Research And Protection For Enterprise Data Based On Cloud Platform

Data protection is always the most important things for enterprise information security. According to some security reports, driven by economic interests, enterprise organizations often suffered from viruses, Trojans, malware attacks. Leading to lots of sensitive information leakage incidents. These incidents often cause huge losses. Nowadays enterprise organizations pay more and more attention to protect sensitive data.There are lots of researches and works in academia and industry. Such as Using firewalls, intrusion detection systems and anti-virus software protect network security and endpoint security. Using file encryption technology protects files. However all these protection technologies still have some drawbacks.In this thesis, we focus on data leakage prevention, The main work and contributions are as follows:1. We summarized the basic concept of data leakage prevention, including the definition and the leakage scenarios. We presented an overview of existing security technologies and analysis its disadvantages.2. We propose CBDPsec prototype, build enterprise private cloud platform based on OpenStack, using VNC remote control software to connect to virtual machines in cloud. Ensure that sensitive files will never leave the private cloud platform.3. Using Trusted Platform Module to enhance the security of VNC and the remote control session authentication security.4. In order to protect sensitive files in CBDPsec system, we implement a file protection module using file system filter driver, Set security policy to protect sensitive files. Experiment shows the protection module can stop all illegal actions, at the same time performance loss is very small.