【作者】 周宁；

【导师】 闫强；

【作者基本信息】 北京邮电大学 ， 工商管理， 2014， 硕士

【摘要】 面对国内运营商中频发的信息泄露事件,传统的数据管理方式已经无法满足复杂流转场景下的安全需求。因此运营商急迫需要对组织内的数据进行梳理,并以此为基础建立一套完整的数据生命流程控制体系。论文通过对组织内敏感数据的存储、流转、访问等场景进行分析和梳理,发现其中存在的安全隐患,从而实现对组织内敏感数据安全的综合防护。论文主要完成工作如下：(1)建立数据生命周期分析模型,并详细描述了数据存储、流转和访问的基本控制措施；(2)分析了国内运营商敏感信息现状,并结合数据生命周期管理模型,提出了运营商的敏感数据安全管理需求；(3)根据运营商对敏感数据管控的需求,设计一套完整的客户敏感信息管理系统实施方案,包括敏感信息分级分类咨询,敏感数据管理平台建设和实施；(4)对国内运营商客户敏感信息管理策略进行评估,对其研究价值及研究意义进行深入地探讨,并对在研究过程中出现的不足之处进行分析。论文解决的核心问题包括：(1)基于数据生命周期,构建客户敏感信息安全管理体系；(2)对国内运营商中敏感信息安全管理的需求和存在问题,提出敏感信息管理项目实施方案；(3)采用大数据处理方式,对敏感信息分级分类、敏感信息访问进行分析,发现敏感数据泄露的隐患。目前该敏感信息管理策略已经在多个省级移动运营商进行了实施,提高了运营商企业对敏感信息的保护能力。更多还原

【Abstract】 With more and more unauthorized’disclosure of data occurred in communication carrier, the traditional data management method couldn’t satisfy the security needs under such complicated circumstances. Therefore carriers are in urgent need to sort out the their data and establish a complete data life cycle control system on this basis. This article aims at providing comprehensive protection for sensitive data security by analyzing and sorting the storage, transfer and access to sensitive data to detect the potential security hazards.This article completes the following work:(1) establish the analyzing model of data life cycle and describe the basic control measures adopted to store, transfer and access data.(2) Analyze the current situation of communication carriers, combining with the data life cycle management model to present the security management need for sensitive data for carriers.(3) According to the requirements of sensitive data control by carriers to design a implementation plan for complete customer sensitive data management system, including inquiries for different classified sensitive data, building and implementing of sensitive data management platform.(4) Evaluate the customer sensitive data management strategy currently adopted by carriers and make relevant further study and analyze their shortcomings.The article mainly solves the following:(1) Establish the customer sensitive data security management system based on data life cycle (2) Present implementation plan for sensitive data management project to meet the needs of carriers to control sensitive data security.(3) Adopt Big Data processing method to analysis sensitive data classification and access and therefore to detect potential disclosure of sensitive data.This sensitive data management strategy has been implemented in many provincial carriers, which improves the protection of sensitive data by carriers.更多还原