Data processing method and system

Abstract

The invention discloses a data processing method. The method comprises the following steps that collected information data serves as log data to be stored in an information system; log data in the information system is read, the log data is classified, and a strategy tree is encapsulated by combining strategy tree cache and other cache information; alarm event information and security event information are generated according to rule configuration information and strategy tree cache strategy information; the rule configuration information is subjected to dynamic adjustment according to the alarm event information and the security event information. According to the scheme, the framework is advanced, the technology is stable, and the compatibility is high; the large data volume condition issupported; the rule system configurability is high.

Description

technical field [0001] The invention relates to the field of data security, in particular to a data processing method and system based on a flow processing rule engine. Background technique [0002] The complex internal security system of the enterprise and the security business rules that are constantly changing with external conditions require unified data storage and the ability to effectively separate business logic and technical decisions of application developers. The rule engine can realize the vertical and horizontal verification of system data and the verification of the logical relationship between tables. As an independent module, it can adapt to different business models to cope with dynamically changing environments. [0003] In recent years, information security risk incidents of commercial banks have occurred from time to time. While information technology promotes business innovation and transformation of small and medium-sized commercial banks, it also bring...

AI Technical Summary

Problems solved by technology

At present, the outstanding problems faced by commercial banks in information security risk management are: external attacks are more diversified; external attacks are more concentrated; existing security and audit measures are difficult to adapt to the business development needs in the big data environment; and lack of index system

[0013] Although the above-mentioned rule engine technology has a certain processing ability for big data, it does not have a mechanism based on stream processing design, lacks the ability to deal with different big data situations, and lacks configuration expansion capabilities, resulting in poor performance and usability

Images