Overview

Scenarios

Sensitive data encompasses personal information, passwords, cryptographic keys, confidential images, and other high-value assets. Such data is commonly stored in various formats within OBS buckets. In the event of a data breach, organizations can incur substantial financial loss and suffer significant reputational damage. OBS is integrated with DSC. After you authorize data source identification, DSC quickly detects and locates sensitive data among massive data stored in OBS, performs classification and grading on the sensitive data and displays the result in a unified manner. Meanwhile, DSC traces the sensitive data usage, protects and audits data based on predefined security policies, and provides risk assessment, response, and refined file access control. In this way, you can better detect, locate, and protect sensitive data in OBS.

Advantages

• Visualization: Sensitive data identification results are visualized, giving enterprises a clear view of their data security status.
  • Data access monitoring and exception audit are traceable, reducing enterprise data security risks.
  • Improve the security transparency of enterprise data assets and enhance enterprise data governance capabilities.
  • Reduce data security O&M costs and provide powerful data support for enterprises to establish data security policies.
• Intelligence: Leveraging big data and machine learning capabilities, this solution uses intelligent algorithms to effectively identify and monitor sensitive data and high-risk activities, such as abnormal data access and potential data leakage risks, and provides rectification suggestions.
  • Provide customized sensitive data identification capabilities for customers to customize identification standards, achieving accurate identification and efficient protection.
  • Summarize complex data formats and content into a unified data risk model, and present the model in a standardized manner, defending enterprises' key data assets.

Resource and Cost Planning

The following table describes the resource and cost planning in this best practice.

Protection Solutions for Typical Scenarios

• Detecting and Handling Abnormal AKs/SKs in an OBS Bucket
• Checking OBS Security Configuration Compliance
• Auditing and Generating Alarms for OBS Operation Risks
• Masking ID Numbers in ID Card Images Stored in OBS