政务数据端到端溯源技术研究与应用实践

Research and Application of End-to-End Traceability Technology for Government Data

随着国家数字化政府战略布局的持续推进,为充分发挥大数据聚合分析效益,数字政府各节点集中处理大量重要数据,且节点间数据互通、信息共享,数据安全风险日趋暴露,给数据泄露事件追踪溯源带来巨大挑战.首先,对政务数据泄露风险进行分析.然后,基于国内外著名溯源模型7W,ProVOC等,提出数据端到端追踪溯源模型和技术方法,对标注法和反向查询法2种方法进行综合运用,并对数据库水印、动态脱敏等技术进行场景化的技术改良,形成贯穿政务数据流动各环节的追踪溯源技术及落地实践方法,包括数据打标、数据染色、数据操作日志关联分析等.最后,以某政府核心节点网络环境为例,进行应用实践研究,达到成功追溯数据泄露出口和数据访问传输全链条证据链的效果,较好地提升了数据安全事件溯源效率和精准度.

Along with the national digital government strategic layout's continuous advancement,in order to give full play to the benefits of big data aggregation and analysis,the nodes of digital government deal with a large amount of important data,and the data communication and information sharing among the nodes,and the data security risk is exposed day by day,which brings a great challenge to trace the source of data leakage events.This paper first analyzes the risk scenario of digital government data leakage.Then,based on the domestic and foreign well-known traceability models 7W,ProVOC and so on,the end-to-end traceability model and technical method are proposed.The model is a comprehensive application of the annotation method and the reverse query method.The method is a scenario-based improvement of database watermarking,dynamic desensitization and other technologies,and makes use of big data and association analysis technology,the traceability technology and the landing practice strategy are formed through each link of the service data flow,including data marking,staining,data operation log association analysis.Finally,taking a government core node network environment as an example,the paper carries on the application practice research,and achieves the effect of successfully tracing the evidence chain of data leakage exit and data access transmission chain,it improves the traceability efficiency and accuracy of data security events.