Data Security Monitoring System and Method Based on Multi-Dimensional Data

Abstract

This invention discloses a data security monitoring system and method based on multi-dimensional data, belonging to the field of data monitoring technology. The multi-dimensional data security monitoring system includes a receiving module, a virus checking module, a security assessment module, a classification module, a data size security assessment module, a pre-storage module, and a storage module. The classification module classifies the multi-dimensional data received by the receiving module. The security assessment module performs security assessments on the data received by the receiving module. The virus checking module monitors for viruses present in the data. This invention enables the classification module to categorize the multi-dimensional data received by the receiving module, and the security assessment module marks software data as unknown and generates a first unknown marker signal, thereby facilitating virus checks on the data by category. This avoids excessive data processing by checking all data while ensuring data security.

Description

Technical Field

[0001] This invention relates to the field of data monitoring technology, specifically to a data security monitoring system and method based on multi-dimensional data. Background Technology

[0002] Data monitoring is an important means of ensuring the security of large volumes of data. When receiving large amounts of data, it is generally necessary to detect whether there is malicious data in the data in order to ensure data security and prevent malicious data from damaging the system. When monitoring data security, the monitoring system has too much monitoring workload due to the large amount of data, which affects the efficiency of monitoring data.

[0003] The shortcomings of existing data security monitoring systems are: Existing technology CN116527528B discloses a testing method for a traffic-based data security monitoring system. This technology involves deploying target stations in the area covered by the monitoring system, generating test data based on preset data generation rules, and sending it to the target stations for testing. The monitoring system analyzes the traffic of the test data, generates log reports and forensic files, and returns them to the testing system. The testing system compares and evaluates the log reports and forensic files with the test data, generating an effectiveness evaluation result. The testing system then uses output protocol parsing, file format recognition, data classification, and clue forensic analysis to generate statistical results and complete the test judgment. This disclosure verifies the functionality and performance of the traffic-based data security monitoring system, ensuring its normal operation and achieving the expected goal of monitoring data security risks.

[0004] The aforementioned technologies do not specifically classify and monitor data, which can easily lead to excessive monitoring workload due to the large amount of data, affecting the efficiency of data monitoring. Therefore, a data security monitoring system based on full-dimensional data is needed to solve this problem. This system can classify the monitored data and determine the monitoring priority according to the data volume to ensure smooth data monitoring. Summary of the Invention

[0005] One objective of this application is to provide a data security monitoring system and method based on full-dimensional data, which can solve the technical problems raised in the prior art.

[0006] To achieve the above objectives, the present invention provides the following technical solution: a data security monitoring system based on full-dimensional data, comprising a receiving module, a virus checking module, a security assessment module, a classification module, a data size security assessment module, a pre-storage module, and a storage module; The receiving module is used to receive and store full-dimensional data. The classification module classifies the full-dimensional data received by the receiving module into text, images, audio, video and software categories. The security assessment module directly marks the text data, image data, audio data and video data classified by the classification module as safe, and generates a first security mark signal, which is stored in the storage module along with the text data, image data, audio data and video data. The virus detection module is used to monitor for viruses present in the data.

[0007] Preferably, the receiving module includes a receiving unit and a storage unit, wherein the receiving unit is used to receive data in all dimensions, and the storage unit is used to pre-store the data in all dimensions.

[0008] Preferably, the security assessment module further includes marking the software data as unknown and generating a first unknown marker signal.

[0009] Preferably, the data security monitoring system based on full-dimensional data further includes a monitoring module, which is used to monitor attacks with continuous identical signals. When attacked with continuous identical signals, the receiving module stops receiving the signals.

[0010] Preferably, the data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal, generate a second capacity marker signal on the software data installation package when the size of the software data installation package is lower than a set value, and generate a third capacity marker signal on the software data installation package when the size of the software data installation package is greater than the set value.

[0011] Preferably, the pre-storage module is used to store a software data installation package with a third capacity marker signal.

[0012] Preferably, the virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. The virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal when the task processing volume is higher than a set value, and performs virus checks on software data installation packages with the third capacity marker signal when the task processing volume is lower than a set value.

[0013] Preferably, the virus detection module marks the software data installation package as safe if no virus is detected, and generates a second security mark which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0014] Preferably, the data security monitoring method based on full-dimensional data is as follows: S1. The receiving unit receives data in all dimensions, and the storage unit pre-stores the data in all dimensions. S2. The classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. S3. The security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security mark signal. These are stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown mark signal. S4. The data size security assessment module assesses the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. S5. The software data installation package with the third capacity marker signal is stored in the pre-stored module; S6. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. S7. If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that the software data installation package marked with the first unknown signal contains a virus, it deletes it.

[0015] Preferably, step S1 further includes the following steps: S11. The monitoring module monitors for continuous attacks with the same signal. When subjected to a continuous attack with the same signal, the receiving module stops receiving the signal.

[0016] Compared with the prior art, the beneficial effects of the present invention are: 1. This invention uses a classification module to classify all dimensions of data received by the receiving module, categorizing the data into text, images, audio, video, and software. Then, the security assessment module directly marks the text, image, audio, and video data classified by the classification module as safe, while marking the software data as unknown and generating a first unknown label signal. This facilitates virus checking of the data by category, ensuring data security while avoiding excessive data processing caused by checking all data.

[0017] 2. This invention uses a data size security assessment module to evaluate the size of a software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than a set value, a second capacity marker signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity marker signal is generated on the software data installation package. This allows the virus detection module to prioritize processing smaller software data installation packages, avoiding data congestion caused by long processing times when prioritizing larger software data installation packages.

[0018] 3. By storing the software data installation package with a third capacity marker signal in the pre-storage module, the present invention can ensure data security and provide sufficient time for the virus detection module to check the small-capacity software data installation package. Attached Figure Description

[0019] Figure 1 This is a framework diagram of the monitoring system of the present invention; Figure 2 This is a flowchart of the monitoring method of the present invention. Detailed Implementation

[0020] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0021] Please see Figure 1 and Figure 2 A data security monitoring system based on full-dimensional data, including a receiving module, a virus checking module, a security assessment module, a classification module, a data size security assessment module, a pre-storage module, and a storage module; The receiving module is used to receive and store data in all dimensions. The classification module classifies the data received by the receiving module into text, images, audio, video and software. The security assessment module directly marks the text data, image data, audio data and video data classified by the classification module as safe, and generates a first security mark signal, which is stored in the storage module along with the text data, image data, audio data and video data. The virus detection module is used to monitor for viruses present in the data.

[0022] The receiving module includes a receiving unit and a storage unit. The receiving unit is used to receive data in all dimensions, and the storage unit is used to pre-store the data in all dimensions.

[0023] The security assessment module also includes marking software data as unknown and generating a first unknown marker signal.

[0024] The data security monitoring system based on full-dimensional data also includes a monitoring module, which is used to monitor attacks that continuously receive the same signal. When attacked by the same continuous signal, the receiving module stops receiving the signal.

[0025] The data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package.

[0026] The pre-store module is used to store the software data installation package with a third capacity marker signal.

[0027] The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal.

[0028] If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security label, which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0029] The data security monitoring method based on full-dimensional data is as follows: S1. The receiving unit is used to receive data in all dimensions, and the storage unit is used to pre-store the data in all dimensions. S2. The classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. S3. The security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security mark signal. These are stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown mark signal. S4, the data size security assessment module is used to assess the size of the software data installation package marked with the first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. S5. The software data installation package with the third capacity marker signal is stored in the pre-stored module; S6. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. S7. If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that the software data installation package marked with the first unknown signal contains a virus, it deletes it.

[0030] S1 also includes the following steps: S11. The monitoring module monitors for continuous attacks with the same signal. When subjected to a continuous attack with the same signal, the receiving module stops receiving the signal.

[0031] Please see Figure 1 and Figure 2 Example 1: This invention provides a data security monitoring system based on full-dimensional data. 1. The receiving unit is used to receive data in all dimensions, the storage unit is used to pre-store the data in all dimensions, and the monitoring module monitors attacks with continuous identical signals. When attacked with continuous identical signals, the receiving module stops receiving the signal. Second, the classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. Third, the security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security label signal, which is stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown label signal. IV. The data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. 5. The software data installation package with the third capacity marker signal is stored in the pre-stored module; VI. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. 7. If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0032] Please see Figure 1 and Figure 2 Example 2: This invention provides a data security monitoring system based on full-dimensional data. 1. The receiving unit is used to receive data in all dimensions, the storage unit is used to pre-store the data in all dimensions, and the monitoring module monitors attacks with continuous identical signals. When attacked with continuous identical signals, the receiving module stops receiving the signal. Second, the classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. Third, the security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security label signal, which is stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown label signal. IV. The virus detection module directly performs virus detection on software data installation packages that carry the first unknown marker signal; 5. If the virus detection module does not detect any viruses, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0033] Please see Figure 1 and Figure 2Example 3: This invention provides a data security monitoring system based on full-dimensional data. 1. The receiving unit is used to receive data in all dimensions, and the storage unit is used to pre-store the data in all dimensions. Second, the classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. Third, the security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security label signal, which is stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown label signal. IV. The data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. 5. The software data installation package with the third capacity marker signal is stored in the pre-stored module; VI. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. 7. If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0034] Please see Figure 1 and Figure 2 Example 4: This invention provides a data security monitoring system based on full-dimensional data. 1. The receiving unit is used to receive data in all dimensions, the storage unit is used to pre-store the data in all dimensions, and the monitoring module monitors attacks with continuous identical signals. When attacked with continuous identical signals, the receiving module stops receiving the signal. Second, the classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. Third, the security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security label signal, which is stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown label signal. IV. The data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. 5. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. 6. If the virus detection module does not detect any viruses, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

[0035] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the invention can be implemented in other specific forms without departing from its spirit or essential characteristics. Therefore, the embodiments should be considered in all respects as exemplary and non-limiting, and the scope of the invention is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within the present invention, and no reference numerals in the claims should be construed as limiting the rights involved.

Claims

1. A data security monitoring system based on full-dimensional data, characterized in that: It includes a receiving module, a virus checking module, a security assessment module, a classification module, a data size security assessment module, a pre-storage module, and a storage module; The receiving module is used to receive and store full-dimensional data. The classification module classifies the full-dimensional data received by the receiving module into text, images, audio, video and software categories. The security assessment module directly marks the text data, image data, audio data and video data classified by the classification module as safe, and generates a first security mark signal, which is stored in the storage module along with the text data, image data, audio data and video data. The virus detection module is used to monitor for viruses present in the data.

2. The data security monitoring system based on full-dimensional data according to claim 1, characterized in that: The receiving module includes a receiving unit and a storage unit. The receiving unit is used to receive data in all dimensions, and the storage unit is used to pre-store the data in all dimensions.

3. The data security monitoring system based on full-dimensional data according to claim 1, characterized in that: The security assessment module also includes marking software data as unknown and generating a first unknown marker signal.

4. The data security monitoring system based on full-dimensional data according to claim 1, characterized in that: The data security monitoring system based on full-dimensional data also includes a monitoring module, which is used to monitor attacks with continuous identical signals. When attacked with continuous identical signals, the receiving module stops receiving the signals.

5. The data security monitoring system based on full-dimensional data according to claim 3, characterized in that: The data size security assessment module is used to assess the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than a set value, a second capacity marker signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity marker signal is generated on the software data installation package.

6. The data security monitoring system based on full-dimensional data according to claim 5, characterized in that: The pre-storage module is used to store software data installation packages with a third capacity marker signal.

7. The data security monitoring system based on full-dimensional data according to claim 6, characterized in that: The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal.

8. The data security monitoring system based on full-dimensional data according to claim 7, characterized in that: The virus detection module marks the processed software data installation package as safe if no virus is detected, and generates a second security mark which is stored in the storage module along with the software data installation package. When the virus detection module detects that a software data installation package marked with a first unknown signal contains a virus, it deletes it.

9. The data security monitoring method based on full-dimensional data according to any one of claims 1-8, characterized in that: The data security monitoring method based on full-dimensional data is as follows: S1. The receiving unit receives data in all dimensions, and the storage unit pre-stores the data in all dimensions. S2. The classification module classifies the data received by the receiving module into all dimensions, categorizing the data into text, images, audio, video, and software. S3. The security assessment module directly marks the text data, image data, audio data, and video data classified by the classification module as safe and generates a first security mark signal. These are stored in the storage module along with the text data, image data, audio data, and video data. At the same time, the security assessment module marks the software data as unknown and generates a first unknown mark signal. S4. The data size security assessment module assesses the size of the software data installation package marked with a first unknown signal. When the size of the software data installation package is lower than the set value, a second capacity mark signal is generated on the software data installation package. When the size of the software data installation package is greater than the set value, a third capacity mark signal is generated on the software data installation package. S5. The software data installation package with the third capacity marker signal is stored in the pre-stored module; S6. The virus detection module directly performs virus checks on software data installation packages with the second capacity marker signal. When the task processing volume is higher than the set value, the virus detection module does not perform virus checks on software data installation packages with the third capacity marker signal. When the task processing volume is lower than the set value, the virus detection module performs virus checks on software data installation packages with the third capacity marker signal. S7. If the virus detection module does not detect a virus, it marks the software data installation package as safe and generates a second security mark, which is stored in the storage module along with the software data installation package. When the virus detection module detects that the software data installation package marked with the first unknown signal contains a virus, it deletes it.

10. The data security monitoring method based on full-dimensional data according to claim 9, characterized in that: The S1 also includes the following steps: S11. The monitoring module monitors for continuous attacks with the same signal. When subjected to a continuous attack with the same signal, the receiving module stops receiving the signal.

Images