated leakage impacts obtained in step S61;

[0090] S63: The encryption strategy used when outputting the minimum value corresponding to the simulated leakage impact.

[0091] As a preferred implementation of this embodiment, based on the evaluation results of the applicability of each encryption method, the most suitable encryption method in the current simulated leakage situation is selected from the encryption tool library, and it is determined as the encryption method to be used for this preventive encryption. At the same time, combined with the leakage record and the current simulated leakage situation, the encryption object corresponding to the encryption method is clarified, that is, which data, data source, operation, etc. are to be encrypted. In addition, it is also necessary to determine the encryption order, such as whether to encrypt the data in transmission first, or to encrypt the stored data first, etc., to ensure the rationality and effectiveness of the encryption process. Based on the determined optimal encryption method, encryption object and encryption order (that is, the encryption strategy adopted when the simulated leakage impact corresponds to the minimum value), the preventive encryption operation is formally performed on the network platform. By calling the corresponding encryption algorithm and tool, the selected encryption object is encrypted according to the established encryption order, and the data that may be at risk of leakage is converted into encrypted and protected data, thereby reducing the risk of data leakage and achieving preventive protection of network platform data.

[0092] Specifically, step S7 is as follows:

[0093] S71: Integrate leakage characteristics and encryption strategies;

[0094] S72: Using knowledge base technology to establish a framework for encrypted knowledge base;

[0095] S73: mapping and associating the leakage characteristics and the encryption strategy within the framework of step S72, and fixing them;

[0096] S74: Enter and store the mapping and association between the leakage characteristics and the encryption strategy obtained in step S73 into the framework of the encryption knowledge base in step S72;

[0097] S75: Create a knowledge base index for step S74 and perform a knowledge base integrity check before outputting.

[0098] It should be noted that this embodiment uses the existing knowledge base technology to complete the construction of the knowledge base technology.

[0099] Based on the above, this embodiment utilizes the integration of leakage characteristics and encryption strategies, establishes the framework of an encryption knowledge base, performs mapping and association, and enters and stores them, and finally establishes an index and performs an integrity check, thereby achieving effective integration and storage of previous data leakage-related experiences and response strategies in the form of a knowledge base, facilitating subsequent rapid query and matching of encryption strategies corresponding to real-time leakage characteristics, and improving the efficiency and accuracy of data encryption methods in responding to different real-time leakage situations.

[0100] Specifically, step S8 is as follows:

[0101] S81: Obtain real-time leakage records;

[0102] S82: Extract features from the real-time leakage records to obtain and output real-time leakage features.

[0103] Based on the above, this embodiment obtains real-time leakage records and performs feature extraction to obtain real-time leakage features, thereby realizing feature capture of the data leakage situation occurring in real time, laying the foundation for subsequent matching of these real-time features with the encryption knowledge base, thereby obtaining and executing appropriate encryption strategies, and ensuring that effective data encryption measures can be taken in time according to the real-time leakage situation to ensure the data security of the network platform.

[0104] Specifically, step S9 is as follows:

[0105] S91: matching the real-time leakage features in the encrypted knowledge base;

[0106] S92: Output the encryption policy corresponding to the leakage feature that meets the feature matching condition and execute it.

[0107] Based on the above, this embodiment uses real-time leakage features to perform feature matching in the encryption knowledge base, and outputs and executes encryption policies that meet the conditions, thereby quickly obtaining targeted encryption strategies from the existing encryption knowledge base based on real-time data leakage situations and immediately implementing them. Through efficient feature matching and timely policy execution, it effectively responds to the risk of data leakage that may occur at any time on the network platform and ensures data security.

[0108] In summary, the data encryption method for the network platform of this embodiment utilizes a series of steps such as obtaining historical leakage records, extracting features thereof, simulating leakage based on records, monitoring simulated leakage records, performing preventive encryption when the impact of simulated leakage has not reached the maximum value, continuously monitoring the impact after encryption and outputting the optimal encryption strategy, generating an encryption knowledge base, and obtaining real-time leakage records and matching encryption strategies. It realizes the integration of accurate and real-time data leakage risk assessment and targeted data encryption, effectively ensures the data security of the network platform, and solves the problems of high computing power cost and difficulty in accurately responding to data leakage risks of traditional data encryption in the scenario of massive data on the network platform.

[0109] In the embodiments provided in the present application, it should be understood that the embodiments described herein can be implemented in hardware, software, firmware, middleware, code or any appropriate combination thereof. For hardware implementation, the processor can be implemented in one or more of the following units: application specific integrated circuit (ASIC), digital signal processor (DSP), digital signal processing device (DSPD), programmable logic device (PLD), field programmable gate array (FPGA), processor, controller, microcontroller, microprocessor, other electronic units designed to implement the functions described herein or their combination. For software implementation, part or all of the flow of the embodiment can be completed by instructing the relevant hardware through a computer program. When implemented, the above program can be stored in a computer-readable storage medium or transmitted as one or more instructions or codes on a computer-readable storage medium. Computer-readable storage media include computer storage media and communication media, wherein the communication medium includes any medium that is convenient for transmitting a computer program from one place to another. The storage medium can be any available medium that a computer can access. The computer-readable storage medium can include but is not limited to RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of an instruction or data structure and can be accessed by a computer.

[0110] Finally, it should be noted that the above is only a preferred embodiment of the present application and is not intended to limit the present application. Although the present application has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

Claims

1. A data encryption method for a network platform, characterized in that: include: S1: Obtain historical leakage records; wherein the leakage records are used to characterize the leakage of data on the network platform, and the leakage records store the leakage impact that characterizes the quantified leakage damage; S2: Extract features from the historical leakage records and save the generated leakage features; wherein the leakage features are used to characterize the characteristics of the leakage of data on the network platform; S3: Simulating the leakage of data on the network platform based on the leakage record; S4: When executing step S3, continuously monitoring the simulated leakage records corresponding to different leakage records; the simulated leakage records correspond to the leakage records; S5: When executing step S4, when the simulated leakage impact does not reach the corresponding maximum value, calling a preset encryption tool library to perform preventive encryption of the data of the network platform based on the leakage record; wherein the encryption tool library stores a variety of encryption methods, and the encryption time and encryption complexity required for each encryption method are different; S6: Continuously monitor the leakage impact after preventive encryption when executing step S5, and output the encryption strategy adopted when the minimum value corresponding to the simulated leakage impact is reached; wherein the encryption strategy is the selected encryption method, the corresponding encryption object and the encryption order; S7: fix the leakage features and the corresponding encryption strategies to generate an encryption knowledge base; S8: Obtain real-time leakage records to extract features and save real-time leakage features; S9: Match the real-time leakage features in the encryption knowledge base, output the corresponding encryption strategy and execute it.

2. The data encryption method for a network platform according to claim 1, characterized in that: The leakage record includes leakage cause, leakage time sequence, leakage logic sequence, leakage data source sequence and leakage impact; Among them, the leakage cause is the cause of the leakage of the network platform data, the leakage time series is the corresponding time sequence of the leakage of the network platform data, the leakage logic sequence is the logically corresponding sequence when performing data leakage risk assessment, the leakage data source sequence is the sequence of data sources corresponding to the leakage of the network platform data, and the leakage impact is the quantitative value of the damage to the network platform caused by the leakage of the network platform data.

3. The data encryption method for a network platform according to claim 1, characterized in that: The leakage characteristics include cause characteristics, time series characteristics, logic sequence characteristics, data source characteristics and impact characteristics; Among them, the cause characteristics are the characteristics of the causes of the leakage of data on the network platform, the time series characteristics are the characteristics of the time-corresponding sequence of the leakage of data on the network platform, the logical sequence characteristics are the characteristics of the logically corresponding sequence when conducting data leakage risk assessment, the data source sequence characteristics are the characteristics of the sequence relationship on the data source corresponding to the leakage of data on the network platform, and the impact characteristics are the characteristics of the damage to the network platform caused by the leakage of data on the network platform.

4. The data encryption method for a network platform according to claim 2, characterized in that: Step S3 is specifically: S31: parsing the leakage record and determining key parameters required for data leakage simulation based on the parsing result; the key parameters are quantitative parameters of the impact degree caused by the leakage of data on the network platform; S32: Simulating the leakage of data on the network platform based on the pre-built simulated network platform and the key parameters obtained in step S31; S34: Record the simulated process of data leakage on the network platform in step S32, and generate the simulated leakage record.

5. The data encryption method for a network platform according to claim 4, characterized in that: Step S4 specifically includes: continuously monitoring the leakage of the network platform data and simulating the leakage time series, the leakage logic series, the leakage data source series and the leakage impact corresponding to different leakage causes.

6. The data encryption method for a network platform according to claim 5, characterized in that: Step S5 is specifically: S51: Setting a simulated leakage impact threshold, which is used to determine whether to adopt preventive encryption; S52: comparing the simulated leakage impact with the simulated leakage impact threshold in real time, and executing step S53 when the condition for taking preventive encryption is met; S53: Selecting the encryption strategy based on the leakage time sequence, the leakage logic sequence, the leakage data source sequence and the leakage impact, and executing the selected encryption strategy.

7. The data encryption method for a network platform according to claim 6, characterized in that: Step S6 is specifically: S61: Continuously monitor the simulated leakage impact based on the preventive encryption when executing step S5; S62: sorting the simulated leakage impacts obtained in step S61; S63: Outputting the encryption strategy adopted when the minimum value corresponding to the simulated leakage impact is obtained.

8. The data encryption method for a network platform according to claim 7, characterized in that: Step S7 is specifically: S71: Integrate the leakage feature and the encryption strategy; S72: Using knowledge base technology to establish a framework of the encrypted knowledge base; S73: mapping and associating the leakage feature and the encryption strategy within the framework of step S72, and fixing them; S74: Enter and store the mapping and association between the leakage feature and the encryption strategy obtained in step S73 into the framework of the encryption knowledge base in step S72; S75: Create a knowledge base index for step S74 and perform a knowledge base integrity check before outputting.

9. The data encryption method for a network platform according to claim 1, characterized in that: Step S8 is specifically: S81: Obtain real-time leakage records; S82: Extract features from the real-time leakage record to obtain and output real-time leakage features.

10. The data encryption method for a network platform according to claim 9, characterized in that: Step S9 is specifically: S91: performing feature matching on the real-time leakage feature in the encrypted knowledge base; S92: Output the encryption policy corresponding to the leakage feature that meets the feature matching condition and execute it.

Images