User behavior analysis-based data theft risk assessment method and system

Abstract

The invention provides a user behavior analysis-based data theft risk assessment method and system. The method includes the following steps that: operation behavior pairs of a terminal user are obtained; dangerous operation behavior pairs and the number of the dangerous operation behavior pairs are obtained according to the operation behavior pairs, and a first dangerousness coefficient is obtained; the matching number and mismatching number of web site visit behavior business types and registration business types are obtained according to the dangerous operation behavior pairs, and a second dangerousness coefficient is obtained; dangerous copy behaviors and the number of dangerous copy files are obtained according to copy behaviors, and a third dangerousness coefficient and a fourth dangerousness coefficient are calculated; and a preset risk assessment model is adopted to calculate the dangerousness coefficient of a terminal according to the first dangerousness coefficient, the second dangerousness coefficient, the third dangerousness coefficient and the fourth dangerousness coefficient. With the user behavior analysis-based data theft risk assessment method and system of the invention adopted, the network behaviors of the terminal user of an intranet are analyzed; potential terminals where risk operation may exist can be discovered; data security can be protected; the security of the intranet can be improved; and the losses of enterprises can be reduced.

Description

Technical field [0001] The invention relates to the field of network security, in particular to a data theft risk assessment method and system based on user behavior analysis. Background technique [0002] With the widespread use of computers and the rapid development of network technology, terminal security has an increasingly profound impact on enterprise and national information security. While using the network efficiently, the risks of information leakage and abuse also increase. Enterprises are beginning to pay attention to the safety of terminal security and user behavior, and user operation behavior needs to be properly monitored and managed. [0003] At present, the main solutions for the security of the intranet terminal are: one is based on the access control of the intranet website; the other is the audit of the sentry behavior of the network. The former scheme provides corresponding access rights for specific users, but there is no way to avoid hidden dangers of unsaf...

AI Technical Summary

Problems solved by technology

The former scheme provides corresponding access rights for specific users, but it cannot avoid the hidden dangers of unsafe operations

The latter makes the process of normal business work cumbersome

Images