A data security management and control method and platform

Abstract

The invention discloses a data security management and control method and platform. The method includes: S1, dividing data according to data category and confidentiality level; S2, performing data encryption, identity authentication, access control, security audit and Tracking and forensics assign corresponding security protection tools and perform security protection; S3 collects log information generated by security protection tools and performs normalized processing to establish a security view of the full life cycle of data. The present invention can carry out fine-grained, differentiated, and full-life cycle protection on big data, improve the utilization rate of security protection tools, and track and collect evidence on big data.

Description

technical field [0001] The invention relates to a data security management and control method and platform, belonging to the technical field of data security. Background technique [0002] With the development of enterprise business and informatization, business data, as a kind of enterprise assets (data assets), presents the characteristics of large quantity, diversity and high value, and data assets have entered the era of big data. The significance of data security is not limited to the data itself, but also directly affects whether data can be upgraded to data assets to serve the business development of enterprises and the improvement of core competitiveness; in 2014, the state proposed that "information security is related to national security", and It shows that the data security of the enterprise is related to the security of the enterprise and the national security. [0003] However, the current security protection methods and technologies cannot meet the diverse an...

AI Technical Summary

Problems solved by technology

At present, the granularity of protection strategies for data assets is relatively coarse, and there are some unreasonable situations where some data protection is insufficient and some data protection is too harsh, which affects business use.

[0005] (2) The security protection products of enterprises only focus on the equipment they protect, lacking a unified security view

For example, firewalls only focus on network layer protection, terminal desk management security software only focuses on terminal protection, security protection products lack linkage, security views are fragmented, and lack a unified security management view for all devices on the entire network, making it impossible to know all devices An overall security protection situation of

[0006] (3) In the big data scenario, data faces different security risks at each stage of the life cycle and has different security protection requirements. However, at present, there is a lack of security protection for the entire life cycle of data, and it is impossible to generate, The unified security protection and management of the complete life cycle of access, transmission, recovery, and destruction cannot guarantee the security of data in all aspects of storage, transmission, use, and destruction.

[0007] (4) After a security violation event occurs, it is difficult to quickly and accurately locate the responsible person

Images