分布式网络敏感信息泄露预警系统

Distributed Network Sensitive Information Leakage Early Warning System

近年来因敏感信息泄露导致的信息安全事件屡见不鲜,如何避免敏感信息在泄露后造成的严重损失,是待解决的问题。该系统基于GO语言,调用Github搜索API结合lucene语法过滤规则实现分布式扫描,并在扫描后及时将扫描结果通过微信告知用户,使用Macaron库及其中间件和辅助模块编写路由,并提供前端Web应用供用户审计结果。该系统包括扫描、审计、登录、用户管理、规则管理、Token管理六大模块。使用该系统用户可以根据自身所关心关键词自行编写符合lu⁃cene语法过滤规则,因此该系统具有较好的扩展性和实用性,部署后能降低企业因敏感信息泄露而遭受的损失。

Information security incident occurred frequently due to the leakage of sensitive information in recent years.Based on the Go language,this system calls GitHub Search API and Lucene syntax filtering rules to realize distributed scanning.After scanning,the system timely informs users of the scanning results through wechat.And it uses Macaron library and its inter parts and auxiliary modules to write routing,and provides users thefront-end web application to audit results.This system is mainly composed of six modules:login,audit,user management,rule management,token management,and scanning.Users can write their own Lucene syntax filtering rules according to the keywords they care about.Therefore,the system has good scalability and practicability,and can reduce the loss of enterprises due to the disclosure of sensitive information after deployment.And after its deployment,it is extensible and practical enough to reduce enterprises'lossas a result of the leakage of sensitive infor⁃mation.