信息安全研究 ›› 2021, Vol. 7 ›› Issue (10): 949-.

• • 上一篇    下一篇

数据运营安全在数据主权中的应用研究

王文宇   

  1. (北京数安行科技有限公司,北京  100036)
  • 出版日期:2021-10-09 发布日期:2021-10-09
  • 通讯作者: 王文宇
  • 作者简介:王文宇 硕士,高级工程师,北京数安行科技有限公司,CEO,研究方向为网络空间安全,数据安全,系统工程。 wwy@datsecops.com.cn

Research on Application of DataSecOps in Data Sovereignty

  • Online:2021-10-09 Published:2021-10-09

摘要: 数字化背景下,数据是国家之间、企业之间竞争的核心竞争力,数据流动是当今国内国际发展的常态化趋势,包括国家之间的跨境流动、企业之间的数据开放、企业内部的数据处理以及个人与组织之间的个人信息交互。在数据流动的全流程中,把握数据主权是重中之重。不管是国家层面、企业层面、个人层面,只有掌握数据主权,才能保障国家安全、维护企业利益以及个人的合法权利。数字化转型时期,如何在数据安全层面对数据主权进行保护,是现有技术手段无法解决的难点。通过数据运营安全的研究,在数据流动中内嵌安全属性,以数据本体为核心对象,基于人工智能对数据进行风险评估与合规检查,融合数据沙盒,将数据运营安全技术应用于数据主权保护,从数据安全层面保障数据主权。

关键词: 数据流动, 数据主权, 数据运营安全, 人工智能, 风险评估, 合规检查, 数据沙盒

Abstract:  Under the background of digitization, data has become the core competitiveness of the competition between countries and enterprises, and data flow is the normal trend of domestic and international development, including cross-border flow between countries, data sharing between enterprises, data processing within enterprises, and personal information interaction between individuals and organizations. In the whole process of data flow, it is a top priority to grasp data sovereignty. No matter at the national level, enterprise level or individual level, we can obtain national security, enterprise interests and individual legitimate rights only when we master data sovereignty. In the period of digital transformation, how to protect data sovereignty at the level of data security is a difficult problem that cannot be solved by existing technical means. Through the research on DataSecOps, security attributes are embedded in the data flow and with the data as the core object, risk assessment and compliance check are carried out on data based on AI, and data sandbox is fused, DataSecOps technology is applied to data sovereignty protection, and data sovereignty is guaranteed from the data security level.

Key words: data flow, data sovereignty, DataSecOps, AI, risk assessment, compliance check, data sandbox