縣域數據安全治理體系建設與挑戰
網絡安全與數據治理
呂秋云1,2 ，婁肖琦1，任一支1，趙程遙3，張紀林4
1.杭州電子科技大學網絡空間安全學院； 2.杭州電子科技大學平湖數字技術創新研究院有限公司； 3.浙江省大數據發展中心； 4.浙江省數據局
摘要： 縣域數據逐漸成為地方治理和社會發展中不可或缺的要素。近年來，全國各縣級政府積極建設數據管理平臺并探索數據安全治理模式，但是，當前縣域數據安全工作仍然面臨合規性和新技術帶來的挑戰，無法滿足縣域信息系統的安全發展需求。對此，為確保縣域數據安全，推動數據資源的有序開發利用，構建了面向數據全生命周期安全處理的縣域數據安全治理體系，包括數據安全管理制度規范、數據安全技術防護、數據安全運營管理三大子體系。然而，數據安全治理過程是動態的，在當前數據要素化轉型的背景下，縣域數據安全治理能力亟需進一步提升。因此，為幫助縣級政府更好地應對未來數據安全風險，在基于數據要素化本質特征的基礎上，分析了數據分類分級自動化及精準化亟待解決的問題、數據安全治理過程中面臨的數據流動管控及追蹤溯源難以及用戶行為異常檢測誤報率高的挑戰，以期為縣域構建更完善的數據安全治理體系提供參考。
中圖分類號：TP309.2文獻標識碼：ADOI:10.19358/j.issn.2097-1788.2024.08.014
引用格式：呂秋云，婁肖琦，任一支，等.縣域數據安全治理體系建設與挑戰［J］.網絡安全與數據治理，2024，43（8）：82-90.
引用格式：呂秋云，婁肖琦，任一支，等.縣域數據安全治理體系建設與挑戰［J］.網絡安全與數據治理，2024，43（8）：82-90.
County data security governance system construction and challenges
Lv Qiuyun1,2，Lou Xiaoqi1，Ren Yizhi1，Zhao Chengyao3，Zhang Jilin4
1.School of Cyberspace Security, Hangzhou Dianzi University； 2.Pinghu Digital Technology Innovation Research Institute, Hangzhou Dianzi University； 3.Zhejiang Big Data Development Center；4.Zhejiang Provincial Data Bureau
Abstract： County data has gradually become an indispensable element in local governance and social development. In recent years, county governments across the country have actively constructed data management platforms and explored data security governance models, but the current county data security work is still facing challenges posed by compliance and new technologies, and is unable to meet the security development needs of county information systems. In this regard, in order to ensure county data security and promote the orderly development and utilization of data resources, a county data security governance system has been constructed for the secure handling of the entire life cycle of data, including three major subsystems: data security management system specification, data security technology protection, and data security operation and management. However, the process of data security governance is dynamic, and in the context of the current transformation of data elementalization, the county data security governance capability needs to be further improved. Therefore, in order to help county governments better cope with future data security risks, based on the essential characteristics of data factorization, the challenges of data classification and grading automation and precision that need to be solved, the difficulty of data flow control and tracking and tracing, and the high rate of false alarms in detecting anomalies in user behaviors are analyzed with a view to providing references for the construction of a more complete data security governance system for counties.
Key words : data security；county governance；data security governance；data elements；data security capabilities
引言
（無）
本文詳細內容請下載：
http://www.jysgc.com/resource/share/2000006111
作者信息：
呂秋云1,2 ，婁肖琦1，任一支1，趙程遙3，張紀林4
（1.杭州電子科技大學網絡空間安全學院，浙江杭州310018；
2.杭州電子科技大學平湖數字技術創新研究院有限公司，浙江嘉興314299；
3.浙江省大數據發展中心，浙江杭州310007；
4.浙江省數據局，浙江杭州310007）
此內容為AET網站原創，未經授權禁止轉載。