A new information leakage defendable model
Shufen Liu, Zhengxiang Zhang, Yaorui Cui, lintao Wu · 2008
In enterprise’s informationization construction, a highly efficient information system inevitably emphasize on the sharing of information, paperless office etc to provide the enterprise information-sharing environment, simultaneously, all data almost can be completely copied in a few minutes, which puts the enterprise information system in high risk, therefore the establishment of an effective and reliable security system has been a top issue to solve the problem of business informationization. But unfortunately, there is not a reasonable solution at present, which can keep the efficiency of the system while protecting the confidentiality of sensitive information. In view of the above-mentioned fact, an intranet information disclosure defendable security model based on both crypt-isolation and log-audit is proposed. This model with both access-audit and encryption method will reasonably control the enterprise staff’s behavior and effectively prevent the enterprise sensitive information from being leaked, intentionally or unintentionally.