96 results about "Information security management" patented technology

The invention discloses an information security management method based on data processing, and particularly relates to the field of information security management, comprising multi-source heterogeneous data acquisition, multi-dimensional feature index calculation, comprehensive threat detection calculation and adaptive threat decision. According to the method, the covert communication channel is accurately identified by constructing the encrypted traffic multi-mode detection model and combining protocol fingerprint entropy and traffic self-similarity analysis; an improved entropy weight fusion algorithm is adopted, collaborative analysis of system process abnormity, network behavior offset and hardware degradation is achieved, and a cross-dimension attack chain is reconstructed; a storage medium physical feature-cryptographic module runtime joint monitoring mechanism is created for the first time, hardware layer physical attacks and cryptographic side channel vulnerabilities are synchronously defended through temperature-delay correlation evaluation and key derivation density analysis, a complete attack surface from a physical layer to an application layer is covered, and the security is improved. And the detection precision and the response real-time performance of the complex threats are obviously improved.

The invention discloses an information security management method and system based on sensitive data, relates to the technical field of data management, and comprises the following steps: realizing quantum encryption transmission of remote high-sensitive data by combining a quantum key distribution link and a dynamic chaotic key stream; the partitioning and synchronization priority is dynamically adjusted according to the node load, the data integrity is verified through CRC, the distributed storage disaster recovery system with extremely high safety and usability is achieved, it is ensured that data can still be recovered even under extreme disasters, a zero-trust data channel based on an IPSec tunnel is constructed in the data transmission process, and the reliability of data transmission is improved. The tamper-proof, anti-counterfeiting and anti-leakage capabilities of a data access link are greatly improved, the access frequency abnormity is detected through the isolated forest model, the behavior trend is detected through the LSTM time sequence prediction model, the baseline deviation analysis is performed through user behavior portrait comparison, and the real-time, multi-modal and chained security monitoring of the user data operation behavior is realized.

The invention discloses an enterprise information security management method and system based on artificial intelligence, and belongs to the technical field of information management, and the method comprises the steps: inputting original data, integrating the original data into a first behavior graph structure, and constructing an attribute vector for a user node; threat perception and behavior risk assessment are carried out through a graph learning model, and the threat probability of each edge is output; identifying and quantifying attack paths in the graph, and generating an attack path set and a path risk score set; generating a protection strategy candidate set for each path, performing evaluation to obtain a grading result of the protection strategies, and sorting the protection strategies according to the grading result; and a protection strategy is deployed, the deployment state and protection feedback are monitored, after strategy deployment is completed, the state of a deployment target is recorded, a lightweight monitoring assembly is installed on the deployment target, and deployment feedback information is collected. According to the method, potential security threats are identified in real time in a mode of combining intelligent prediction and simulation, and the security policy is dynamically adjusted according to the change of the threats.

The invention relates to the technical field of network information security, discloses an information security management system based on big data, and aims to solve the defects of an existing system in the aspects of data acquisition, anomaly detection, threat prediction, risk assessment and the like. The system comprises a data acquisition module for collecting various types of data in real time; the abnormal detection model is used for identifying normal and abnormal behaviors by adopting an automatic encoder AE algorithm; the threat prediction module is used for predicting a future security threat type and probability by using a recurrent neural network (RNN) algorithm; the risk assessment module comprehensively assesses the system security risk through a random forest RF algorithm; and the response decision module is used for executing corresponding safety response measures according to the evaluation result. According to the system, the big data technology is utilized, comprehensive monitoring and accurate prediction of the network security state are achieved, the efficiency and accuracy of information security management are improved, and powerful support is provided for coping with novel and complex network attacks.

The invention relates to the technical field of information security management, and discloses an information security management method and system based on digital medical treatment. The method comprises the following steps: verifying doctor professional qualification, patient authorization range, data sensitivity level and time permission validity in a multi-institution medical data access request, and generating a permission verification result; analyzing ontology semantic attributes and sensitivity characteristics of medical search keywords input by a user, and determining a corresponding hierarchical encryption strategy based on the permission verification result; performing homomorphic encryption transformation on the medical term synonym set according to the hierarchical encryption strategy, and constructing a medical ciphertext database; and receiving a medical query request, executing symptom disease association matching and ciphertext state logical reasoning operation in the medical ciphertext database, and outputting an encrypted state search result. According to the method, the privacy leakage risk caused by search behavior trajectory analysis is effectively prevented, and the security and availability of medical data are improved.

The invention relates to the technical field of computer network security, in particular to a computer network information security management method and system, which comprises the following steps: S1, risk assessment, S2, security policy making, S3, security protection measure implementation, S4, management measure implementation, S5, security training and propaganda, S6, emergency response, and S7, accident handling and asset identification: comprehensively carding network assets in an enterprise or an organization, comprise hardware equipment, software systems, network services, data and the like, and the importance and value are determined. According to the computer network information security management method and system, through an information security management method, such as a data encryption technology, the data can be converted into a ciphertext form for storage and transmission, and only an authorized officer with a correct key can decrypt and restore the data into original data; therefore, abnormal user access behaviors and potential security holes can be found in time, a basis is provided for improving security measures, and the situation that a database is stolen or leaked in the data transmission process is effectively prevented.

The invention discloses a vulnerability closed-loop disposal method and system based on intelligent collaboration, and belongs to the technical field of information security management. Vulnerability data and disposal information in a plurality of independent security systems are collected, and a multi-dimensional vulnerability semantic model is constructed; constructing a state perception graph based on a semantic model, extracting candidate state paths, and constructing a time sequence closed-loop prediction model in combination with a shortest closed-loop path and a historical track; according to a vulnerability influence range, a service dependency chain and a prediction path key node, adaptively dividing responsibility affiliation, generating a dynamic disposal responsibility graph and realizing automatic assignment; combining the node response capability and the task saturation, dynamically calculating the priority and scheduling the processing task; monitoring an actual disposal behavior, correcting an edge weight of the state diagram in real time and updating the model; according to the method, the whole-process intelligence, collaboration and dynamic evolution of vulnerability management are realized, and the processing efficiency and the prediction precision are improved.

The invention relates to the technical field of information security management, in particular to a multi-modal data dynamic desensitization method and system based on machine learning, multi-modal features such as texts, images and time sequences are jointly extracted through CNN-Transform-LSTM, 1-5 sensitive levels are evaluated by adopting a cross-modal attention model, a self-adaptive desensitization strategy is generated through an improved MOEA / D-DE algorithm, and the dynamic desensitization of the multi-modal data is realized. And realizing cross-modal collaborative desensitization by combining GNN. The system dynamically adjusts parameters through TD3 reinforcement learning, the response delay is less than or equal to 100ms, the Bi-LSTM-AE model evaluates privacy and utility in real time, and the block chain evidence storage whole process is realized. The method solves the problems of precision and utility imbalance, poor dynamic adaptability and insufficient multi-mode collaboration in the traditional technology, and is suitable for the fields of finance, medical treatment and the like.

The invention discloses an information security management and monitoring system based on big data, and relates to the technical field of information processing, the system is mainly embodied in efficient desensitization processing of sensitive data, a big data acquisition module automatically acquires and uniformly converts a plurality of data sources into editable first texts, and the editable first texts are stored in a storage module; and related sensitive features of the first text are extracted to construct the text sensitivity index MGbh, so that a solid data support is provided for a subsequent desensitization strategy, and the manual intervention cost is reduced. And the data desensitization module generates corresponding desensitization strategies according to different security levels, so that automatic processing is realized, manual auditing is reduced, the desensitization efficiency is improved, and legal and economic risks caused by data leakage are reduced. And the sub-library management module divides the desensitized data set into a plurality of word libraries and distributedly stores the word libraries on different physical nodes, so that the risk of a single library is reduced, the use of storage resources is optimized, and the elasticity and expandability of the system are enhanced.

The invention discloses a computer information security management method and system based on big data, and relates to the technical field of information security management, and the method comprises the steps: carrying out the risk recognition of financial transaction application computer storage data, marking a key transaction concerned object, carrying out the first verification, and marking an abnormal computer information condition; according to the marked abnormal computer information condition, identifying and marking the financial computer information abnormity type with the highest matching degree, and then carrying out second verification to judge whether the financial computer information abnormity type exists or not; when the financial computer information exception type does not exist, obtaining related verification data for third verification; based on the third verification result, whether security approval passes is judged, if the security approval passes, a manual inspection demand is triggered, an abnormal specific reason marked by manual inspection is obtained, and an abnormal label is created for the abnormal specific reason. The multi-level security verification and intelligent abnormity management are realized, and the transaction security and the user experience are significantly improved.

The invention discloses a sensitive operation approval decision-making system and method, a readable storage medium and a program product, and relates to the technical field of information security management, and the sensitive operation approval decision-making system comprises an operation application module which is used for obtaining sensitive operation data of a target operator after receiving a sensitive operation request of the target operator; the intelligent approval agent is used for determining the matching degree of the operation content and the application reason as an operation rationality score of the current sensitive operation; the risk assessment agent is used for performing security risk analysis according to the operation content, the operator information and the historical operation data, and generating a security risk score of the current sensitive operation; and the authorization decision agent is used for determining an approval decision score of the current sensitive operation according to the operation rationality score and the security risk score so as to determine an approval result of the current sensitive operation. The examination and approval efficiency and examination and approval accuracy of the sensitive operation of the operator can be improved.

The embodiment of the invention discloses a hospital database data encryption storage method, device and system and a storage medium, and the method comprises the steps: mapping medical original data into a multidimensional space which is discrete in time according to a preset strategy, and obtaining a mapping sequence; performing encryption processing on the mapping sequence based on a Hash encryption method to obtain encrypted data; and storing the encrypted data in a database. According to the method provided by the embodiment of the invention, the Hash encryption algorithm is applied to the information security management and storage of the hospital database aiming at the defects and defects of the traditional method, so that the packet loss rate of the hospital database is effectively reduced, and the information security is ensured.

The invention relates to the technical field of cloud computing, and discloses a personal information security management method and system based on a cloud terminal. Comprising a cloud server construction module, a user request processing module, a user behavior abnormity identification module, a user access control module, an information security abnormity judgment module, an information access control module, an association coupling analysis module and an association strength reporting module. The method comprises the following steps: establishing a user behavior abnormity identification model to identify a user behavior, establishing an information safety judgment model to judge the safety of information based on access information safety data and user access authority data stored in a system, performing information access control according to an abnormal result, and establishing an association coupling model to perform association coupling analysis on abnormal data. The association strength of abnormal results is judged, abnormal behaviors are found and responded in time, and personal information safety is ensured.

A safe access method, a safe access device, a safe access electronic apparatus and a safe access storage media for external storage devices are provided. By reporting and processing without relying on real-time network connections, and still maintaining effective management of access to portable external storage devices even when there is no network or the network is unstable, thereby reducing potential risks and avoid frequent returns due to risky hardware and reduce the burden of network communications in the enterprise, immediately being disabled the portable external storage device once a digital certificate to be verified is found to be non-compliant, reducing a chance of spreading virus infection for improving the efficiency of information security management through quick response, and destroying the digital certificate to be verified to prevent the certificate from being stolen by others after confirming the safety of the external storage device, thus further ensuring the company's data security, the system and the method can effectively reduce misjudgment and ban of legitimate hardware through verification of digital certificates, and can achieve the effect of reducing the inconvenience caused by users frequently disabling legitimate devices.

The invention discloses an intelligent management system and method applied to network information security, and relates to the technical field of information security management, and the method comprises the steps: collecting security event data, determining a preliminary disposal action based on the confidence, severity and evidence integrity of an event, and generating a case snapshot; calculating an explosion radius value and determining an explosion radius grade in combination with the asset dependency graph; predicting a threat upgrading probability and a mishandling rate by using a decision tree model, screening an optimal handling action according to a priority, and outputting a handling level; a minimum cut candidate set is generated in an upgrade or degradation scene, priority and strength are controlled in a grading manner, and control parameters and effect data are written back to calibrate a model and a threshold value after shadow mode and gradient execution verification.

The present invention discloses an information security management method and system for enterprise customers, which relates to the field of information security technology. It includes collecting device identification information data and operation behavior data, performing security scoring on the device identification information data and operation behavior data through a security baseline model to generate a security level, dividing security control areas, and configuring access permissions and data encryption policies; establishing a dynamic session channel for data transmission in the security control areas and updating keys according to a preset time period; monitoring the data transmission characteristics of the dynamic session channel and triggering multi-factor identity authentication, and recording audit logs. The present invention establishes an accurate quantitative evaluation mechanism for device and user behaviors through a security baseline model to achieve a comprehensive perception of security risks; based on the differential control area division of security levels, the security resource allocation is made more refined and intelligent; the synergistic effect of multi-factor identity authentication and audit log recording improves the reliability of identity verification.

The invention discloses a building digital information security management method and system based on a block chain, and the method comprises the steps: collecting building BIM parameters through distributed nodes, constructing an initial information block, extracting feature vectors through a graph convolutional neural network, carrying out the verification through a block chain consensus mechanism, storing the feature vectors in a specific structure, and constructing a security evaluation model in combination with the parameters. And when the threshold value is exceeded, triggering the smart contract to execute operation. The system comprises a parameter acquisition unit, a feature extraction unit, a consensus verification unit, a chain storage unit, a security assessment unit, an intelligent contract execution unit and other associated units, and all the units operate cooperatively. By dynamically adjusting a storage and verification mechanism, building component parameters are utilized to construct a model, the integrity of feature extraction and the storage security are enhanced, the problems of insufficient feature characterization and lack of dynamic management in the prior art are solved, and the method is suitable for building full-life-cycle information security management.

The present invention belongs to the field of information encryption technology, and specifically relates to a method for managing government information security based on hierarchical encryption. The method comprises: determining the confidentiality level of each component in a government document based on its confidentiality level, encoding each component in text, and performing R rounds of encryption on the text encoding results of each component based on the confidentiality level of each component and the level key of each confidentiality level, where R is the confidentiality level of the government document; during decryption, determining the decryptability level (denoted as K) based on the user's identity level and credibility and the confidentiality level of the government document, and performing K rounds of decryption on the encrypted result of the government document. The present invention can effectively address the security needs of information of varying sensitivity and dynamically manage and limit user access.

The application discloses an enterprise information security management system and method based on artificial intelligence, relates to the technical field of enterprise information security, and solves the technical problem of the prior art that the protection of enterprise information is performed by connecting a database with a local area network or not connecting with an external network; however, the abnormal behavior of users cannot be avoided by using the local area network, so that there still exists a certain possibility of information leakage, which is not conducive to enterprise information security management; the application collects information data and access data of an enterprise in real time, detects the information security of the enterprise according to the information data, analyzes the security level of enterprise information according to a detection result, encrypts and stores the information data of the enterprise according to the security level, verifies access personnel according to the access data, stores and manages the verification result of the access personnel and the access data, can encrypt and store according to the security level, is conducive to encryption management according to different security levels, and improves the security of enterprise information.

The present invention relates to the field of information security technology, and in particular to an information security management and control method and system based on a hybrid cloud. The method includes: dividing data into multiple data blocks of unfixed size; obtaining attribute feature data of the data blocks and performing normalization processing, the attribute feature data including sensitivity, access frequency, business attributes and data block size; using a random forest model to determine the weight data of each attribute feature, constructing an interest matrix based on the attribute feature data and the weight data of the attribute features, and generating a judgment strategy based on the interest matrix to obtain a judgment strategy matrix; based on the judgment strategy matrix, judging the storage location of the corresponding data block. The present invention determines whether the data blocks should be stored in a private cloud or a public cloud by dividing the data into data blocks of different sizes and fusing multiple attribute features of the data blocks, thereby achieving more efficient and secure data management.

The invention relates to the technical field of data management, and discloses an Internet data center information security management method and system, and the method comprises data in-storage management, data storage management and data out-storage management. The system corresponds to the method. According to the information security management method and system for the Internet data center, closed-loop management of data receiving-data storage and data distribution of the data center is realized through data in-storage management, data storage management and data out-storage management, and in the data storage, the stored data is modulated and encrypted, so that the security of the data center is improved. Therefore, the data stored in the data center is stored in an encrypted form, so that the corresponding dangerous source cannot directly obtain the corresponding data even if network security vulnerabilities occur, and the security of data storage is ensured.

The invention relates to the technical field of enterprise information security management, and discloses a multimodal early warning pushing method and system based on global risk real-time perception. Comprising the steps of detecting a sensitive operation link by using a pattern matching algorithm; monitoring a deviation condition between a business data input value and a system preset threshold value in real time, and generating a business data deviation mark when business data deviation conditions such as material inventory lower than a minimum inventory line, fund expenditure exceeding a maximum payment proportion and employment age exceeding a preset value are triggered; calculating a comprehensive deviation degree score by using a weighted summation algorithm; selecting an early warning push mode according to the risk level and receiver channel preference; and packaging a global risk early warning message and pushing the global risk early warning message through a multi-modal channel. According to the method, the hidden unauthorized risk generated by cross-system permission combination in the matrix management enterprise and the abnormal risk that the business data deviates from the preset value can be identified, and the early warning response rate is improved through multi-mode differentiated pushing.

The invention relates to an enterprise information security management method, system and device and a medium. The method comprises the following steps: acquiring heterogeneous security data of a physical environment and a network environment, and performing standardized analysis and element extraction on the heterogeneous security data to obtain a physical event and a network event; based on a preset unified event model, carrying out cross-domain association analysis on the physical event and the network event, and calculating space-time proximity and semantic correlation between the physical event and the network event to obtain an association candidate pair set; inputting the associated candidate pair set into a pre-trained causal inference model to obtain the causal intensity of the influence of the physical event on the network event, and identifying the associated candidate pair of which the causal intensity exceeds a preset threshold value from the associated candidate pair set as a cross-domain event pair to obtain a visual attribution map; and triggering an enterprise dual prevention mechanism to perform linkage response based on the visual attribution map. By adopting the method, the overall capability of active defense and risk management and control of an enterprise can be improved.

The present invention discloses an enterprise supplier information security management method and system, which relates to the technical field of information security management. The system realizes automatic integration with the supplier system through the supplier information collection module, collects key data and logs in real time, and stores them in the database to ensure the timeliness and accuracy of the data, providing a basis for subsequent security analysis. The preliminary security analysis module and the compliance and data protection analysis module use the collected data, generate security scores through relevant security algorithms, and calculate the comprehensive security score Stot of the supplier through the comprehensive analysis module. After comparing and evaluating with the security threshold S, the security shortboards are identified and improvement suggestions are generated. Through the problem tracking and rectification suggestion module, the system monitors the improvement situation of the supplier in real time, outputs the improvement effectiveness score Eimp and the security capability improvement score, and automatically executes point deduction or further rectification prompts.

The invention relates to the technical field of operation and maintenance management, in particular to an operation and maintenance information security management method and system based on artificial intelligence. The invention discloses an operation and maintenance information security management method based on artificial intelligence. The method comprises the following steps: S1, obtaining project metadata, project associated resource information and temporary account attribute information; s2, processing the project metadata and the project associated resource information by using a natural language processing technology to obtain project task data and project task associated resource data; and S3, based on the project task data, the project task associated resource data and the temporary account attribute information, constructing a project task associated resource allocation sequence. According to the method, the allocation time of the resources can be dynamically adjusted according to the actual starting and ending time of the project tasks by constructing the project task associated resource allocation sequence, so that resource allocation is closely matched with the actual progress of the project. And refined dynamic resource management is realized.

To provide an information security management device, an information security management method, and a program which are capable of accurately confirming whether an information security policy functions properly.SOLUTION: An information security management device according to the present disclosure includes: a data collection unit 131 which collects operation record information indicating processing contents that are subject to rules regarding information security; an evaluation unit 133 which determines whether the rules are violated based on the operation record information and evaluation criteria; a result analysis unit 134 which identifies a cause of the violation based on the operation record information if the rules are violated; and an improvement proposal unit 1336 which obtains an improvement proposal to resolve the violation based on the identified cause of the violation.SELECTED DRAWING: Figure 6

The invention discloses a hospital patient information security management method, which belongs to the technical field of information security, and comprises the steps of request data generation by an APP, HIS-LB load balancing and security verification, HIS-Gateway request processing and data packet analysis by the APP. The technical problem of safety protection of sensitive medical data in a high-concurrency and cross-domain cooperative environment is solved, the confidentiality and integrity of the data are ensured, the differentiated safety requirements of multiple scenes are met, the internal threat detection capability is greatly improved, cross-hospital data statistical analysis is realized without leaking original data by adopting data desensitization middleware, and the safety of the sensitive medical data is ensured. And data sharing and privacy protection are both considered.

An IDC information security management method and a terminal device, which relate to the field of network security. In this method, packet information from the same network entity is obtained, and a feature identifier is added to the data information packet according to the packet information to generate a feature packet; whether the feature packet has abnormal features is judged through a preset in-depth analysis model; if there are abnormal features, the feature packet is blocked. Implementing the technical solution provided by this application achieves the effect of improving the stability of the operating state of the network system.

The invention discloses a block chain-based big data information security management method, which comprises the following steps of: constructing a hierarchical block chain architecture which comprises a core chain and a plurality of sub-chains, and recording chain head hash values, data storage positions and access permissions of the sub-chains by the core chain; collecting features of to-be-stored data, and generating a feature data set in combination with Geohash coding; constructing a priority division model based on a linear weighting algorithm and a TOPSIS algorithm, and performing priority division on the data features in the feature data set to generate priority scores; dynamically distributing the to-be-stored data to a high-security-level sub-chain or a low-security-level sub-chain through a cold and hot separation storage strategy; recording a data storage index and an access permission to the core chain; analyzing a query request of a user by using the core chain, distributing the query request to the corresponding sub-chain, and returning a query result to the core chain after the sub-chain processes the query request in parallel; and verifying the access authority of the user through the core chain, and reading the data stored in the corresponding sub-chain according to the query result after the verification is passed.

The present application relates to the field of security control technology, and in particular to a method and system for intelligent information security control based on big data, the method comprising: assigning a key length to each piece of regulatory information according to the security level of multiple pieces of regulatory information; taking each piece of regulatory information at each moment as a node, taking the predicted validity of the historical node for the regulatory information of any node as the edge weight of the directed edge from the historical node to the arbitrary node, and obtaining a prediction relationship graph, where the historical node is all the nodes at multiple adjacent moments before the corresponding moment of any node; calculating the leakage risk of each piece of regulatory information at any moment; and issuing an alarm in response to the leakage risk of any regulatory information at any moment being greater than the risk threshold. The technical solution of the present application can reduce the risk of information leakage.