【摘要】：數(shù)據(jù)脫敏,是指對數(shù)據(jù)中包含的一些涉及機(jī)密或隱私的敏感信息進(jìn)行特殊處理,以達(dá)到保護(hù)私密及隱私信息不被惡意攻擊者非法獲取的目的。保形加密是眾多數(shù)據(jù)脫敏技術(shù)的一種,但其具有保持原始數(shù)據(jù)格式不變的重要優(yōu)勢,從而在一定程度上對上層應(yīng)用透明。隨著大數(shù)據(jù)時(shí)代的到來以及Hadoop平臺的廣泛應(yīng)用,傳統(tǒng)的基于關(guān)系型數(shù)據(jù)庫的數(shù)據(jù)脫敏技術(shù)已不能滿足實(shí)際的生產(chǎn)需要。針對Hadoop大數(shù)據(jù)平臺實(shí)現(xiàn)了一種基于保形加密的數(shù)據(jù)脫敏系統(tǒng),支持對多種數(shù)據(jù)存儲格式以及純數(shù)字、純字母或數(shù)字—字母混合等多種數(shù)據(jù)類型敏感數(shù)據(jù)的加密脫敏處理。然后對3種不同的實(shí)現(xiàn)方式進(jìn)行了探討,并開展了一系列實(shí)驗(yàn)對系統(tǒng)的加密脫敏性能進(jìn)行詳細(xì)的評估比較。
[Abstract]:Data desensitization refers to the special processing of some sensitive information related to confidentiality or privacy contained in the data in order to protect privacy and privacy information from being illegally obtained by malicious attackers. Conformal encryption is one of the many desensitization techniques, but it has the important advantage of keeping the original data format unchanged, so it is transparent to the upper layer to some extent. With the arrival of big data era and the wide application of Hadoop platform, the traditional data desensitization technology based on relational database can not meet the actual production needs. A data desensitization system based on conformal encryption is implemented for Hadoop big data platform. It supports the encryption and desensitization of various data storage formats and sensitive data such as pure numbers, pure letters or mixed letters. Then, three different realization methods are discussed, and a series of experiments are carried out to evaluate and compare the encryption and desensitization performance of the system in detail.
【作者單位】： 北京啟明星辰信息安全技術(shù)有限公司;北京郵電大學(xué);
【分類號】：TP309
，

本文編號：2145526