一种终端主机文件涉密检查及流转跟踪实时监控系统

A Real-time Monitoring System for File Secret Checking and Flow Tracking of Terminal Host

目前,网络安全防护重点集中在诸如部署防火墙等边界防护手段。边界防护对外部攻击起到了很好的防护作用,但造成更大安全威胁的终端存储安全问题并没有得到解决,涉密或标涉文件因越级存储导致泄漏和被窃取的现象仍然十分严重。笔者设计并实现了一种终端主机文件涉密检查及流转跟踪实时监控系统,能够实时检查终端主机新增文件或修改文件的文件内容和密级标识,及时发现可能导致文档泄漏和被窃取的不安全因素。

At present,network security protection focuses on border protection means such as deploying firewalls.Border protection plays a very good role in protecting against external attacks,but the security problem of terminal storage,which poses a greater security threat,has not been solved.Leakage and theft of confidential or tagged documents due to over-level storage are still very serious.The author designs and implements a real-time monitoring and control system for document secret-related checking and flow tracking of terminal host.It can check the contents and secret-level identification of new or modified files in terminal host in real time,and find out the unsafe factors that may lead to document leakage and theft in time.