通信大数据安全监管平台的设计与实践

Design and Practice of Communication Big Data Security Supervision Platform

面对通信行业大数据应用中的数据安全风险,提出了一套完整的数据安全监管平台方案,优化了用户异常行为审计方法。数据安全监管平台的建设方案包括事前风险评估、内生安全建设、事中监测预警、事后审计溯源共四个重要阶段,包含统一身份管理、数据分类分级管理、数据运维安全管理、数据访问安全管理、特权用户管理五个关键功能,形成了全周期的数据安全监管体系,同时引入了孤立森林算法加强内部用户异常行为的监管审计。

In response to the data security risks in the application of big data in the communications industry,a comprehensive data security supervision platform scheme has been proposed,along with an optimization of the user abnormal behavior audit method.The construction plan of the data security supervision platform includes four important stages:pre-risk assessment,intrinsic security construction,in-process monitoring and early warning,and post-incident audit and traceability.It encompasses five key functions:unified identity management,data classification and grading management,data operation and maintenance security management,data access security management,and privileged user management,forming a full-cycle data security supervision system.Additionally,the isolation forest algorithm is introduced to enhance the supervision and audit of abnormal behavior of internal users.