最新更新

充值信息

赞助信息

推荐给好友 上一篇 | 下一篇

物联网大数据时代怎样实现数据防泄漏

字体:  小  中  大  | 打印 发布: 2013-8-02 12:52    作者: 佚名    来源: 互联网    查看: 27次



　　今天的主题主要分为以下三块：  在大数据背景下的企业为何需要数据防泄漏；作为成功的数据防泄漏需要覆盖到哪些方面，Websense数据防泄漏的特点；以及分享在去年实施的成功案例。

　　首先，今天在大数据背景下产生了很多关键的数据，这些数据我们会对它进行分析，为企业的决策提供帮助。正是因为有这样的数据出来会产生一些新的细分市场，包括一些以数据分析和处理为主的高级数据服务。但这同时也就产生了很多问题，如何保证物联网的数据，如何保证企业的经营数据不被泄漏，这是我们今天要一起探讨的话题。

　　我们看到从去年或更早的时间以来发生了很多的泄漏事件，不管是HBGary6万封机密邮件的泄漏，RSA硬盘被盗，以及索尼公司超过1亿客户账户详细资料和1200万信用卡号被盗。我们看到这些信息泄漏的背后付出了非常大的代价，RSA补救成本是接近6600万美元。而索尼公司补救成本是1.7亿美元，总损失可能高达12.5亿美元。2011年整个外泄数据超过1.74亿，平均一起事件的损失高达55万美元。这些所有的数据泄漏实际上都是黑客所为。这里面每天都会听到病毒的攻击，这些攻击离我们真的很远吗？我想不是。APT的定向攻击，在去年的10月28日Websense中国的同仁，主要是销售团队和老板都收到这样一份邮件，这份邮件伪造得非常好。因为我们的奖金计算是外包公司做的，伪造一个外包公司给我们发邮件，说这个季度末快卖完以后会有额外的奖励。从我个人感觉来说非常爽，一定会点这个链接。这个链接实际上是指向第三方的链接，如果点了这个链接会一步一步中招，这是APT的典型特征。

　　我们说APT有七步曲：侦查、诱饵、重定向、漏洞分析、下载恶意软件、回报通讯、窃取数据等等，Websense在这里可以为客户提供完整的保护。

　　我们谈到在大数据背景下企业或者说整个行业为什么进行数据的防泄漏，我想无外乎有很大的压力，第一个是企业内部监管的压力。这包括缺少有效的管控手段，因为缺少管控的手段增加了数据泄漏的风险。同时内部第三方员工有意无意操作也会导致企业数据信息的泄漏。在这同时实际上企业都面临着第三方监管的要求，就像银监会对所有银行有相应的保密要求。还有其他的法律法规，包括最近出台的中国个人信息管理条例里面针对PCI的数据有严格的要求。整个数据泄漏的风险随着企业边界的不断扩张，泄漏的风险变得日益增加，所有企业都面临着数据泄漏的风险。

　　什么是数据防泄漏，定义是什么？实际上有一个非常明确的定义：以集中策略为基础，采用深层内容分析，对静态数据、传输中的数据及使用中的数据进行识别、监控和保护的相关机制。我们从大数据来看整个数据产生有几个生命周期：从数据生成、存储、应用、传输，以及到后期数据备份、归档、销毁期间，实际上在数据存储、应用、传输这三个阶段都需要对数据进行数据防泄漏的防护。

　　在整个数据生命周期有三个非常重要的阶段都需要对数据进行数据防泄漏的保护，整个数据防泄漏对客户有什么价值？企业为什么要上这个防泄漏，我们简化一下，实际上就把它理解为两化或两可。两化，一是员工行为的可视化，可以清晰地了解到员工每天在干什么，特别针对敏感数据每天在干嘛，操作行为都会可视化。同时我的部署策略是一体化的，可以将管理部署到所有通道，不仅仅是邮件通道、互联网通道、终端通道还有iPad或iPhone的通道。

　　两可，第一个是行业规范可落地，我们以前谈行业规范，这些规范怎么落地，我想通过这套系统可以真正地对个人信息保护条例、银监会条例、保险法条例、交通部相关条例都可以落地。同时安全事件是可追溯，发的违规邮件、员工违规行为都可以在这套系统中进行记录。

　　信息防泄漏项目对客户、对企业是有价值的，整个信息防泄漏项目如何来实施，涵盖了哪几个方面呢？首先我们来分析一下？首先要有组织的保障，其次要有制度的保障，最后要有技术的保障。为什么说我们要把这个项目提高到如此的保障。需要组织的保障是因为要一个实施团队，这个实施团队不仅管理岗要起作用，还要有信息科技部、数据保密相关部门、风险合规部门以及内审部门的参加。有这些部门参加就够了吗？也不是，我们还需要一个人来支持，就是CEO、CIO作为领导来做制度的保障。

　　其次是制度的保障，这个制度是什么？就是企业为了做信息防泄漏要建立一套体系，建立一套流程，这里面我们要有一个信息防泄漏总体的策略。同时我们要有信息防泄漏总体的管理办法，明确我们的管理目标并定义有很多组织来参加，这些组织也有一个职责。还有一个非常重要的点，是我们要有数据防泄漏相关的管理流程，这些流程包括什么？策略变更流程、例外策略的流程，为什么谈例外？可能在信息监控的时候把领导放开，就不监控了。真正大家在做这个事情的时候要考虑一下，因为真正的高层是信息泄漏非常重要的源泉，因为它是APT攻击的重要目标。所以在例外的时候宁可把门外作为例外，也不要把领导作为例外。

　　最后是技术保障，刚才谈到信息需要保护，这些信息保护需要技术的手段，首先要能够识别什么是客户信息，什么是银行卡信息，什么是客户数据，我们员工资料可以不可以识别，敏感问题是不是可以识别。同时要监控在各个网络，比如互联网网络、针对SMTP、HTTP、FTP是否能监控。能够针对终端邮件、WEB、USB、打印机等等终端是不是可以监控，发现敏感信息往外泄漏能不能对信息进行报损，能不能进行保护、隔离、释放，这些都是在技术上进行保障的。

　　Websense在信息防泄漏的特色是完全针对使用中的数据，动态数据、静态数据，以及结构化数据和非结构化数据进行一个全方位保护的系统。它提供给了客户非常多的非常完整的数据识别技术，从过去我们经常谈到关键字、字典、文件属性，以及到最新的策略模板、自然语言处理、指纹。包括现在新的针对图片识别非常完整的识别技术，来保障客户数据防泄漏实施的成功。

　　最后用几分钟分享一下在去年9月份实施的保险公司的案例，为什么分享这个案例呢？我在加入Websense以来做了好几个银行的信息防泄漏项目，也做了中国第二大保险公司保险集团的项目。我们去年做这个保险公司集团公司项目以来，我觉得相对来讲做的非常成功，所以想花一两分钟时间分享。

　　其实保险公司的诉求就是要保护客户资料，保险公司客户泄漏意味着什么？声誉的丧失。我知道北京有一家保险公司在去年就有大量北京员工的客户资料泄漏导致大家会接到电话，今天参加酒会或者明天有什么推广，最后处理的结果是今年2月份该公司北分有一位同事被送进去了。通过建立这套信息防泄漏的管理体系完善了技术的管控手段，同时有效控制了各种投机，包括邮件、互联网、终端送到外部的数据，大大降低了客户数据的泄漏风险，保障了公司的数据安全。同时又加强了外部法律法规和监管机构要求的合规性。

　　我们在做项目实施的时候分了好几个阶段：第一个阶段把这个保险公司的客户数据或财务数据进行保护；在第二阶段针对精算数据、投资交易数据、战略数据、合规与风险数据以及审计数据进行保护；在第三个阶段对员工数据和IT数据进行保护；所有的这些实施都是依照在CIO的指导下按顺序、按部就班进行的。而且在这个过程中分步实现、持续改进，因为我们都知道数据防泄漏项目不是一下子就干成的，很多流程都是要经过不断优化、不断改进来完成的，所以他们经历了从IT部门内部试点到整个集团公司的试点，包括只对10%的人进行监控到针对90%的人监控，到针对90%的10%进行阻止，这样不断优化的过程最后起到了整个的改变员工行为，改变了企业的行为，对全体员工进行了震撼式的教育，防止了信息通过公司的渠道，不管是邮件或互联网渠道的泄漏。

　　这个项目带给我们很多经验，第一个分享的是部门之间的协作和高层领导认可，这个项目为什么可以成功呢？实际上是因为CIO强势参与保证了这个项目的成功。

　　第二个要从重要的数据保护开始，我们很多公司、很多企业上信息防泄漏的时候都想一口气把所有的数据都保护了，实际上这是不现实的。我们要怎么做呢？要从最重要的数据开始。什么数据是最重要的，无外乎是客户的数据。要从一两个重要部门开始，同时上的策略不易过多，因为过多会导致项目实施的不成功性增加。




查看全部176059条评论

最新评论

  • 删除 引用 Guest (2016-9-08 15:40:15, 评分: 0 )

    Do you know what extension he's on? <a href=" http://www.trunorthsolar.com/xylocaine-gel-avec-ou-sans-ordonnance.pdf#lord ">xylocaine cena</a>  Later, Obama participated in an event to honor Raoul Wallenberg, a Swedish diplomat and “honorary US citizen who worked courageously to save lives while serving as Sweden’s special envoy in Budapest during World War II."
    <a href=" http://www.fundapi.org/precio-de-allegra-180-mg.pdf#rested ">allegra lek cena</a>  LG's head of domestic marketing, Ma Chang-Min, last month said the company had abandoned efforts to include a fingerprint sensor to the back cover of its flagship G2 smartphone "as we need more work to improve reliability and usability".

  • 删除 引用 Guest (2016-9-08 15:40:14, 评分: 0 )

    I enjoy travelling <a href=" http://www.muuks.fi/onde-comprar-linezolide.pdf ">linezolida custo</a>  The company's net loss narrowed to $13.5 million, or 23cents per share, in the third quarter, from $18.5 million, or 32cents per share, a year earlier. Analysts had expected a loss of20 cents per share.
    <a href=" http://www.muuks.fi/diovan-d-80125-precio.pdf#spy ">harga diovan 80</a>  Currently, when a suspect is being tracked outside the United States, surveillance has to stop if he enters the country. The proposed bill would let it continue for seven days before agents must ask the court for authorization.

  • 删除 引用 Guest (2016-9-08 15:40:13, 评分: 0 )

    Could you please repeat that? <a href=" http://atsora.com/index.php/evecare-cena.pdf ">evecare cena
    </a>  The capture of the two districts, located between two major roads heading south towards Jordan, strengthens Assad's hold on major supply lines and puts pressure on rebel brigades under siege for months in suburbs east and southwest of the city.
    <a href=" http://necina.org/lidocaine-spray-prix.pdf ">harga lidocaine cream</a>  Franco is right, but that is impossible, at least before this weekend芒聙聶s ceremonies. Piazza declined through a Mets spokesperson to be interviewed for this story, indicating that he did not want to do any press until Sunday.

  • 删除 引用 Guest (2016-9-08 15:40:12, 评分: 0 )

    We need someone with experience <a href=" http://atsora.com/index.php/comprar-zoloft.pdf#copies ">zoloft meaning in hindi</a>  "Essex was a place to move to and retire to," he said. "People like my parents stuck it out in the east end the whole of their working lives and wanted to spend their twilight years in Essex.
    <a href=" http://www.fundapi.org/arcoxia-90-mg-fiyat.pdf#pure ">arcoxia 90 mg precio en argentina</a>  Consider the case of David Stewart, a 56-year-old Cleveland high school teacher who had struggled with his weight since childhood. When shopping for back-to-school jeans, he says his twin brother "always bought slim-cut. I always had to get huskies." As the years went on, Stewart tried different diets – he lost, then gained back, a bunch of weight on fen-phen, the infamous 1990s diet drug that was ultimately linked to heart disease. As for working out, with 246 pounds on his 5-foot-9 frame, Stewart says there were few exercises he could do "without feeling like I was going to pass out."

  • 删除 引用 Guest (2016-9-08 15:40:11, 评分: 0 )

    Would you like a receipt? <a href=" http://necina.org/onde-comprar-misoprostol-em-bh.pdf ">order mifepristone and misoprostol online
    </a>  The yen has faltered against the dollar lately onexpectations Japan will take fresh steps to end deflation. Aso'scomments that corporate tax cuts would not have an immediateimpact was seen as a blow to that view.
    <a href=" http://www.fundapi.org/harga-aricept-5-mg.pdf ">precio aricept 5 mg
    </a>  After slashing its benchmark Selic rate to record lows overthe last two years, the central bank has embarked on one of themost aggressive tightening cycles in the world, raising rates125 basis points since April to 8.50 percent.

  • 删除 引用 Guest (2016-9-08 15:40:07, 评分: 0 )

    I like watching TV <a href=" http://www.trunorthsolar.com/diltiazem-120-fiyat.pdf#mute ">diltiazem 120 fiyat</a>  A Soyuz capsule carrying three astronauts successfully docked with the International Space Station early Thursday, bringing the size of the crew at the orbiting outpost to six. The crew’s six-month mission will include a spacewalk with the Olympic torch.
    <a href=" http://atsora.com/index.php/prix-du-duphaston-en-belgique.pdf ">prix du duphaston en belgique</a>  gcf1965, Your statement is excellent! The Obama Labor Department has used up it credibility with the overuse of “The unemployed just dropped out of looking for work” readings. No unemployed person I have ever spoken with would ever admit to a federal, state or local official they just quit looking for work. They would have risked losing their present or future unemployment checks and benefits.

  • 删除 引用 Guest (2016-9-08 15:40:05, 评分: 0 )

    Have you seen any good films recently? <a href=" http://necina.org/ivermectina-precio-argentina.pdf ">comprar ivermectina para humanos</a>  Nunez was a 芒聙聹limited representative,芒聙聺 which means he was identified as someone who worked on behalf of players but was not a full agent. Nunez primarily dealt with Latin players, and was a frequent presence at Yankee Stadium and Citi Field while he worked for ACES. He was named as a defendant in MLB芒聙聶s lawsuit filed earlier this year in connection with the Biogenesis matter, when baseball accused several defendants of tortious interference. Bosch was another defendant, but was dropped from the suit when he agreed to cooperate with MLB.
    <a href=" http://necina.org/rhinocort-aqua-receptfritt.pdf ">rhinocort kaufen</a>  In its first four months, the green fee generated $10,841,000 for MTA coffers, said NYC Transit division budget director Aaron Stern. The MTA expects gross revenues to total nearly $24 million this year, and $28 million next year with a combined $3.8 million savings in production costs, said agency officials.

  • 删除 引用 Guest (2016-9-08 15:40:03, 评分: 0 )

    It's a bad line <a href=" http://www.muuks.fi/como-comprar-lasix.pdf#performed ">lasix 500 mg prix</a>  Prince, 30, is also the mother of Federline's fifth child, one-year-old Jordan Kay. Federline has two children with Spears, 6-year-old Jayden James and 7-year-old Sean Preston. He also has two other children from his relationship with ex-girlfriend Shar Jackson.
    <a href=" http://necina.org/sandimmun-neoral-50mg-comprar.pdf#wonderfully ">acheter neoral</a>  For not only are there unanticipated events (e.g., economic crises) that alter the public's perception of which party will govern better, but there are also foreseeable policy battles that politicians look to turn to their party's favor in advance of an election.

  • 删除 引用 Guest (2016-9-08 15:40:02, 评分: 0 )

    Could you tell me my balance, please? <a href=" http://www.muuks.fi/vermox-kur-pirkt.pdf ">ile kosztuje vermox na recept</a>  But we shouldn芒聙聶t really be surprised. The mergers and takeovers that get fee-hungry bankers and analysts in the City of London excited generally end up destroying value for the acquiring company. Glencore/Xstrata芒聙聶s achievement has been to demonstrate that truth in double-quick time.
    <a href=" http://www.fundapi.org/bactrim-forte-kaufen.pdf ">bactrim forte kaufen</a>  The Idaho State Journal invites you to take part in the community conversation. But those who don't play nice may be uninvited. Don't post comments that are off topic, defamatory, libelous, obscene, racist, abusive, threatening or an invasion of privacy. We may remove any comment for any reason or no reason. We encourage you to report abuse, but the decision to delete is ours. Commenters have no expectation of privacy and may be held accountable for their comments.

  • 删除 引用 Guest (2016-9-08 15:40:00, 评分: 0 )

    Who would I report to? <a href=" http://www.fundapi.org/donde-comprar-ginseng-rojo-coreano-en-argentina.pdf ">resep masakan daun ginseng cah tauco</a>  England were in control on the fourth day, lost it, got it back, lost it again and then finally, as shadows stretched across the parched Trent Bridge outfield and memories of 2005 rang ever louder in our ears, took what should be the decisive hold on a plot that has twisted like the beer snakes in the boozy stands all around.
    <a href=" http://necina.org/cena-livial.pdf ">precio livial tabletas</a>  Anewhighinchutzpahoranewlowincorporategovernance芒聙聰orboth.OnFriday,thesupposedlyindependentspecialcommitteeoftheDellboardOK'dasurprisedealthatwillhelpfounderMichaelDellandSilverLake,aninvestmentgroup,...

  • 删除 引用 Guest (2016-9-08 13:38:31, 评分: 0 )

    Jonny was here <a href=" http://www.fundapi.org/harga-pil-kb-yasmin-di-pasaran.pdf ">yasmin bayer online kaufen</a>  A criminal complaint was filed against Abrahams accusing himof extortion, but prosecutors have not yet gone to a grand juryto obtain an indictment, and additional charges are possible,said FBI spokeswoman Laura Eimiller.
    <a href=" http://www.muuks.fi/paracetamol-codeine-kopen-kruidvat.pdf ">paracetamol 1000 zpfchen rezeptfrei</a>  The testimony comes as the Obama administration offered new details and explanations on Wednesday. The administration said the system didn't get enough testing, especially at a high user volume. It blamed a compressed time frame for meeting the Oct. 1 deadline to open the insurance markets. Basic "alpha and user testing" are now completed, but that's supposed to happen before a launch, not after.聽

  • 删除 引用 Guest (2016-9-08 13:38:30, 评分: 0 )

    Jonny was here <a href=" http://necina.org/elavil-precio.pdf ">harga obat elavil</a>  The UN's Killian Kleinschmidt, who runs Zaatari for the UN's High Commissioner for Refugees, now calls himself the mayor. He told me how he sits down with everyone from visiting dignitaries to local self-appointed street representatives.
    <a href=" http://necina.org/prix-amoxil-maroc.pdf ">prix amoxiline</a>  Alfonso Soriano and Eduardo Nunez homered to help give Sabathia a four-run lead by the fourth inning. For six innings, Sabathia looked as good as he did in a dominant 10-strikeout win over the Red Sox. He ran into trouble in the seventh, but managed to get out with a one-run lead intact.

  • 删除 引用 Guest (2016-9-08 13:38:29, 评分: 0 )

    I'm only getting an answering machine <a href=" http://www.fundapi.org/provera-krvne-slike-cena.pdf ">depo provera kaufen</a>  This is not, however, the whole story, as the figures for the second vote show the SNP at 36 per cent against 44 per cent in 2011, Labour dropping 2 points to 24 per cent, the Conservatives falling to only 10 per cent from 12.6 per cent 芒聙聯 with the Lib Dems overtaking them on 13 per cent, and more ominously for the Tories, Ukip on 11 per cent.
    <a href=" http://www.fundapi.org/precio-arcoxia-mexico.pdf ">preis arcoxia 90</a>  “I think these are impossible conditions, and set in purpose to start a blame game, while he is destroying the negotiations, and pre-empting the outcome by making sure these talks will fail,” she said.

  • 删除 引用 Guest (2016-9-08 13:38:26, 评分: 0 )

    Could I make an appointment to see ? <a href=" http://necina.org/harga-antibiotik-zithromax.pdf ">harga antibiotik zithromax</a>  "All of the outstanding USDA sugar loans that were due atthe end of July have been repaid in cash," said Brian Mabry, aUSDA spokesman, noting that the USDA has taken "extensiveactions" to support prices and reduce forfeiture risk.
    <a href=" http://necina.org/lire-art-de-yasmina-reza.pdf ">wie viel kostet yasmin</a>  芒聙聹It芒聙聶s sushi and Thai food put together so we call it tu-shi,芒聙聺 said White, who thought up the recipe after watching 芒聙聹MasterChef芒聙聺 with his firehouse buddies. 芒聙聹I wanted to do something different compared to the regular meat and potatoes we eat at the firehouse.芒聙聺

  • 删除 引用 Guest (2016-9-08 13:38:16, 评分: 0 )

    very best job <a href=" http://www.trunorthsolar.com/lamictal-200-fiyat.pdf ">prix lamictal tunisie
    </a>  So when they told me it was my phone, I told straight up told them they were lying because of how many phones I've had. Funny enough, I left Straight Talk (had them after Sprint) because of their permanent throttling. They were fine for a year until they started throttling AT&T SIM users to 256 kbps a month and claiming that I used "excessive data" (I used 300 MB in one month once and was throttled within the first week). They kept telling me to pay my bill and it will be unthrottled, but it went on for 3 months before I said enough.
    <a href=" http://atsora.com/index.php/solu-medrol-precio-colombia.pdf#beat ">solu medrol precio colombia</a>  "I believe that both the SPD and Greens will make it quite clear in coming weeks and months - if they have not already done so - that they will drop this taboo," Liebich told Reuters, adding that a grand coalition could not last four years.

  • 删除 引用 Guest (2016-9-08 13:38:04, 评分: 0 )

    I'd like to order some foreign currency <a href=" http://www.fundapi.org/glucophage-1000mg-cena.pdf ">glucophage 850 mg fiyati</a>  Doctors are also falling short when it comes to simpler challenges. Too few oncologists know how to provide palliativecare to keep patients comfortable when treatment has failed, oreven how to make referrals to palliative-care consultants, theIOM found.
    <a href=" http://www.muuks.fi/clopidogrel-plavix-precio.pdf ">clopidogrel hcs 75 mg precio</a>  It will enable mothers and fathers to get a better grasp of children’s results compared with standards achieved by their peers across England, although the ranking system will not be published in league tables accessed by the public.

  • 删除 引用 Guest (2016-9-08 13:38:02, 评分: 0 )

    real beauty page <a href=" http://www.2daybiz.com/sitemap9.html#experienced ">viagra prescriptions canada</a>  Some agencies don't have clear protocols on how to handle the multitude of alerts, or don't always follow them. At times, officials took days to act, if they noticed at all, when criminals tampered with their bracelets or broke a curfew.

  • 删除 引用 Guest (2016-9-08 13:37:59, 评分: 0 )

    very best job <a href=" http://www.leneufeld.eu/sitemap2.html#granted ">terbinafine 250 mg para que sirve</a>  Judge Mary Jacobson in Mercer County Superior Court inTrenton issued the order, making New Jersey the first state tolift a ban on gay marriage as a result of the U.S. SupremeCourt's decision in June to strike down the federal law definingmarriage as between a man and a woman.

  • 删除 引用 Guest (2016-9-08 13:37:58, 评分: 0 )

    The United States <a href=" http://www.trunorthsolar.com/jual-hoodia-p57-murah.pdf ">acheter hoodiatop</a>  F1 2013 features all the cars, circuits and star drivers from the 2013 season, allowing gamers to race as Lewis Hamilton in his Mercedes and Sergio Perez in the McLaren-Mercedes for the first time, and includes all of the new drivers, updated rules, tyre changes and remodelled handling.
    <a href=" http://atsora.com/index.php/vigora-100-use-in-hindi.pdf#laziness ">vigora 100 in hindi</a>  The official Saudi Press Agency quoted a ministry statement late Thursday as saying one of the suspects is Yemini and the other a Chadian who had been deported from the kingdom but returned using a different passport.

  • 删除 引用 Guest (2016-9-08 13:37:56, 评分: 0 )

    How long have you lived here? <a href=" http://www.ltb.lu/sitemap4.html ">fentanyl continuous infusion rate</a>  "It's about the ease of incorporation, the ability of Irishcorporate law and tax law to fit in with IRS (Internal RevenueService) requirements, and the flexibility that is shown by theDepartment of Finance and Revenue to any of the multinationals'needs. If they have a problem, the law will be changed."
查看全部176059条评论
 

评分：0

我来说两句