基于指纹和Bloom滤波器数据泄漏检测方案.docVIP

基于指纹和Bloom滤波器数据泄漏检测方案 　　摘 要: 　　 　　针对当前的数据防泄漏方案主要依赖在外传数据中进行关键词通用搜索，导致数据流控制不够精细、虚警率较高的问题。首先设计了一种基于白名单的数据防泄漏(DLP)架构，在此基础上，提出了一种基于文件指纹和Bloom滤波器的数据泄露检测算法。该算法通过使用动态规划来计算最优检测位置，最大限度地降低了内存开销，并支持高速部署。仿真实验结果表明，所提算法可以用较低的代价，实现大量数据的在线指纹检测。例如，对1?@TB的文件，该方案只需340?@MB内存就可实现1?B000字节的最差检测延时期望(泄露的长度)。 　　?ス丶?词:数据泄露；云计算；白名单；虚警率；指纹检测；Bloom滤波器 　　 　　?ブ型挤掷嗪?: TP391 　　 　　文献标志码:A 　　英文标题?? 　　 　　Data??leakage detection scheme based on fingerprint and Bloom filters 　　?び⑽淖髡呙? 　　 　　 　　HUANG Weiwen????1??*??, LUO Jia??2 　　?び⑽牡刂?( 　　 　　 　　1.Information Resource Center, Ningbo Polytechnic, Ningbo Zhejiang 315800, China??;???? 　　2.School of Computer Science and Technology, Zhejiang University, Hangzhou Zhejiang 310058, China 　　 　　英文摘要)?? 　　Abstract: 　　Aiming at the problems that the existing Data??Leakage Prevention (DLP) solutions are based on generic search for keywords in outgoing data, and hence severely lack the ability to control data flow at a fine granularity with low false probability. In this paper, an DLP architecture based on the white??listing was firstly designed, which used a white??listing for providing the strong security of data transmission. On this basis, a data leakage detection algorithm by combining document fingerprinting with Bloom filters was proposed. This algorithm computed the optimal locations by using dynamic programming to minimize the memory overhead and enable high??speed implementation. The simulation results show that the proposed algorithm for checking the fingerprints for a large amount of documents at very low cost. For example, for 1?@TB of documents, the proposed solution only requires 340?@MB memory to achieve worst case expected detection lag (i.e. leakage length) of 1?B000?@Bytes. 　　英文关键词??Key words: 　　 　　data??leakage; cloud computing; white??listing; false probability; fingerprint detection; Bloom filter?? 　　0 引言?? 　　数据泄露????［1］??是企业和云服务提供商面临的一个重要安全问题。在2012年，每个月有100多次数据泄露事件发生，有些事件的影响范围达上千万人。虽然采取了防火墙、IPS/IDS(Intrusion Preventio