Unencrypted data detection method and device, equipment, storage medium and product

Abstract

The embodiment of the invention provides an unencrypted data detection method and device, equipment, a storage medium and a product. According to the technical scheme provided by the embodiment of the invention, the to-be-detected data file is acquired from the database, the data content in the to-be-detected data file is recorded in the form of the key-value pair, the sensitive key field can be detected according to the key field content of the data content in the to-be-detected data file, and when the sensitive key field is detected, the sensitive key field is detected. According to the method, the value field content corresponding to the sensitive key field is subjected to unencrypted judgment, so that the unencrypted judgment result of the data content is determined, the sensitive and unencrypted data in the database is accurately detected, and the detection efficiency of the unencrypted data is effectively improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of computer technology, and in particular, to a method, apparatus, device, storage medium and product for detecting unencrypted data. Background Art

[0002] With the acceleration of the digitalization process, personal privacy data protection and data security protection are becoming increasingly important in the network society, and data security storage is an indispensable part of it. The main purpose of secure storage of sensitive data is to prevent data leakage caused by plain text storage, external hacker attacks that break through boundary protection, and data theft from internal high-authority users, fundamentally solving the problem of sensitive data leakage in the database.

[0003] Unencrypted storage detection of sensitive data in a database refers to the security risk identification and management process of identifying sensitive data fields, encrypting data content, managing risks, and encrypting storage for data stored in the database. Unencrypted sensitive data storage refers to the storage of potentially sensitive data without any encryption when the business stores program data.

[0004] The existing detection of unencrypted data storage is mainly carried out through manual investigation. However, with the increase of users and application functions, the amount of data in the database is getting larger and larger, and the efficiency of manual investigation of unencrypted data is low. Summary of the invention

[0005] The embodiments of the present application provide a method, device, equipment, storage medium and product for detecting unencrypted data to solve the technical problem of low efficiency of manual screening of unencrypted data in related technologies, and can effectively improve the detection efficiency of unencrypted data.

[0006] In a first aspect, an embodiment of the present application provides a method for detecting unencrypted data, comprising:

[0007] Acquire a data file to be detected from a database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair;

[0008] Detect sensitive key fields according to the key field content of the data content in the data file to be detected;

[0009] In the case where a sensitive key field is detected, an unencrypted judgment is performed on the content of the value field corresponding to the sensitive key field to determine an unencrypted judgment result of the data content.

[0010] In a second aspect, an embodiment of the present application provides an unencrypted data detection device, including a data acquisition module, a sensitive detection module and an unencrypted data judgment module, wherein:

[0011] The data acquisition module is configured to acquire a data file to be detected from a database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair;

[0012] The sensitive detection module is configured to detect sensitive key fields according to the key field content of the data content in the data file to be detected;

[0013] The unencrypted judgment module is configured to, when a sensitive key field is detected, perform an unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content.

[0014] In a third aspect, an embodiment of the present application provides an unencrypted data detection device, including: a memory and one or more processors;

[0015] The memory is used to store one or more programs;

[0016] When the one or more programs are executed by the one or more processors, the one or more processors implement the unencrypted data detection method as described in the first aspect.

[0017] In a fourth aspect, an embodiment of the present application provides a non-volatile storage medium storing computer executable instructions, wherein the computer executable instructions, when executed by a computer processor, are used to execute the unencrypted data detection method as described in the first aspect.

[0018] In the fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program, which is stored in a computer-readable storage medium, and at least one processor of the device reads and executes the computer program from the computer-readable storage medium, so that the device performs the unencrypted data detection method as described in the first aspect.

[0019] The embodiment of the present application obtains a data file to be detected from a database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair. The sensitive key field can be detected according to the key field content of the data content in the data file to be detected. When the sensitive key field is detected, the value field content corresponding to the sensitive key field is judged to be unencrypted to determine the unencrypted judgment result of the data content, accurately detect the sensitive and unencrypted data in the database, and effectively improve the detection efficiency of unencrypted data. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 is a flow chart of an unencrypted data detection method provided by an embodiment of the present application;

[0021] Figure 2 is a flow chart of another unencrypted data detection method provided by an embodiment of the present application;

[0022] Figure 3 It is a structural schematic diagram of an unencrypted data detection device provided in an embodiment of the present application;

[0023] Figure 4 It is a structural schematic diagram of an unencrypted data detection device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to make the purpose, technical scheme and advantages of the present application clearer, the specific embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. It is understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for the convenience of description, only the part related to the present application but not all the contents are shown in the accompanying drawings. Before discussing the exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow chart describes each operation (or step) as a sequential process, many of the operations therein can be implemented in parallel, concurrently or simultaneously. In addition, the order of each operation can be rearranged. The above process can be terminated when its operation is completed, but it can also have additional steps not included in the accompanying drawings. The above process can correspond to a method, a function, a procedure, a subroutine, a subprogram, etc.

[0025] The unencrypted data detection method provided in the present application can be applied to scenarios such as information security, data security, storage, and defense detection. It aims to obtain the data file to be detected from the database, detect sensitive key fields based on the key field content of the data content in the data file to be detected, and perform an unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content.

[0026] In the existing database, sensitive unencrypted data detection is generally performed by manual investigation of database sampling identification or static code auditing. However, this unencrypted data detection method has problems such as low efficiency, large workload, reliance on the intuition of the inspector, easy neglect of marginal business, and inadequate historical business investigation. Based on this, an unencrypted data detection method of the embodiment of the present application is provided to solve the technical problem of poor detection efficiency of existing unencrypted data.

[0027] Figure 1 A flowchart of an unencrypted data detection method provided in an embodiment of the present application is given. The unencrypted data detection method provided in an embodiment of the present application can be executed by an unencrypted data detection device, which can be implemented by hardware and / or software and integrated in an unencrypted data detection device.

[0028] The following description is made by taking the unencrypted data detection device executing the unencrypted data detection method as an example. Figure 1 , the unencrypted data detection method comprises:

[0029] S110: Acquire the data file to be detected from the database, and record the data content in the data file to be detected in the form of key-value pairs.

[0030] Exemplarily, a data file that needs to be tested for unencrypted data is obtained from a database as a data file to be tested. Optionally, the database provided by this solution may be a relational database and / or a non-relational database, for example, the database may be a MySQL database, an Oracle database, a MyShard database, a Clickhouse database, etc.

[0031] Among them, the data files saved in the database can record one or more data contents, and the data contents can be recorded in the form of key-value pairs. That is, the data content of the database can be stored in the form of key-value pairs, or the data content collection document can also contain key-value pairs to express the storage information.

[0032] S120: Detect sensitive key fields according to the key field content of the data content in the data file to be detected.

[0033] Exemplarily, after obtaining the data file to be detected, the key field content (i.e., the content corresponding to the key) corresponding to the key field (i.e., the field corresponding to the key) in the data content of the data to be detected is obtained, and a sensitive key field detection is performed on the key field based on the key field content, and whether the corresponding key field is a sensitive key field is determined based on the sensitive key field detection result.

[0034] In one embodiment, the sensitive key fields of multiple data files of the same database or multiple databases can be detected at the same time, and unencrypted judgments can be made based on the value field contents corresponding to the multiple sensitive key fields detected, so as to synchronously determine the unencrypted judgment results of multiple data contents, thereby improving the efficiency of unencrypted judgments. It is also possible to detect sensitive key fields of each data file in turn, and then make the next step of unencrypted judgment based on the value field content after the sensitive key field is detected, thereby reducing the consumption of computing resources for data unencrypted judgment. Optionally, when making an unencrypted judgment on a data file, it can be a sensitive key field detection of the key field contents of multiple key fields at the same time, or it can be a sensitive key field detection of the key field contents of each key field in turn. Optionally, when making an unencrypted judgment on a data file, it can be a sensitive key field detection of the key field contents of all key fields, or it can be a sensitive key field detection of the key field contents of some key fields obtained by sampling.

[0035] S130: When a sensitive key field is detected, a judgment is made as to whether the content of the value field corresponding to the sensitive key field is unencrypted, so as to determine a judgment result as to whether the data content is unencrypted.

[0036] Exemplarily, when a sensitive key field is detected, the value field corresponding to the sensitive key field (i.e., the field corresponding to value) can be determined, and the value field content corresponding to the value field can be judged to be unencrypted, that is, whether the value field content has been encrypted, and the unencrypted judgment result of the corresponding data content can be determined based on the unencrypted judgment result, and the unencrypted judgment result of the data content can be saved.

[0037] For example, when the data content corresponding to an unencrypted password is "password:123456xxx", the key field content corresponding to its key field (key) is "password", and the value field content corresponding to the value field is "123456xxx". The key field content "password" can be detected as sensitive key field, and the key field of the data content can be determined to be a sensitive key field. The value field content "123456xxx" is judged as unencrypted, and the unencrypted judgment result of the data content is that the data content is unencrypted. This scheme realizes efficient detection of unencrypted sensitive content by first detecting and identifying the sensitive key field in the data file to be detected, and then judging the value field content corresponding to the sensitive key field as unencrypted. The unencrypted data detection results can be manually reviewed and reconfirmed later, and the sensitive key field rules and / or unencrypted judgment rules can be adjusted according to the unencrypted data detection results to improve the detection accuracy of unencrypted sensitive content.

[0038] In one embodiment, the unencrypted judgment result of the data content can be provided to a preset result processing module, and the data content or the corresponding data file to be detected can be processed by the result processing module according to the unencrypted judgment result, such as secondary confirmation, alarm reporting, secondary risk assessment and archiving of the data content or the corresponding data file to be detected, and the detection result can be reviewed and processed for the second time, and evaluated and processed by security personnel or business, and alarms or data reports can be issued according to the detection results. The risk items of the detection results can also be managed and archived to build a relevant security baseline as part of risk situation awareness.

[0039] As described above, by obtaining the data file to be detected from the database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair, the sensitive key field can be detected according to the key field content of the data content in the data file to be detected, and when the sensitive key field is detected, the value field content corresponding to the sensitive key field is judged to be unencrypted to determine the unencrypted judgment result of the data content, accurately detect the sensitive and unencrypted data in the database, and effectively improve the detection efficiency of unencrypted data.

[0040] Based on the above embodiments, Figure 2 A flowchart of another unencrypted data detection method provided in an embodiment of the present application is given, which is a specific implementation of the above unencrypted data detection method. Figure 2 , the unencrypted data detection method comprises:

[0041] S210: Acquire the data file to be detected from the database, and record the data content in the data file to be detected in the form of key-value pairs.

[0042] Exemplarily, this solution can provide a public interface for obtaining database information and data as a unified database interface to realize functions such as connection query and management of the database. The unified database interface can be connected to relational and non-relational databases, such as MySQL database, Oracle database, MyShard database, Clickhouse database, etc. The acquisition or management of information such as database or cluster information, library table relationship, related business ownership, and person in charge can also be realized through database cluster assets. Database-related assets (such as business clusters, library tables, fields, etc.) can be classified and graded, and sensitivity marked and divided according to data specification requirements through data asset classification and grading. Obtaining the data file to be detected from the database can be to sample the content of the database table by setting the sampling data ratio or quantity, and using the sampling result as the data file to be detected. For example, randomly sampling the content of the database table in the database to obtain the data file to be detected, and there is no need to detect the full amount of data in the database. Representative detection of the data file to be detected can effectively improve the efficiency of unencrypted data detection.

[0043] S220: Determine a first sensitivity score corresponding to the key field content of the data content in the data file to be detected based on a first expert system rule base, wherein the first expert system rule base records sensitive data detection rules.

[0044] Optionally, the sensitive key field detection of the data content can be performed through the first expert system rule base and / or the trained sensitive judgment model, and the final sensitive key field detection result can be determined according to the sensitive key field detection results of the first expert system rule base and / or the sensitive judgment model. Taking the sensitive key field detection of the data content by the first expert system rule base and the sensitive judgment model as an example, the final sensitive key field detection result can be determined according to the sensitive key field detection results of the first expert system rule base and the sensitive judgment model, thereby improving the detection accuracy of the sensitive key field. Sensitive data detection rules are recorded in the first expert system rule base, and the first sensitive score of the key field content can be determined based on the sensitive data detection rules. For example, the sensitive data detection rules can be based on the enterprise data classification and grading standards or regulations, and the sensitive data contained in the key field content can be identified and searched according to the rules. Sensitive data can be user passwords, mobile phone numbers, order numbers, payment passwords, ID numbers, bank card information, home addresses, communication records, etc., and the identification method of sensitive data can be keyword matching, regular expression search, full search, etc. Among them, the higher the first sensitive score, the higher the possibility that the key field corresponding to the key field content is a sensitive key field.

[0045] Exemplarily, after obtaining the data file to be detected, the key field content of the data content in the data file to be detected is obtained, and the key field content is submitted to the first expert system rule base, and the first expert system rule base performs sensitive data detection on the key field content based on preset sensitive data detection rules, and obtains a first sensitivity score based on the sensitive data detection result feedback of the first expert system rule base.

[0046] In a possible embodiment, the unencrypted data detection method provided by the present solution determines the first sensitivity score corresponding to the key field content of the data content in the data file to be detected based on the first expert system rule base, which may include:

[0047] S221: Determine a target detection rule from the sensitive data detection rules of the first expert system rule base according to the data classification and grading information corresponding to the data file to be detected.

[0048] S222: Detect sensitive data in the key field content of the data content in the data file to be detected based on the target detection rule using the first expert system rule base, and determine a first sensitivity score according to the sensitive data detection result.

[0049] There are multiple sensitive data detection rules recorded in the first expert system rule base, and different sensitive data detection rules can be used for sensitive data detection of data files under different data classification and grading. Exemplarily, the data classification and grading information corresponding to the detection data file is determined, and the applicable sensitive data detection rule is determined from the sensitive data detection rules of the first expert system rule base as the target detection rule according to the data classification and grading information.

[0050] In one embodiment, the unencrypted data detection method provided by the present scheme can also determine the data classification and grading information of the data file to be detected based on a combination of one or more of the business cluster information, library table information and field information of the data file to be detected before determining the target detection rule from the sensitive data detection rules of the first expert system rule base based on the data classification and grading information corresponding to the data file to be detected.

[0051] Optionally, the corresponding data classification and grading information can be determined in advance for different combinations of one or more of the business cluster information, library table information, and field information. Exemplarily, after obtaining the data file to be detected, the combination of one or more of the business cluster information, library table information, and field information of the data file to be detected is determined, and the data classification and grading information of the data file to be detected is accurately determined based on the combination of one or more of the business cluster information, library table information, and field information of the data file to be detected. The target detection rules can be accurately determined based on the data classification and grading information, thereby improving the accuracy of unencrypted data detection.

[0052] In one embodiment, after determining the target detection rule, the key field content of the data content in the data file to be detected is obtained, and the key field content is submitted to the first expert system rule base, and the first expert system rule base is used to detect sensitive data in the key field content of the data content in the data file to be detected based on the target detection rule, and a first sensitivity score corresponding to the key field content is determined according to the sensitive data detection result.

[0053] This solution determines the target detection rule from the sensitive data detection rules of the first expert system rule base according to the data classification and grading information corresponding to the data file to be detected, and performs sensitive data detection on the key field content based on the target detection rule to obtain a first sensitivity score. The determination of the first sensitivity score is more accurate, which effectively improves the accuracy of unencrypted data detection.

[0054] S230: Send the key field content of the data content in the data file to be detected to the trained sensitivity judgment model, and determine the second sensitivity score corresponding to the key field content of each data content through the sensitivity judgment model.

[0055] Exemplarily, after obtaining the data file to be detected, the key field content of the data content in the data file to be detected is obtained, and the key field content is sent to the trained sensitivity judgment model, and the key field content is analyzed and processed by the sensitivity judgment model to obtain the second sensitivity score corresponding to the key field content. Among them, the higher the second sensitivity score, the higher the possibility that the key field content is a sensitive key field.

[0056] S240: Determine a sensitivity confidence value of the key field content according to the first sensitivity score and the second sensitivity score, and when the sensitivity confidence value reaches a preset sensitivity threshold, determine that the key field corresponding to the key field content is a sensitive key field.

[0057] Exemplarily, after determining the first sensitivity score and the second sensitivity score, the sensitivity confidence value of the key field content may be determined according to the first sensitivity score and the second sensitivity score. For example, the first sensitivity score and the second sensitivity score may be added together, or the first sensitivity score and the second sensitivity score may be weighted and summed to obtain the sensitivity confidence value.

[0058] In one possible embodiment, the unencrypted data detection method provided by the present solution determines the sensitive confidence value of the key field content based on the first sensitive score and the second sensitive score. The method may be to perform a weighted sum processing on the first sensitive score and the second sensitive score, and determine the sensitive confidence value of the key field content based on the weighted sum result.

[0059] Exemplarily, after determining the first sensitive score and the second sensitive score, based on the preset first sensitive weight and the second sensitive weight, the first sensitive score and the second sensitive score are weighted and summed, and the weighted sum result is used as the sensitive confidence value of the key field content. For example, the sensitive confidence value can be expressed as: c=ax1+bx2, where a is the first sensitive score, b is the second sensitive score, x1 is the first sensitive weight, and x2 is the second sensitive weight. The first sensitive weight and the second sensitive weight can be preset and dynamically adjusted according to the detection accuracy requirements for the sensitive key field. This solution determines the sensitive confidence value of the key field content by performing a weighted sum of the first sensitive score and the second sensitive score, accurately detects the sensitive key field, and improves the accuracy of unencrypted data detection.

[0060] After determining the sensitive confidence value of the key field content, the sensitive confidence value can be compared with the preset sensitivity threshold, and whether the key field is a sensitive key field can be determined based on the comparison result. For example, when the sensitive confidence value reaches the preset sensitivity threshold, the key field corresponding to the key field content can be determined to be a sensitive key field, and when the sensitive confidence value does not reach the preset sensitivity threshold, the key field corresponding to the key field content can be determined to be a non-sensitive key field. This solution improves the detection accuracy of sensitive key fields by determining the detection result of a key field as a sensitive key field based on a first sensitive score based on key field content feedback by a first expert system rule base and a second sensitive score based on key field content feedback by a sensitive judgment model.

[0061] S250: When a sensitive key field is detected, a first unencrypted score corresponding to the value field content corresponding to the sensitive key field is determined based on a second expert system rule base, and the second expert system rule base records unencrypted data judgment rules.

[0062] Optionally, the value field content corresponding to the sensitive key field can be judged as unencrypted through the second expert system rule base and / or the trained unencrypted judgment model, and the final unencrypted judgment result can be determined according to the unencrypted judgment result of the second expert system rule base and / or the unencrypted judgment model. Taking the unencrypted judgment of the data content through the second expert system rule base and the unencrypted judgment model as an example, the final unencrypted judgment result can be determined according to the unencrypted judgment results of the second expert system rule base and the unencrypted judgment model, thereby improving the detection accuracy of sensitive unencrypted data. The unencrypted data judgment rule is recorded in the second expert system rule base, and the first unencrypted score of the value field content can be determined based on the unencrypted data judgment rule. For example, the unencrypted data judgment rule can be a length judgment of the value field content, an encryption and decryption content test, etc. For example, in the Advanced Encryption Standard (AES) key, there is a limit on the length of the encrypted data content (for example, the data length is limited to 128 bits, 192 bits, 256 bits, etc.). When the length of the value field content is less than the length limit, the value field content can be considered to be unencrypted. Among them, the higher the first unencrypted score is, the higher the possibility that the value field content is unencrypted content is.

[0063] Exemplarily, when a sensitive key field is detected, the value field content corresponding to the sensitive key field is obtained, and the value field content corresponding to the sensitive key field is submitted to the second expert system rule base, and the second expert system rule base performs a data unencrypted judgment on the value field content based on a preset unencrypted data judgment rule, and obtains a first unencrypted score based on the unencrypted judgment result feedback of the second expert system rule base.

[0064] S260: Send the value field content corresponding to the sensitive key field to the trained unencrypted judgment model, and determine the second unencrypted score corresponding to the value field content corresponding to the sensitive key field through the unencrypted judgment model.

[0065] Exemplarily, when a sensitive key field is detected, the value field content corresponding to the sensitive key field is obtained, and the value field content corresponding to the sensitive key field is sent to the trained unencrypted judgment model, and the value field content is analyzed and processed by the unencrypted judgment model to obtain a second unencrypted score corresponding to the value field content. The higher the second unencrypted score, the higher the possibility that the value field content corresponding to the sensitive key field is unencrypted content.

[0066] S270: Determine an unencrypted confidence value of the value field content according to the first unencrypted score and the second unencrypted score, and when the unencrypted confidence value reaches a preset unencrypted threshold, determine that the unencrypted judgment result of the data content is that the data content is unencrypted.

[0067] Exemplarily, after determining the first unencrypted score and the second unencrypted score, the unencrypted confidence value of the value field content may be determined according to the first unencrypted score and the second unencrypted score. For example, the first unencrypted score and the second unencrypted score may be added together, or the first unencrypted score and the second unencrypted score may be weightedly summed to obtain the unencrypted confidence value.

[0068] In one possible embodiment, the unencrypted data detection method provided by the present solution determines the unencrypted confidence value of the value field content based on the first unencrypted score and the second unencrypted score. The method may be to perform a weighted sum processing on the first unencrypted score and the second unencrypted score, and determine the unencrypted confidence value of the value field content based on the weighted sum result.

[0069] Exemplarily, after determining the first unencrypted score and the second unencrypted score, the first unencrypted score and the second unencrypted score are weighted and summed based on the preset first unencrypted weight and the second unencrypted weight, and the weighted sum result is used as the unencrypted confidence value of the value field content. For example, the unencrypted confidence value can be expressed as: f=dx3+ex4, where d is the first unencrypted score, e is the second unencrypted score, x3 is the first unencrypted weight, and x4 is the second unencrypted weight. The first unencrypted weight and the second unencrypted weight can be preset and dynamically adjusted according to the detection accuracy requirements for the unencrypted value field content. This solution determines the unencrypted confidence value of the value field content by weighted summing the first unencrypted score and the second unencrypted score, accurately detects the unencrypted value field content, and improves the accuracy of unencrypted data detection.

[0070] In one embodiment, after determining the unencrypted confidence value of the value field content, the unencrypted confidence value and the preset unencrypted threshold value can be compared, and the unencrypted judgment result of the data content can be determined based on the comparison result. For example, when the unencrypted confidence value reaches the preset unencrypted threshold value, the value field content can be determined to be unencrypted value field content, and the unencrypted judgment result of the data content is that the data content is unencrypted; and when the unencrypted confidence value does not reach the preset unencrypted threshold value, the value field content can be determined to be encrypted value field content, and the unencrypted judgment result of the data content is that the data content is encrypted. This solution improves the detection accuracy of unencrypted data detection by determining the unencrypted judgment result of the value field content based on the first unencrypted score fed back by the first expert system rule base based on the value field content and the second unencrypted score fed back by the unencrypted judgment model based on the value field content.

[0071] In the above, by obtaining the data file to be detected from the database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair, the sensitive key field can be detected according to the key field content of the data content in the data file to be detected, and when the sensitive key field is detected, the value field content corresponding to the sensitive key field is judged to be unencrypted, so as to determine the unencrypted judgment result of the data content, accurately detect the sensitive and unencrypted data in the database, and effectively improve the detection efficiency of unencrypted data. At the same time, by determining the key field as a sensitive key field detection result according to the first sensitive score based on the key field content feedback of the first expert system rule base and the second sensitive score based on the key field content feedback of the sensitive judgment model, the detection accuracy of the sensitive key field is improved. And by determining the unencrypted judgment result of the value field content according to the first unencrypted score based on the value field content feedback of the first expert system rule base and the second unencrypted score based on the value field content feedback of the unencrypted judgment model, the detection accuracy of the unencrypted data detection is improved.

[0072] Figure 3 Schematic diagram of the structure of an unencrypted data detection device provided by an embodiment of the present application. Figure 3 The unencrypted data detection device includes a data acquisition module 31, a sensitive detection module 32 and an unencrypted data judgment module 33.

[0073] Among them, the data acquisition module 31 is configured to obtain the data file to be detected from the database, and the data content in the data file to be detected is recorded in the form of key-value pairs; the sensitive detection module 32 is configured to detect the sensitive key field according to the key field content of the data content in the data file to be detected; the unencrypted judgment module 33 is configured to, when the sensitive key field is detected, make an unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content.

[0074] As described above, by obtaining the data file to be detected from the database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair, the sensitive key field can be detected according to the key field content of the data content in the data file to be detected, and when the sensitive key field is detected, the value field content corresponding to the sensitive key field is judged to be unencrypted to determine the unencrypted judgment result of the data content, accurately detect the sensitive and unencrypted data in the database, and effectively improve the detection efficiency of unencrypted data.

[0075] In a possible embodiment, the sensitive detection module 32 detects the sensitive key field according to the key field content of the data content in the data file to be detected, and is configured as follows:

[0076] Determine a first sensitivity score corresponding to a key field content of data content in a data file to be detected based on a first expert system rule base, wherein the first expert system rule base records sensitive data detection rules;

[0077] Send the key field content of the data content in the data file to be detected to the trained sensitivity judgment model, and determine the second sensitivity score corresponding to the key field content of each data content through the sensitivity judgment model;

[0078] Determine a sensitivity confidence value of the key field content according to the first sensitivity score and the second sensitivity score;

[0079] When the sensitivity confidence value reaches a preset sensitivity threshold, the key field corresponding to the key field content is determined to be a sensitive key field.

[0080] In a possible embodiment, the sensitivity detection module 32 determines the first sensitivity score corresponding to the key field content of the data content in the data file to be detected based on the first expert system rule base, and is configured as follows:

[0081] Determine a target detection rule from the sensitive data detection rules of the first expert system rule base according to the data classification and grading information corresponding to the data file to be detected;

[0082] The first expert system rule base is used to detect sensitive data in the key field content of the data content in the data file to be detected based on the target detection rule, and a first sensitivity score is determined according to the sensitive data detection result.

[0083] In a possible embodiment, the unencrypted data detection device also includes a classification and grading module, which is configured to determine data classification and grading information of the data file to be detected based on a combination of one or more of the business cluster information, library table information and field information of the data file to be detected.

[0084] In a possible embodiment, the sensitivity detection module 32 determines the sensitivity confidence value of the key field content according to the first sensitivity score and the second sensitivity score, and is configured as follows:

[0085] A weighted sum process is performed on the first sensitivity score and the second sensitivity score, and a sensitive confidence value of the key field content is determined according to the weighted sum result.

[0086] In a possible embodiment, the unencrypted judgment module 33 performs an unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content, and is configured as follows:

[0087] Determine a first unencrypted score corresponding to the content of the value field corresponding to the sensitive key field based on a second expert system rule base, wherein the second expert system rule base records unencrypted data judgment rules;

[0088] Sending the value field content corresponding to the sensitive key field to the trained unencrypted judgment model, and determining a second unencrypted score corresponding to the value field content corresponding to the sensitive key field through the unencrypted judgment model;

[0089] determining an unencrypted confidence value for the value field content based on the first unencrypted score and the second unencrypted score;

[0090] When the unencrypted confidence value reaches a preset unencrypted threshold, the unencrypted judgment result of the data content is determined to be that the data content is unencrypted.

[0091] In a possible embodiment, the unencrypted judgment module 33 determines the unencrypted confidence value of the value field content based on the first unencrypted score and the second unencrypted score, and is configured to: perform weighted sum processing on the first unencrypted score and the second unencrypted score, and determine the unencrypted confidence value of the value field content based on the weighted sum result.

[0092] It is worth noting that in the above-mentioned embodiment of the unencrypted data detection device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the embodiments of the present application.

[0093] The embodiment of the present application also provides an unencrypted data detection device, which can integrate the unencrypted data detection apparatus provided in the embodiment of the present application. Figure 4 Schematic diagram of the structure of an unencrypted data detection device provided in an embodiment of the present application. Figure 4The unencrypted data detection device includes: an input device 43, an output device 44, a memory 42 and one or more processors 41; the memory 42 is used to store one or more programs; when one or more programs are executed by one or more processors 41, the one or more processors 41 implement the unencrypted data detection method provided in the above embodiment. The unencrypted data detection device, equipment and computer provided above can be used to execute the unencrypted data detection method provided in any of the above embodiments, and have corresponding functions and beneficial effects.

[0094] The embodiments of the present application also provide a non-volatile storage medium storing computer executable instructions, which are used to execute the unencrypted data detection method provided in the above embodiments when executed by a computer processor. Of course, the non-volatile storage medium storing computer executable instructions provided in the embodiments of the present application, whose computer executable instructions are not limited to the unencrypted data detection method provided above, can also execute the related operations in the unencrypted data detection method provided in any embodiment of the present application. The unencrypted data detection device, equipment and storage medium provided in the above embodiments can execute the unencrypted data detection method provided in any embodiment of the present application. For technical details not described in detail in the above embodiments, please refer to the unencrypted data detection method provided in any embodiment of the present application.

[0095] On the basis of the above embodiments, the embodiments of the present application also provide a computer program product. The essence of the technical solution of the present application or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer program product is stored in a storage medium, including a number of instructions for enabling a computer device, a mobile terminal or a processor therein to execute all or part of the steps of the unencrypted data detection method provided in each embodiment of the present application.

Claims

1. A method for detecting unencrypted data, characterized in that: include: Acquire a data file to be detected from a database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair; Detect sensitive key fields according to the key field content of the data content in the data file to be detected; In the case where a sensitive key field is detected, an unencrypted judgment is performed on the content of the value field corresponding to the sensitive key field to determine an unencrypted judgment result of the data content.

2. The unencrypted data detection method according to claim 1, characterized in that: The detecting of the sensitive key field according to the key field content of the data content in the data file to be detected includes: Determine, based on a first expert system rule base, a first sensitivity score corresponding to a key field content of the data content in the data file to be detected, wherein the first expert system rule base records sensitive data detection rules; Sending the key field content of the data content in the data file to be detected to the trained sensitivity judgment model, and determining the second sensitivity score corresponding to the key field content of each data content through the sensitivity judgment model; Determining a sensitivity confidence value of the key field content according to the first sensitivity score and the second sensitivity score; When the sensitivity confidence value reaches a preset sensitivity threshold, the key field corresponding to the key field content is determined to be a sensitive key field.

3. The unencrypted data detection method according to claim 2, characterized in that: The determining, based on the first expert system rule base, a first sensitivity score corresponding to the key field content of the data content in the to-be-detected data file includes: Determine a target detection rule from the sensitive data detection rules of the first expert system rule base according to the data classification and grading information corresponding to the data file to be detected; The first expert system rule base is used to detect sensitive data in the key field content of the data content in the data file to be detected based on the target detection rule, and a first sensitivity score is determined according to the sensitive data detection result.

4. The unencrypted data detection method according to claim 3, characterized in that: Before determining the target detection rule from the sensitive data detection rules of the first expert system rule base according to the data classification and grading information corresponding to the data file to be detected, the method further includes: The data classification and grading information of the data file to be detected is determined according to a combination of one or more of the business cluster information, library table information and field information of the data file to be detected.

5. The unencrypted data detection method according to claim 2, characterized in that: The determining the sensitivity confidence value of the key field content according to the first sensitivity score and the second sensitivity score includes: A weighted sum process is performed on the first sensitivity score and the second sensitivity score, and a sensitivity confidence value of the key field content is determined according to the weighted sum result.

6. The unencrypted data detection method according to claim 1, characterized in that: The performing unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content includes: Determining a first unencrypted score corresponding to the content of the value field corresponding to the sensitive key field based on a second expert system rule base, wherein the second expert system rule base records unencrypted data judgment rules; Sending the value field content corresponding to the sensitive key field to the trained unencrypted judgment model, and determining a second unencrypted score corresponding to the value field content corresponding to the sensitive key field by using the unencrypted judgment model; determining an unencrypted confidence value of the value field content according to the first unencrypted score and the second unencrypted score; When the unencrypted confidence value reaches a preset unencrypted threshold, the unencrypted judgment result of the data content is determined as the data content is unencrypted.

7. The unencrypted data detection method according to claim 6, characterized in that: The determining the unencrypted confidence value of the value field content according to the first unencrypted score and the second unencrypted score comprises: A weighted sum process is performed on the first unencrypted score and the second unencrypted score, and an unencrypted confidence value of the value field content is determined according to the weighted sum result.

8. An unencrypted data detection device, characterized in that: It includes a data acquisition module, a sensitive detection module and an unencrypted judgment module, among which: The data acquisition module is configured to acquire a data file to be detected from a database, wherein the data content in the data file to be detected is recorded in the form of a key-value pair; The sensitive detection module is configured to detect sensitive key fields according to the key field content of the data content in the data file to be detected; The unencrypted judgment module is configured to, when a sensitive key field is detected, perform an unencrypted judgment on the value field content corresponding to the sensitive key field to determine the unencrypted judgment result of the data content.

9. An unencrypted data detection device, characterized in that: include: memory and one or more processors; The memory is used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the unencrypted data detection method as described in any one of claims 1-7.

10. A non-volatile storage medium storing computer executable instructions, characterized in that: The computer executable instructions are used to perform the unencrypted data detection method according to any one of claims 1 to 7 when executed by a computer processor.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the unencrypted data detection method according to any one of claims 1 to 7 is implemented.

Images