With the development of technology, the public security industry has vigorously promoted the construction of the police big data platform, which brings together data of various dimensions to enhance the efficiency of public security work, but also brings about data security problems:
1、Data involving a wide range, multiple dimensions, high sensitivity, large volume of data, and contact with a wide range of people, contact with many roles, supervision is difficult;
2、The complexity of the business system architecture, data use scenarios, data security protection strategy needs to comprehensively cover a variety of scenarios;
3、Data resources are exchanged and shared with various departments, and it is difficult to monitor and manage sensitive data during the flow process.
The data security solution for the police big data platform is closely integrated with the industry's data security needs to realize a secure data base:
1、Effective mapping of sensitive data in the public security industry through data asset combing, forming data asset maps and sensitive data asset maps;
2、Standardize the division of access rights of personnel in different roles, such as police personnel, auxiliary police personnel, IT information personnel, and third-party operation and maintenance personnel, so as to realize the effective control of internal data operation behavior;
3、In the process of public security data exchange and sharing, follow the principle of minimization of data provision, through data desensitization and de-identification, de-privatization, to protect sensitive data from leakage at source; at the same time, add the corresponding data watermarking information, to enhance the traceability of data;
4、Monitoring the security risks in the whole life cycle data flow process from the generation of sensitive public security data to scenario-based use, and timely alerts to remind managers to dispose of them;
5、Using the data security management platform to break the data security silo, form the data security risk situational awareness capability of the whole network, joint prevention and control.
1、Comprehensive management of public security data asset security, real-time and dynamic mastery of data asset storage location and distribution, data asset access, data asset security threats;
2、Public security data security risk active defense, through the identification and interception of malicious data attacks and illegal invasion from the application layer and network layer, and timely closure of data access channels;
3、Centralized monitoring and control of the operation behavior of public security internal personnel and external operation and maintenance personnel;
4、Public security data sharing, exchange scenarios for the protection of sensitive data, high-risk data deletion, data export and other operations in a timely manner to block and warn;
5、Public security data security situation awareness, so that managers clearly grasp the unit's data security situation.
Comprehensive support for cloud architecture, can be seamlessly combined with the public security police cloud.
Built-in multi-dimensional reports, as well as the ability to customize reports to meet the needs of different scenarios.
Open and perfect system architecture, not only to support its own security capabilities unit, but also supports third-party vendors to access security protection equipment to form a more comprehensive situational awareness capabilities.
Built-in rich rule base, can quickly and effectively detect and protect such as SQL injection, APT attacks, hit the library, dragging the library and other attacks, at the same time, monitoring, protection rules define conditions up to more than twenty, more accurate protection.
Big data platform components fine-grained protection, can support different police big data scenarios.