【作者】 杨加； 秦辉东； 李笑难； 任晓霞； 吕洁； 马皓；

【Author】 YANG Jia;QIN Huidong;LI Xiaonan;REN Xiaoxia;LYU Jie;MA Hao;Computer Center,Peking University;

【机构】 北京大学计算中心；

【摘要】 校园网的网络设备和应用系统每天都会产生大量日志,如何防止日志中的敏感信息泄露是需要研究的重要课题。文中结合校园网的实际情况和需求,提出了一种基于网关的校园网日志动态脱敏解决方案,并实现了完整的系统。用户查询日志数据时,其请求经过脱敏网关进行转发。返回的查询结果在经过脱敏网关时会进行实时脱敏处理,以确保对敏感信息的保护。最后,将经过脱敏处理后的结果返回给用户。该方案在保护敏感信息的同时,不对原日志数据进行任何改动。此外,系统还能识别并阻止滥用系统和行为异常的用户,以进一步提升使用数据的安全性。实验表明,该系统可以使用多种脱敏技术对校园网日志敏感数据进行处理,有效地降低了数据的敏感度,达到了数据保护的目的。更多还原

【Abstract】 Campus network devices and application systems generate a large amount of logs every day,and the prevention of sensitive information leakage in these logs is a crucial research topic.This paper proposes a dynamic log desensitization solution for campus networks based on gateways,considering the specific circumstances and demands of campus networks,and implements a comprehensive system.When a user queries log data,their request is forwarded through the desensitization gateway.The returned query results are desensitized in real-time as they pass through the desensitization gateway,ensuring the protection of sensitive information.Finally,the desensitized results are returned to the user.While protecting sensitive information,this solution does not alter the original data.The system is capable of identifying and preventing systen abuse and abnormal user behavior,thereby further enhancing the security of data usage.Experiments show that this system can use various desensitization techniques to process sensitive data in campus network logs,effectively reducing the sensitivity of the data and achieving robust data protection.更多还原