Research on the security governance system for the circulation of government data facing the risk of illegal export

Unauthorized data export is a significant data security risk in the circulation of government data. From a meso-level practical perspective, this study examines the storage and distribution of government data within government information systems. It identifies six data export and circulation channe...

Full description

Saved in:
Bibliographic Details
Main Authors: WANG Yue, Mo Lijuan, SU Na
Format: Article
Language:zho
Published: China InfoCom Media Group 2024-11-01
Series:大数据
Subjects:
Online Access:http://www.j-bigdataresearch.com.cn/thesisDetails#10.11959/j.issn.2096-0271.2024062
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Unauthorized data export is a significant data security risk in the circulation of government data. From a meso-level practical perspective, this study examines the storage and distribution of government data within government information systems. It identifies six data export and circulation channels in practice: front-end, back-end, sharing, openness, operation, and attack. Furthermore, it clarifies six typical data circulation methods that require special attention: front-end functional export, front-end interface export, back-end synchronized export, back-end operational export, shared data export, and operational data export. In addition, the study systematically analyzes security compliance requirements and the specific manifestations of major threats, including external attacks, internal threats, system vulnerabilities, and data breaches by partners. Based on this analysis, it proposes countermeasures focusing on six aspects: data classification and grading control, outsourcing and data usage management, granular permission management, control over export scale and anomaly detection, leakage prevention and traceback control, and security audits for data exports. Building on these findings, the study introduces a security governance framework for government data circulation, which encompasses three key elements: management implementation, technical protection, and operational execution. The framework effectively mitigates the significant risk posed by unauthorized data exports and provide reference for the security governance of the circulation of government data.
ISSN:2096-0271