Configuring a Watermark Rule

Scenarios

Data watermarking is widely used in government departments, healthcare agencies, financial institutions, academic institutes, and other organizations. It is generally used for copyright protection and source tracing.

• Data copyright protection: In scenarios where digital works are downloaded or copied for use, and database services — data mining and analysis require providing data to third parties, digital watermarks can be used to clarify copyright ownership in case of disputes.
• Source tracing: Data provided for internal employees or third parties can be injected with watermarks to identify the ownership and remind them of keeping the data secure. In the event of a data leakage, the watermarks can be used to trace the data leakage source and identify the cause.

Prerequisites

You have added an application asset.

Configuring a Watermark Template

Before configuring a user-defined watermark rule, you need to configure a watermark template so that it can be referenced during watermark rule configuration.

1. Log in to the API data security protection web console as user sysadmin.
2. In the navigation pane on the left, choose Security Policies > Watermarks and click the Templates tab.
3. In the upper right corner of the page, click Add.
4. On the Add Template page, configure the watermark template information, as shown in Figure 1.
   Figure 1 Configuring a watermark template
   

5. After the watermark template is configured, click Save.

Configuring a Watermark Rule

Before configuring a watermark rule, ensure that you have added application assets. For details, see Application Services. Ensure that no rules that conflict with the watermark rule are enabled.

1. Log in to the API data security protection web console as user sysadmin.
2. In the navigation pane on the left, choose Security Policies > Watermarks and click the Rules tab.
3. Click Add in the upper right corner of the page.
4. Configure the watermark rule. Figure 2 shows an example.
   Figure 2 Configuring a watermark rule
   

5. Click OK.

Verifying a Watermark Rule

Enter the proxy IP address and port (172.16.35.44:8182) of the application in the address box of the browser on the client to access the application asset. If a text watermark is displayed on the response page, the watermark rule takes effect. Figure 3 shows an example.