摘要
[目的/意义]全流程数据安全管理在每个行业的信息化、数字化过程中引起重点关注,其中数据运维安全管控是全流程数据安全管理的重要环节之一.[方法/过程]为了防止数据被窃取或被人为破坏,数据运维安全管控需要做到高危操作事前审批、事中敏感数据动态脱敏,并防止非授权导出、事后可审计的闭环管理.[结果/结论]基于内蒙古自治区税务数据运维现状,通过构建统一的数据运维安全管控平台,结合在内蒙古自治区税务局的应用实践,满足"内防窃数"的数据安全要求.
[Purpose/Significance]Currently,data security is a risk that every industry must face in the process of informatization and digitization,and data operation and maintenance security control is one of the important links in the entire process of data security management.[Method/Process]In order to prevent the theft or misoperation of core or important data,data operation and maintenance security control needs to achieve pre approval of high-risk operations,dynamic desensitization of sensitive data during the process,and prevention of unauthorized export,as well as closed-loop management that can be audited afterwards.[Results/Conclusion]This article is mainly based on the current situation of tax data operation and maintenance in Inner Mongolia.By constructing a unified data operation and maintenance security control platform,and discussing its application practice in the Inner Mongolia Autonomous Region Tax Bureau,it aims to achieve the data security requirements of"internal theft prevention".
作者
宋鹤飞
Song Hefei(Inner Mongolia Autonomous Region Tax Service,State Taxation Administration,Inner Mongolia Hohhot 010021)
出处
《网络空间安全》
2024年第3期137-142,共6页
Cyberspace Security
关键词
数据安全
访问控制
安全管控
运维安全
数据库运维
data security
access control
security control
operational security
database Q&M
作者简介
宋鹤飞(1980-),男,汉族,内蒙古兴安盟人,内蒙古大学计算机学院,本科,国家税务总局内蒙古自治区税务局信息中心,高级工程师,主要研究方向和关注领域:大数据技术、数据库技术、数据挖掘和数据安全。
