The invention relates to the technical field of
information security privacy protection, in particular to an automatic identification and desensitization
system, in the
system, a log acquisition module is configured to acquire original
log data of an application
system in real time or according to a preset time interval, a sensitive information identification engine is used for deeply analyzing the original
log data, and the sensitive information identification engine is used for identifying sensitive information; the desensitization strategy management center is responsible for storing, classifying, updating and dynamically providing global and local desensitization strategies, and the
system monitoring and log auditing module is used for monitoring the running state, the
performance index and the desensitization effect of the system. And the strategy configuration and update interface allows an external system, a
security administrator or an automatic tool to dynamically update the desensitization strategy and the
verification rule in the desensitization strategy management center through a graphical interface or an API (Application Program Interface). According to the system, the invasiveness can be reduced, high-precision sensitive information identification is realized, the system is flexible and configurable, fine-grained desensitization
processing can be realized, comprehensive monitoring and auditing can be realized, and the
reusability and expandability of the system are improved.