信息安全研究 ›› 2026, Vol. 12 ›› Issue (2): 100-.

• 数字社会的安全、隐私与治理专题 • 上一篇    下一篇

一种基于风险要素的图嵌入数据安全审计方案

王棫可董贵山白健   

  1. (中国电子科技集团公司第三十研究所成都610041)
  • 出版日期:2026-02-07 发布日期:2026-01-28
  • 通讯作者: 王棫可 硕士.主要研究方向为数据安全. 1642880654@qq.com
  • 作者简介:王棫可 硕士.主要研究方向为数据安全. 1642880654@qq.com 董贵山 博士,正高级工程师.主要研究方向为数据安全、区块链、密码学. mountain_dong@163.com 白健 博士研究生,高级工程师.主要研究方向为数据安全、区块链. baij3161@cetcsc.mail.com
  • 基金资助:
    四川省重大科技专项项目(2022ZDZX0038)

A Graphembedded Data Security Audit Scheme Based on Risk Elements

Wang Yuke, Dong Guishan, and Bai Jian   

  1. (The 30th Research Institute of China Electronics Technology Group Corporation, Chengdu 610041)
  • Online:2026-02-07 Published:2026-01-28

摘要: 随着大数据环境下数据安全风险复杂化,现有数据安全审计技术因碎片化特征利用及扩展能力不足,难以实现全生命周期风险覆盖,限制了风险检测效能.因此,提出一种基于风险要素的图嵌入数据安全审计方案(graphembedded data security audit scheme based on risk elements, REGDSA).首先构建含数据属性D(data)、用户特征U(user)、载体环境C(carrier)、操作行为A(action)的安全风险要素空间,实现数据全生命周期风险特征的结构化映射;然后利用图嵌入技术将风险要素映射为低维语义向量,构建跨维度关联模型以实现高效风险检测.通过有效性分析和性能分析验证了该方案的可行性.

关键词: 数据安全审计, 风险要素, 图嵌入, 数据全生命周期, 图模型

Abstract: With the increasing complexity of data security risks in big data environments, existing data security audit technologies are limited by fragmented feature utilization and insufficient scalability, preventing comprehensive lifecycle risk coverage and thereby reducing risk detection efficiency. To address these challenges, a graphembedded data security audit scheme based on risk elements (REGDSA) has been proposed. The scheme first constructs a security risk elements space comprising data attributes (D), user characteristics (U), carrier environment (C), and actions (A), achieving structured mapping of risk features throughout the entire data lifecycle. It then employs graph embedding technology to map these security risk elements into lowdimensional semantic vectors, constructs a crossdimensional association model for integrated analysis, and achieves efficient risk detection. The feasibility of the scheme is validated through effectiveness and performance analysis.

Key words: data security audit, risk elements, graphembedding, data full lifecycle, graph model

中图分类号: