智慧城市解决方法—数据安全治理自动化技术框架

?!?1?目录 目录?.?5?.?6?研?.?6?研?.?6?a)?.?6?b)?.?7?c)?.?8?研?研?.?10?研?.?10?a)?.?10?b)?研?.?10?c)?研?-?够?CDM?.?11?研?研?.?13?a)?研?.?13?b)?研?.?13?c)?研?研?.?14?Gartner?研?Data?Security?Governance?DSG?.?14?a)?Gartner?研?.?14?b)?研?研?.?15?c)?研?.?16?CARTA?研?.?17?a)?CARTA?研?.?17?b)?CARTA?研?.?18?c)?CARTA?研?.?19?研?.?21?研?-?.?22?a)?.?22?b)?.?22?c)?.?22?d)?研?.?22?e)?.?22?2?f)?研?.?22?g)?.?23?h)?.?23?i)?DLP?.?23?j)?.?23?k)?.?23?研?-?.?23?研?-?.?25?a)?研?.?25?b)?.?25?c)?研?.?26?d)?API?研?.?27?e)?研?.?29?f)?-?ITM?.?31?研?-?.?34?a)?.?34?b)?.?34?c)?AWP?Automate?Where?Possible?.?34?研?-?.?35?a)?研?.?35?b)?.?35?c)?.?35?d)?盟?.?36?研?-?研?.?36?研?.?38?研?.?38?a)?.?38?b)?.?38?c)?.?38?d)?.?38?研?.?38?a)?.?38?b)?.?39?3?c)?.?39?.?40?.?41?研?.?41?a)?.?41?b)?.?41?研?去?.?42?研?.?42?a)?务?.?42?b)?尽?.?43?c)?尽?.?43?d)?务?尽?.?44?e)?去?尽?.?44?f)?尽?.?44?g)?副?尽?.?44?h)?副?尽?.?45?i)?副?研?尽?.?45?j)?尽?.?45?4?5?研?研?去?研?研?研?研?研?研?研?研?研?研?研?试?研?研?研?研?研?研?副?研?研?研?研?研?研?研?务?撑?研?研?研?研?撑?撑?研?研?研?够?够?去?够?研?研?研?研?研?6?研?研?研?研?研?研?研?研?研?匹?研?研?务?研?务?去?研?告?匹?研?试?研?IBM?Security?7?2022?研?盟?研?研?435?盟?17?盟?研?副?13%?研?研?副?研?研?a)a)?研?研?2018?研?GDPR?2018?CCPA?2019?研?PDPB?7?2020?研?PDPA?2021?APPI?研?模?2017?6?1?映?研?2021?9?1?2022?2?15?2021?11?1?2022?9?1?研?研?研?研?研?b)b)?研?匹?副?研?研?够?研?研?务?研?研?研?务?研?副?研?名?研?研?研?副?研?IT?务?研?研?研?8?研?研?c)c)?研?研?研?务?研?2020?研?野?12?15?2020-2021?研?10%?剧?研?研?匹?IPS?副?研?副?研?IT?告?研?研?研?研?研?副?副?研?研?IT?映?研?研?研?9?5G?研?Gartner?2018?研?务?去?研?Gartner?2019?8?SASE?Secure?Access?Service?Edge?2010?Forrester?John?Kindervag?ZeroTrust?10?映?研?研?研?root?研?撑?告?SQL?研?研?研?DLP?副?研?副?牌?研?Gartner?2018?研?研?务?研?研?研?研?研?研?研?研?研?研?IT?副?研?研?a)a)?研?模?研?研?研?b)b)?研?研?研?务?研?研?研?研?研?研?研?研?Confidentiality?Confidentiality?研?模?Integrity?模?Integrity?研?Availability?Availability?研?11?研?研?研?研?模?研?c)c)?研?-?够?CDM?研?-?够?CDM?研?副?研?2012?够 Continuous?Diagnostics?&?Mitigation?CDM?CDM?够?够?研?CDM?CDM?“?副?历?”?1?2?3?4?“?副?”?1?2?3?研?4?/?撑?“?副?历?”?研?1?2?3?够?4?5?6?7?12?研?研?研?副?研?研?研?1?研?/?2?研?3?研?4?研?5?研?研?模?研?研?研?研?研?研?模?研?研?研?研?研?研?研?副?研?撑?研?研?研?研?研?研?包?研?研?研?研?研?务?/?研?务?研?研?研?P?P?研?/?/?研?试?P?P?T?T?研?D?研?D?研?13?研?研?研?研?研?研?研?研?研?研?研?告?研?历?研?a)a)?研?研?研?覆?研?研?研?DGI?研?Who?研历?历?When?Where?历?How?历?What?研?研?研?研?研?“?”?“?”?研?研?b)b)?研?研?研 Gartner?研?研?研?研?模?研?映?研?研?务?研?14?副?模?研?研?研?研?务?研?研?研?研?研?研?去?研?c)c)?研?研?研?研?研?研?副?研?研?研?研?研?研?研?研?研?Gartner?Data?Security?Governance?DSG?Gartner?Data?Security?Governance?DSG?研?Data?Security?Governance?DSG?Gartner?Marc-Antoine?Meunier?2017?副?2017?研?The?Eye?of?the?Storm?研?研?a)a)Gartner?研?Gartner?研?Gartner?研?映?副?映?IT?15?研?匹?务?研?研?覆?研?研?研?研?研?研?务?模?研?研?研?研?Gartner?研?Gartner?研?研 Gartner?Chief?Information?Security?Officer?CISO?研?Gartner?研?研?研?研?研?研?研?CARTA?b)b)?研?研?研?研?研?研?副?研?16?研?研?研?研?研?研?研?研?研?研?够?研?研?研?研?研?研?研?研?研?研?研?研?研?研?研?研?研?研?副盟?研?研?研?研?够?研?研?研?撑?研?c)c)?研?研?研?研?副?研?研?务?模?务?IT?研?务?17?IT?研?研?研?研?够?模?研?研?务?研?研?副?研?务?副?告?副?匹?研?务?研?研?CARTA?CARTA?a)a)CARTA?研?CARTA?研?Continuous?Adaptive?Risk?and?Trust?Assessment?CARTA?Gartner?2017?务?CARTA?务?导撑?研?研?研?研?研?研?研?研?研?研?18?CARTA?0-day?IAM?模?研?Gartner?b)b)CARTA?研?CARTA?研?CARTA?研?研?研?研?Gartner?CARTA?研?研?研?CARTA?19?CARTA?研?务?研?研?CARTA?研?DLP?/?/?研?研?研?研?研?副?研?研?研?研?/?研?c)c)CARTA?研?CARTA?研?CARTA?研?务?研?研?研?研?20?撑?21?IT?DevOps?研务?IT?够?务?研?IPS?务?研?研?务?研?研?研?研?研?研?研?研?模?研?研?研?研?研?研?AWP?Automate?Where?Possible?AWP?Automate?Where?Possible?研?研?副?研?DLP?研?DLP?API?研?Unified?Content?Webservice?Inspector?UCWI?API?研?研?研?22?-?-?研?DSAG?研?Gartner?研?研?研?研?研?研?研?a)a)?IP?SMB?NFS?FTP?研?Oracle?SQL?Server?Mysql?PostgreSQL?DB2?研?研?研?b)b)?懈?研?懈?研?研?研?研?c)c)?研?研?懈?研?研?研?研?研?研?研?研?研?d)d)?研?研?研?导?研?研?e)e)?研?研?10?务?2?2?撑?映?研?研?f)f)?研?研?研?研?研?研?DLP?研?研?研?研?研?23?g)g)?研?研?研?研?务?研?h)h)?研?够?研?研?研?研?研?/?研?送?研?研?研?DLP?研?i)i)DLP?DLP?研?DLP?DLP?研?Web?Email?USB?LAN?IM?DLP?NLP?研?OCR?j)j)?研?研?研?研?研?研?研?Word?Excel?PowerPoint?TXT?k)k)?研?UCS?-?-?研?副?研?务?研?研?研?够?24?员 作过程及描述 能（服务和具）输出结果（企业资产）?NFS?SMB?FTP?研?IP?&?Port?研?研?+?研?副?研?CXO?CXO?研?研?研?研?N/A?研?研?研?研?研?研?研?研?研?务?研?DLP/?/?研?研?研?Web?ASWG?ASEG?研?DSG?Endpoints?UCWI?API?API?25?-?-?a)a)?研?研?务?研?Office?PDF?CAD?TXT?CSV?研?副?研?研?研?务?撑?研?务?DLP?研?研?IAM?研?务?够?DLP?务?研?务?研?Web?Web?匹?研?Web?匹?研?务?研?研?导?匹?务?研?CASB?CASB?SaaS?IT?CASB?Web?务?Pad?撑?研?研?模?IAM?IAM?研?研?b)b)?IT?告 IT?研?IT?告?IT?研?/?副?研?研?研?IT?研?研?26?研?DLP?研务?研?研?100?研务?研?研?撑?研?务?研?研?研?研?研?研?研?研?副?研?研?懈务?研?c)c)?研?研?副?研?研?研?研?研?研?研?HTTP?Email?WebService?URL?研?Word?PowerPoint?PDF?研?映?研?研?研?研?研?研?研?研务?研?研?研?研?研?研?研?研?27?研?研?研?务?(?映?)?研?(?)?Word?PowerPoint?PDF?研?研?研?研?研?研?研?研?研?研?研?映?研?映?研?研?映?研?务?研?映?研?务?d)d)API?研?API?研?API?名?务?API?去 Web?API?Web?HTTP?JSON?XML?研?名?匹?API?28?API?研?2018?11?US?Postal?Service?USPS?尽?API 务? 副?6000?API?研?API?去?API?API?映?API?API?试?API?API?研?API?试?API?研?副?研?API?去?API?去?去?API?去?API?务?研?SSL?研?API?29?API?API?务?研?API?Web?务?API?API?API?API?研?务?试?研?研?e)e)?研?研?匹?5G?映?/Pad?Bring?Your?Own?Device?BYOD?映?研?APP?APP?匹?研?APP?研?匹?撑?研?研?研?研?DLP?撑?研?务?APP?Secure?Software?Development?Lifecycle?SSDLC?APP 去?Mobile?Device?Management?MDM?副?告?研?务?APP?30?BYOD?研?MDM?研?研?研?研?研?研?DSG?务覆?DLP?UEBA?CASB?BYOD?够?研?副?研?研?副?研?BYOD?MDM?送?研?副?模?研?盟?研?匹?API?研?研?31?研?MAG?研?研?匹?务?研?iOS/Android/PC/Mac?IM?研?f?-?ITM?f?-?ITM?副?研?研?撑?研?副?研?ITM?研?UCS?DLP?A