以保证企业信息资产的安全为目标,基于Karp—Rabin算法,提出了一种新的数据泄漏防御算法。该算法对被防御的数据和欲送出系统的数据进行矩阵求解。生成各自的指纹,并将两者的指纹进行匹配,如果两者的相似度达到预定值则对数据流进行拦截。仿真实验结果表明,这种以指纹模式来匹配文件的数据泄漏防御方法能以较少的资源消耗完成对资源的监控过程,比全文匹配方法具有更高的效率。可以预见,把该算法嵌入相应的监视系统中将能有效地防止企业数据的泄漏。
To ensure the security of enterprises' information, based on the Karp-Rabin' s algorithm, this paper proposed a new algorithm of data leakage prevention. This algorithm generated fingerprints for both the defense data and the data being sent out by solving data matrix, and compares them. If the similarity between them was as high as the expected value, the data flow would be intercepted. Simulation results have shown that this algorithm can complete the resources monitoring process with less resources consumption, and it has higher efficiency than full text matching. It can be foreseen that the algorithm can be deployed in monitoring system to effectively prevent enterprises' data leakage.