Network security data sharing and control method and system

Abstract

The invention provides a network security data sharing and control method and system. The sharing and control method comprises: classifying data and compiling the data into a data directory; opening an account for a data access party, binding an IP, and allocating a data administrator role; obtaining work orders of data access and data operation authority of a data access party, examined and approved the work orders of the data access and the data operation authority of the data access party, giving operation authority of corresponding data to the approved work orders, and encrypting the access and operation authority to be written into an authorization table; introducing the SDK into a project of the data access party obtaining the operation authority; authenticating the IP of the data access party by the SDK; authenticating, by the SDK, the operation authority of the data access party of which the IP is stored in a preset authorization table; performing association analysis on the access and query behaviors of the database and the database performance indexes; and presetting a data access rule, and if a data access party triggers the access rule, fusing query and giving an alarm. According to the application, auditing, monitoring and alarming of the data sharing process can be ensured.

Description

technical field [0001] The present application belongs to the technical field of network security, and in particular relates to a method and system for sharing and controlling network security data. Background technique [0002] Network security data usually includes security event logs, threat intelligence data, vulnerability intelligence data, IT assets, and traffic. At present, there are relatively few products for data sharing and control in the field of network security, mainly products for database auditing. For example, Anhuajin and the database security audit system are database auditing products. Anhuajin and the database security audit system implement database security auditing and protection based on database protocol analysis and control technology. [0003] Existing database audit products have the following problems: First, database audit products are aimed at database operation and maintenance personnel and security managers, and they focus more on the secur...

AI Technical Summary

Problems solved by technology

Unification of data operation authority and data access authority in the system is not realized

Finally, database audit products do not have a data approval process for the use of data and data responsible parties

Images