A method and system for intelligent information security management and control based on big data

Abstract

The present application relates to the field of security control technology, and in particular to a method and system for intelligent information security control based on big data, the method comprising: assigning a key length to each piece of regulatory information according to the security level of multiple pieces of regulatory information; taking each piece of regulatory information at each moment as a node, taking the predicted validity of the historical node for the regulatory information of any node as the edge weight of the directed edge from the historical node to the arbitrary node, and obtaining a prediction relationship graph, where the historical node is all the nodes at multiple adjacent moments before the corresponding moment of any node; calculating the leakage risk of each piece of regulatory information at any moment; and issuing an alarm in response to the leakage risk of any regulatory information at any moment being greater than the risk threshold. The technical solution of the present application can reduce the risk of information leakage.

Description

Technical Field

[0001] The present application relates to the field of security management and control technology, and in particular to an information security intelligent management and control method and system based on big data. Background Art

[0002] With the rapid development of computer technology, more and more information is transmitted through the Internet, and the problem of information security comes with it. How to supervise information security and take timely protective measures for information that is at risk of leakage is an issue that needs to be solved urgently.

[0003] At present, the patent application document with publication number CN111784989A discloses an information security management system based on big data, which includes a data acquisition module, a big data analysis module, and a security prompt module; the big data acquisition module is used to collect status data of equipment in the computer room and environmental data of the computer room, and send the status data and environmental data to the big data analysis module; the big data analysis module is used to determine whether the values ​​of the status data and / or environmental data are within a preset threshold range, and send the judgment result to the security prompt module; the security prompt module is used to receive the judgment result, and if the judgment result is that the values ​​of the status data and / or environmental data are not within the preset threshold range, the security prompt module issues a security prompt to the computer room manager.

[0004] The above method implements information security management at the data storage terminal by determining whether the equipment status data and environmental data in the computer room are within a preset threshold range. However, the above method ignores the risk of information leakage during information transmission outside the storage terminal and is unable to monitor information security in real time, resulting in a high risk of information leakage. Summary of the Invention

[0005] In order to solve the technical problem of high risk of information leakage during information transmission, the present application provides an information security intelligent management and control method and system based on big data, which can reduce the risk of information leakage.

[0006] In the first aspect of the present application, a method for intelligent information security management and control based on big data is provided, the method comprising: assigning a key length to each piece of regulatory information according to the security level of multiple pieces of regulatory information, the regulatory information including the equipment operating parameters collected by sensors; taking each piece of regulatory information at each moment as a node, and taking the predicted validity of the historical node for the regulatory information of any node as the edge weight of the directed edge of the historical node pointing to the arbitrary node, to obtain a prediction relationship graph, wherein the historical node is all the nodes at multiple adjacent moments before the corresponding moment of any node; calculating the leakage risk of each piece of regulatory information at any moment, and the prediction relationship graph at each moment. Regulatory Information Risk of leakage for:

[0007] ;in, For regulatory information The key length, is the maximum key length of all regulatory information, To predict the time in the relationship diagram Regulatory Information The number of in-degree edges of ; In-degree edge The starting key length, In-degree edge The edge right, is the sum of the edge weights of all in-degree edges, where the in-degree edges are the edges pointing to the time in the prediction relationship graph. Regulatory Information A directed edge corresponding to a node; in response to the risk of leakage of any regulatory information at any time being greater than the risk threshold, an alarm is issued.

[0008] First, a key length is assigned to each piece of regulatory information according to its security level. The higher the security level of the regulatory information, the larger the corresponding key length. During the information transmission process, each piece of regulatory information at each moment is regarded as a node, and one moment contains multiple nodes. For any node, all nodes at multiple adjacent moments before the corresponding moment of the node are regarded as historical nodes, and the predictive validity of the historical node on the regulatory information of the node is used as the edge weight of the directed edge from the historical node to the node to obtain a prediction relationship graph. The prediction relationship graph can clearly and accurately reflect the predictive relationship of the regulatory information between each node. In the prediction relationship graph, the leakage risk of each piece of regulatory information at any moment is accurately quantified by combining the two aspects of information leakage caused by the cracking of its own key and the prediction of regulatory information caused by the leakage of regulatory information of historical nodes. In response to the leakage risk of any regulatory information at any moment being greater than the risk threshold, an alarm is issued to ensure the information security of various regulatory information.

[0009] Preferably, allocating a key length to each piece of regulatory information according to the security level of the multiple pieces of regulatory information includes: setting a minimum key length, and taking the product of the security level of the regulatory information and the minimum key length as the key length of the regulatory information.

[0010] A key length is assigned to each regulatory information based on its security level, and a larger key length is assigned to regulatory information with a higher security level, ensuring that regulatory information with a higher security level has a higher encryption complexity.

[0011] Preferably, the method for obtaining the predictive validity includes: inputting the regulatory information of each historical node into the regression model, outputting the regulatory prediction value of the arbitrary node, and taking the absolute value of the difference between the regulatory prediction value of the arbitrary node and the regulatory information as the initial error; after setting the regulatory information of any historical node to 0, recalculating the absolute value of the difference between the regulatory prediction value of the arbitrary node and the regulatory information to obtain the reset error; the predictive validity of the historical node is positively correlated with the difference between the reset error and the initial error.

[0012] Accurately quantify the predictive effectiveness of each historical node in predicting the regulatory information of any node. The greater the predictive effectiveness, the more accurate the regulatory information of the node can be predicted based on the historical node.

[0013] Preferably, adjacent moments Regulatory Information Historical nodes Predictive validity for:

[0014] , For historical nodes The reset error, is the initial error.

[0015] Preferably, the risk threshold is negatively correlated with the harmfulness of leakage of any regulatory information at any time.

[0016] For regulatory information whose leakage is more harmful, the risk threshold should be set at a smaller value so that an alarm can be issued in a timely manner to ensure information security.

[0017] Preferably, the time Regulatory Information The hazard of leakage for:

[0018] ; To predict the time in the relationship diagram Regulatory Information The number of out-degree edges of Out-degree edge The security level of the termination point, Out-degree edge The edge weight of the out-degree edge is the starting point of the prediction relationship graph at time Regulatory Information Directed edges corresponding to nodes.

[0019] Out-degree edge The larger the edge weight, the more Regulatory Information Predict out-degree edges The greater the predictive validity of the end-point regulatory information, the greater the Regulatory Information The leakage will lead to out-degree edge The regulatory information of the termination point is accurately predicted, so the time Regulatory Information The greater the risk of leakage, the more harmful it is. Regulatory Information All out-degree edges can be accurately quantified at the time Regulatory Information The hazard of leakage.

[0020] Preferably, the time Regulatory Information Risk threshold for: , For the moment Regulatory Information The hazard of leakage, is the baseline threshold.

[0021] Preferably, after the alarm is issued, the management and control method also includes: in response to the leakage risk of any regulatory information at any time being greater than the risk threshold, the security level of the regulatory information and the leakage risk are added together and rounded up, and the product of the rounded-up result and the minimum key length is used as the key length of the regulatory information; otherwise, the key length of the regulatory information is kept unchanged.

[0022] After receiving the alarm information, for regulatory information whose leakage risk is greater than the risk threshold, the key length of the regulatory information is increased, thereby increasing the encryption complexity of the regulatory information, reducing the leakage risk, and realizing intelligent management and control of information security.

[0023] In the second aspect of the present application, there is also provided an information security intelligent management and control system based on big data, comprising a processor and a memory, wherein the memory stores computer program instructions. When the computer program instructions are executed by the processor, an information security intelligent management and control method based on big data as described in the first aspect of the present application is implemented.

[0024] The technical solution of this application has the following beneficial technical effects:

[0025] First, a key length is assigned to each piece of regulatory information according to its security level. The higher the security level of the regulatory information, the larger the corresponding key length. In the process of information transmission, each piece of regulatory information at each moment is regarded as a node, and one moment contains multiple nodes. For any node, all nodes at multiple adjacent moments before the corresponding moment of the node are regarded as historical nodes, and the predictive validity of the historical node on the regulatory information of the node is used as the edge weight of the directed edge from the historical node to the node to obtain a prediction relationship graph. The prediction relationship graph can clearly and accurately reflect the predictive relationship of the regulatory information between each node. In the prediction relationship graph, the leakage risk of each piece of regulatory information at any moment is accurately quantified by combining the two aspects of information leakage caused by the cracking of its own key and the prediction of regulatory information caused by the leakage of regulatory information of historical nodes. In response to the leakage risk of any regulatory information at any moment being greater than the risk threshold, an alarm is issued, and information security is monitored in real time to ensure the information security of various regulatory information. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The above and other objects, features and advantages of the exemplary embodiments of the present application will become readily understood by reading the detailed description below with reference to the accompanying drawings. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding reference numerals represent the same or corresponding parts, wherein:

[0027] Figure 1 This is a flowchart of an information security intelligent management and control method based on big data according to an embodiment of the present application;

[0028] Figure 2 is a schematic diagram of a prediction relationship diagram according to an embodiment of the present application;

[0029] Figure 3 This is a structural block diagram of an information security intelligent management and control system based on big data according to an embodiment of the present application. DETAILED DESCRIPTION

[0030] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0031] It should be understood that when the terms "first," "second," etc. are used in the claims, specification, and drawings of this application, they are only used to distinguish different objects, rather than to describe a specific order. The terms "comprise" and "comprising" used in the specification and claims of this application indicate the presence of the described features, integers, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or combinations thereof.

[0032] According to the first aspect of the present application, the present application provides an information security intelligent management and control method based on big data. Figure 1 This is a flow chart of an information security intelligent management and control method based on big data according to an embodiment of the present application. Figure 1 As shown, the information security intelligent management and control method based on big data includes steps S101 to S104, which are described in detail below.

[0033] S101 , allocating a key length to each piece of supervision information according to the security level of the multiple pieces of supervision information.

[0034] In one embodiment, a large amount of regulatory information is generated at every moment within a smart park or manufacturing enterprise. This regulatory information is transmitted between multiple communication terminals. This regulatory information includes device operating parameters collected by sensors, such as voltage values ​​collected by voltage sensors, current values ​​collected by current sensors, or concentration values ​​collected by gas sensors. Different regulatory information has different security levels. A higher security level indicates a greater impact from leaking the corresponding regulatory information. To ensure the security of regulatory information of different security levels, it is necessary to assign a key length to each regulatory information based on its security level. The longer the key length, the higher the security of the corresponding regulatory information.

[0035] Specifically, allocating a key length to each piece of regulatory information according to the security level of the plurality of regulatory information includes setting a minimum key length and taking the product of the security level of the regulatory information and the minimum key length as the key length of the regulatory information, wherein the security level is a positive integer.

[0036] Among them, the key length is an integer multiple of the minimum key length. The value of the minimum key length is related to the encryption algorithm used. The encryption algorithms include RSA algorithm, ECC algorithm and ElGamal algorithm. For example, when the encryption algorithm adopts RSA algorithm, the value of the minimum key length is 8, that is, in RSA algorithm, the key length is an integer multiple of 8.

[0037] In this way, a key length is allocated to each piece of regulatory information according to its security level, and a larger key length is allocated to regulatory information with a higher security level.

[0038] S102, taking each piece of supervision information at each moment as a node, and taking the predictive validity of the historical node on the supervision information of any node as the edge weight of the directed edge from the historical node to the arbitrary node, to obtain a prediction relationship graph, where the historical node is all the nodes at multiple adjacent moments before the corresponding moment of any node.

[0039] In one embodiment, the prediction relationship graph includes nodes and directed edges.

[0040] Take each supervision information at any time as a node, for example, The supervision information 1 is recorded as node , will be the moment The supervision information 2 is recorded as node If the types of regulatory information are shared Kind, then time Total nodes.

[0041] In the prediction relationship diagram, a node corresponds to a moment and a value of supervision information; the historical nodes of a node are all nodes at multiple adjacent moments before the moment corresponding to the node, and the number of adjacent moments is recorded as , then a node has There are directed edges between a node and each historical node. The starting point of the directed edge is the historical node, and the end point is the node. The edge weight of the directed edge is the predictive validity of the historical node on the supervisory information of the node. In other words, the edge weight of the directed edge is the predictive validity of the supervisory information at the starting point to the end point.

[0042] See Figure 2 , is a schematic diagram of a prediction relationship diagram according to an embodiment of the present application. For the convenience of drawing, The value of is set to 2, which will increase the number of regulatory information types. The value of is set to 2, that is, one moment contains 2 nodes, and one node corresponds to 4 historical nodes; for the moment Regulatory Information Corresponding nodes , which has 4 in-degree edges and 4 out-degree edges, and the in-degree edges point to the node The directed edge of the node For easy understanding, the node The in-degree edges of nodes are represented by dashed lines. The out-degree edges of are represented by solid lines; the directed edge graphs of other nodes are not shown. It can be understood that the other nodes also include 4 in-degree edges and 4 out-degree edges.

[0043] Among them, the prediction validity is obtained according to the regression model, and the method for obtaining the prediction validity includes: inputting the supervision information of each historical node into the regression model, outputting the supervision prediction value of the arbitrary node, and taking the absolute value of the difference between the supervision prediction value of the arbitrary node and the supervision information as the initial error; setting the supervision information of any historical node to 0, and recalculating the absolute value of the difference between the supervision prediction value of the arbitrary node and the supervision information to obtain the reset error. The prediction validity of the historical node is positively correlated with the difference between the reset error and the initial error.

[0044] The regression model can be a polynomial model or a recurrent neural network, which is not limited here. For example, when the regression model is a recurrent neural network, its input is the time before any node corresponds to The time series composed of supervision information of adjacent moments is output as the supervision prediction value of any node; the recurrent neural network can adopt the network structure of LSTM or GRU.

[0045] It should be noted that in order for the regression model to accurately obtain the regulatory prediction value of any node, before obtaining the prediction validity of each historical node, it is necessary to train the regression model using the gradient descent method based on the regulatory information of the historical time period; The time series composed of supervision information of adjacent moments is input into the trained regression model, which can accurately output the supervision prediction value of any node. The specific training process is a well-known technology for those skilled in the art and will not be described in detail here.

[0046] Understandably, the adjacent moments The historical node corresponding to the regulatory information 2 For example, the initial error is the prediction effect of the supervision information of all historical nodes on the supervision information of any node; the reset error is the prediction effect of the supervision information of all historical nodes without considering the historical nodes. After that, the prediction effect of the supervision information in any node is calculated; if the reset error is greater than the initial error (that is, the difference between the reset error and the initial error is greater than 0), it means that the historical node is not considered The prediction error becomes larger and the historical nodes The more effective the prediction of regulatory information in any node, the more effective the historical node On the contrary, if the reset error is not greater than the initial error (that is, the difference between the reset error and the initial error is less than or equal to 0), it means that the historical nodes are not considered. The prediction error becomes smaller and the historical nodes It cannot provide effective information for predicting the regulatory information in any node and is noise. Therefore, the historical node The predictive validity is 0.

[0047] Specifically, adjacent moments Regulatory Information Historical nodes Predictive validity for:

[0048] , For historical nodes The reset error, is the initial error.

[0049] Thus, a node corresponds to Historical nodes are used to determine the predictive effectiveness of each historical node in predicting the regulatory information of the node. The greater the predictive effectiveness, the more accurate the regulatory information of the node can be predicted based on the historical node. The predictive effectiveness of the historical node is further used as the edge weight to complete the construction of the prediction relationship graph. The prediction relationship graph can clearly and accurately reflect the predictive relationship of the regulatory information between the nodes.

[0050] S103, calculating the leakage risk of each regulatory information at any time.

[0051] In one embodiment, each type of regulatory information is encrypted and transmitted according to its own key length, and a prediction relationship graph is constructed during the transmission process, and then the leakage risk of regulatory information at any time is monitored based on the prediction relationship graph. Regulatory information The risk of leakage comes from two aspects. First, the Regulatory information The information leakage caused by the cracking of its own key, secondly, at all times Regulatory Information The corresponding regulatory information of the historical node is leaked, resulting in the moment Regulatory information Therefore, when calculating the risk of regulatory information leakage at any time, it is necessary to combine the above two aspects.

[0052] Specifically, the moment Regulatory Information Risk of leakage for:

[0053] ;in, For regulatory information The key length, is the maximum key length of all regulatory information, To predict the time in the relationship diagram Regulatory Information The number of in-degree edges of ; In-degree edge The starting key length, In-degree edge The edge right, is the sum of the edge weights of all in-degree edges, where the in-degree edges are the edges pointing to the time in the prediction relationship graph. Regulatory Information Directed edges corresponding to nodes.

[0054] Among them, regulatory information The longer the key length, The larger the value, the more supervisory information The harder it is to crack your own key, the more Regulatory information The smaller the risk of information leakage due to the cracking of the own key, Ability to accurately quantify the risk of information leakage due to cracking of one's own keys.

[0055] time Regulatory Information The in-degree edge of the prediction relationship graph points to the time Regulatory Information Directed edges corresponding to nodes; In-degree edge The edge right, Used to reflect the in-degree edge Starting point to time Regulatory Information Normalized predictive validity of Used to quantize in-degree edges The starting point is that the key is cracked, resulting in the in-degree edge The risk of starting point information leakage is weighted by the normalized prediction validity for all in-degree edge starting point information leakage to obtain the leakage risk: in This part can accurately quantify the time caused by the leakage of regulatory information at historical nodes. Regulatory information Predicted risks.

[0056] In summary, the information leakage caused by the cracking of the own key and the leakage of regulatory information at historical nodes lead to the Regulatory information Two aspects are predicted to quantify the leakage risk of each type of regulatory information at any time.

[0057] S104: In response to the risk of leakage of any supervisory information at any time being greater than a risk threshold, an alarm is issued.

[0058] In one embodiment, if the time Regulatory Information The leakage risk is greater than the risk threshold, indicating that the moment Regulatory information The risk of leakage is high, and an early warning is issued to remind staff to strengthen supervision of information Security protection to avoid regulatory information during transmission The risk threshold is 0.7.

[0059] It should be noted that, since the key length of each regulatory information at different times is the same, combined with the calculation formula of leakage risk, it can be seen that the difference in leakage risk of the same regulatory information at different times is caused by the prediction validity (i.e. the edge weight of the directed edge). Regulatory information In terms of time, Regulatory information can be accurately predicted, The larger the time Regulatory Information The greater the risk of leakage.

[0060] In another embodiment, the harm caused by the leakage of any supervisory information at any time is different. Regulatory Information Leakage will cause time If the supervision information of the adjacent moments can be accurately predicted, it means that the moment Regulatory Information The leakage of information at other times will increase the risk of leakage of regulatory information at other times. Regulatory Information For regulatory information whose leakage is particularly harmful, a lower risk threshold should be set to issue an alarm in a timely manner to ensure information security.

[0061] Specifically, the risk threshold is negatively correlated with the harmfulness of leakage of any regulatory information at any time. Regulatory Information The hazard of leakage for:

[0062] ; To predict the time in the relationship diagram Regulatory Information The number of out-degree edges of Out-degree edge The security level of the termination point, Out-degree edge The edge weight of the out-degree edge is the starting point of the prediction relationship graph at time Regulatory Information Directed edges corresponding to nodes.

[0063] Among them, the moment Regulatory Information The out-degree edge is the starting point in the prediction relationship graph, and the time Regulatory Information Directed edge of The larger the edge weight, the more Regulatory Information Predict out-degree edges The greater the predictive validity of the regulatory information at the endpoint, the Regulatory Information The leakage will lead to out-degree edge The regulatory information of the termination point is accurately predicted, so the moment Regulatory Information The greater the risk of leakage.

[0064] Specifically, the moment Regulatory Information Risk threshold for:

[0065] , For the moment Regulatory Information The hazard of leakage, is the benchmark threshold, where the benchmark threshold is 0.6.

[0066] In this way, the leakage risk of any regulatory information at any time can be monitored in real time, and when the leakage risk of any regulatory information at any time is greater than the risk threshold, an alarm will be issued in time.

[0067] In one embodiment, after the alarm is issued, the management and control method also includes: in response to the leakage risk of any regulatory information at any time being greater than the risk threshold, the security level of the regulatory information and the leakage risk are added together and rounded up, and the product of the rounded-up result and the minimum key length is used as the key length of the regulatory information; otherwise, the key length of the regulatory information is kept unchanged.

[0068] It is understandable that the greater the security level of regulatory information, the longer the key length needs to be, and the greater the risk of leakage of regulatory information, the longer the key length needs to be, so as to increase the encryption complexity of regulatory information. When the leakage risk of any regulatory information at any time is greater than the risk threshold, it means that the encryption complexity of the regulatory information needs to be increased. Since the value range of leakage risk is 0-2, the security level of the regulatory information and the leakage risk are added and rounded up. The result of rounding up is a positive integer increased by 1 or 2. The product of this positive integer and the minimum key length is used as the key length of the regulatory information, thereby increasing the key length of the regulatory information. Conversely, when the leakage risk of any regulatory information at any time is not greater than the risk threshold, it means that the encryption complexity of the regulatory information can ensure information security, and there is no need to adjust the key length of the regulatory information.

[0069] In this way, after receiving the alarm information, for the regulatory information whose leakage risk is greater than the risk threshold, the key length of the regulatory information is increased, thereby increasing the encryption complexity of the regulatory information, reducing the leakage risk, and realizing intelligent management and control of information security.

[0070] The above describes the technical principles and implementation details of a method for intelligent information security management and control based on big data in the present application through specific embodiments. First, a key length is assigned to each piece of regulatory information according to the security level of multiple regulatory information. The higher the security level of the regulatory information, the larger the corresponding key length; in the process of information transmission, each piece of regulatory information at each moment is taken as a node, and a moment contains multiple nodes. For any node, all nodes at multiple adjacent moments before the corresponding moment of the node are taken as historical nodes, and the predicted validity of the historical node for the regulatory information of the node is taken as the edge weight of the directed edge from the historical node to the node, to obtain a prediction relationship graph, which can clearly and accurately reflect the prediction relationship of the regulatory information between each node; in the prediction relationship graph, the leakage risk of each piece of regulatory information at any moment is accurately quantified by combining the two aspects of information leakage caused by the cracking of its own key and the prediction of regulatory information caused by the leakage of regulatory information of historical nodes. In response to the leakage risk of any regulatory information at any moment being greater than the risk threshold, an alarm is issued to ensure the information security of various regulatory information.

[0071] According to the second aspect of the present application, the present application also provides an information security intelligent management and control system based on big data. Figure 3 This is a structural diagram of an information security intelligent management and control system based on big data according to an embodiment of the present application. Figure 3As shown, the system 50 includes a processor and a memory. The memory stores computer program instructions. When the computer program instructions are executed by the processor, the method for intelligent information security management and control based on big data according to the first aspect of the present application is implemented. The system also includes other components well known to those skilled in the art, such as a communication bus and a communication interface. The configuration and functions of these components are well known in the art and are therefore not described in detail here.

[0072] In this application, the aforementioned memory can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. For example, the computer-readable storage medium can be any suitable magnetic storage medium or magneto-optical storage medium, such as Resistive Random Access Memory (RRAM), Dynamic Random Access Memory (DRAM), Static Random Access Memory (SRAM), Enhanced Dynamic Random Access Memory (EDRAM), High-Bandwidth Memory (HBM), Hybrid Memory Cube (HMC), etc., or any other medium that can be used to store the required information and can be accessed by an application, module, or both. Any such computer storage medium can be part of, accessible to, or connectable to a device. Any application or module described in this application can be implemented by computer-readable / executable instructions stored or otherwise retained by such a computer-readable medium.

[0073] The technical features of the above-mentioned embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0074] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent application. It should be noted that a person of ordinary skill in the art may make various modifications and improvements without departing from the spirit of the present application, and these modifications and improvements fall within the scope of protection of the present application. Therefore, the scope of protection of the present patent application shall be determined by the appended claims.

Claims

1. An intelligent information security management and control method based on big data, characterized in that: The control method includes: assigning a key length to each piece of regulatory information according to a security level of multiple pieces of regulatory information, the regulatory information including equipment operating parameters collected by sensors; Each type of supervision information at each moment is taken as a node, and the prediction validity of the historical node to the supervision information of any node is taken as the edge weight of the directed edge from the historical node to the any node, to obtain a prediction relationship graph, where the historical node is all nodes at multiple adjacent moments before the corresponding moment of any node; the method for obtaining the prediction validity includes: Inputting the supervision information of each historical node into the regression model, outputting the supervision prediction value of the arbitrary node, and taking the absolute value of the difference between the supervision prediction value of the arbitrary node and the supervision information as the initial error; After setting the supervision information of any historical node to 0, the absolute value of the difference between the supervision prediction value and the supervision information of the arbitrary node is calculated again to obtain the reset error; The prediction validity of the historical node is positively correlated with the difference between the reset error and the initial error; Regulatory Information Historical Nodes The predictive validity of for: , For historical nodes The reset error, is the initial error; Calculate the leakage risk of each regulatory information at any time. Regulatory Information Risk of leakage for: ; For regulatory information The key length, is the maximum key length of all regulatory information, To predict the time in the relationship diagram Regulatory Information The number of in-degree edges of ; In-degree edge The starting key length, In-degree edge The edge rights, is the sum of the edge weights of all in-degree edges, where the in-degree edges point to the time in the prediction relationship graph. Regulatory Information Directed edges corresponding to nodes; In response to the risk of leakage of any regulatory information at any time being greater than the risk threshold, an alarm is issued.

2. According to the big data-based information security intelligent management and control method of claim 1, it is characterized in that: The allocating key lengths to each piece of regulatory information according to the security levels of the multiple pieces of regulatory information includes: setting a minimum key length, and taking the product of the security level of the regulatory information and the minimum key length as the key length of the regulatory information.

3. According to the big data-based information security intelligent management and control method of claim 1, it is characterized in that: The risk threshold is negatively correlated with the harmfulness of leakage of any regulatory information at any time.

4. According to the big data-based information security intelligent management and control method of claim 3, it is characterized in that: time Regulatory Information The danger of leakage for: ; To predict the time in the relationship diagram Regulatory Information The number of out-degree edges of ; Out-degree edge The security level of the termination point, Out-degree edge The edge weight of the out-degree edge is the starting point of the prediction relationship graph at time Regulatory Information Directed edges corresponding to nodes.

5. The method for intelligent information security management and control based on big data according to claim 3 is characterized in that: time Regulatory Information Risk threshold for: , For the moment Regulatory Information The hazard of leakage, is the baseline threshold.

6. The method for intelligent information security management and control based on big data according to claim 1 is characterized in that: After the alarm is issued, the control method further includes: In response to the leakage risk of any regulatory information being greater than a risk threshold at any time, the security level of the regulatory information and the leakage risk are added and then rounded up, and the product of the rounded-up result and the minimum key length is used as the key length of the regulatory information; Otherwise, the key length of the supervision information remains unchanged.

7. An information security intelligent management and control system based on big data, characterized in that: It includes a processor and a memory, the memory stores computer program instructions, and when the computer program instructions are executed by the processor, an information security intelligent management and control method based on big data is implemented according to any one of claims 1 to 6.

Images