当前位置:网站首页>Significance and measures of source code confidentiality
Significance and measures of source code confidentiality
2022-07-07 03:15:00 【Cnsidna. No.1】
Why keep source code confidential
Various embedded R & D and platform software R & D industries , Each has its own core data and core documents , User data and other sensitive information , These information data have the following commonalities :
It belongs to the core confidential information , In case of leakage, it will have a bad impact on
There are many types of core data , Source code data , Employees have high computer skills
A lot of data is in the business system , It's not a document
If you don't control , Designers and users can easily copy the data through various ways , Cause leakage .
Common secret related ways for R & D personnel
Because R & D personnel are more proficient in computers than ordinary office personnel , In addition to the common network , mail ,U disc ,QQ And other data diffusion methods , There are many other methods that are very easy for developers ( Not listed completely ):
Physical method :
Network cable direct connection , Unplug the network cable from the wall , Then connect directly to an uncontrolled computer ;
winPE start-up , Via CD or U Discoid winPE start-up , Even directly ISO The image starts .
virtual machine , Through installation VMWare virtual machine , Use peripherals in the virtual machine U disc , The Internet .
Other uncontrolled computers , That is, copy the data to other uncontrolled computers in the network , transit
Upload online , By building an upload server on the public network , Bypass Internet Behavior Management
Data distortion :
Write a console program , Print the code to DOS On the console, and then save the screen information as ;
Write the code to Log Log file , Or write code to shared memory , Then another program reads away .
Write interprocess communication program , Pass the code through socket, news ,LPC,COM,mutex, Shear plate , Pipeline and other interprocess communication methods , Transfer to send the data ;
adopt IIS/Tomcat etc. web The parser transfers , Publish the code data as a web page , Then browse the browser and save as , Or just write txt box , Copy all the code during initialization ;
Peripheral transfer
For embedded development scenarios , You can use the serial port ,U mouth , The network port burns the code to the equipment and leaks the secret
SDC Sandbox anti disclosure software
Developed by shenxinda SDC Sandbox leak proof products , Adopt kernel defense in depth , It is a driver level anti disclosure Software . Do not encrypt files , A sandbox is like a container , The container contains our confidential information . The documents we work on are all in sandboxes . The sandbox is completely isolated from ordinary computers . You might ask , What if I want to access the Internet , All programs to access the Internet are launched from the tray , Such as browser , Chat software, etc .SDC The sandbox is divided into the following parts : The management end , Confidential end , Documents are sent out , client .
The management end : Sandbox Control Center , Control all clients . The control of the client covers all aspects . Let me give you a few control functions : Reverse screenshot When someone wants to view some confidential information of the company remotely to the employee's computer ,SDC The client will control the remote software , Remote people see a black screen . But the computers on the staff side are in normal use . If you can control, you can let go . clipboard In sandbox mode, employees want to copy and paste company data such as files to the Internet through the clipboard ,SDC Sandbox is controlled , You can control the maximum number of clipping words .
Confidential end : Escort the server , Ordinary computers do not have access to confidential servers . Only sandbox computers can access , Do not encrypt the company's data , Protect data to the greatest extent .
client : Normal mode and sandbox mode . All software installation should be in sandbox mode . Work must be in sandbox mode , Because all the working data are on the encrypted disk , Sandbox can only be accessed in encrypted mode . In sandbox mode, it is isolated from the outside world . To access the Internet, only programs launched from the tray can , And follow the principle of only getting in and not getting out , Can get files from the Internet to the sandbox computer , However, to send documents from this machine to the Internet, you have to go through document approval .
Documents are sent out : A file distribution system is installed on a computer . The of this computer ip That is, the address where the document is sent out . Each sandbox employee matches an account number for sending out files . The specific approval method is not cumbersome here .
边栏推荐
- 商城商品的知识图谱构建
- 尚硅谷JVM-第一章 类加载子系统
- Laravel php artisan 自动生成Model+Migrate+Controller 命令大全
- SQL中删除数据
- 【基于 RT-Thread Studio的CPK-RA6M4 开发板环境搭建】
- input_delay
- 从0开始创建小程序
- Jerry's question about DAC output power [chapter]
- OC, OD, push-pull explanation of hardware
- Summary of research status of inertial navigation calibration at home and abroad (abridged version)
猜你喜欢
变量、流程控制与游标(MySQL)
Detailed explanation of 19 dimensional integrated navigation module sinsgps in psins (time synchronization part)
Use of promise in ES6
你知道电子招标最突出的5大好处有哪些吗?
杰理之播内置 flash 提示音控制播放暂停【篇】
Another million qubits! Israel optical quantum start-up company completed $15million financing
【安全的办公和生产力应用程序】上海道宁为您提供ONLYOFFICE下载、试用、教程
2022 spring recruitment begins, and a collection of 10000 word interview questions will help you
ERROR: Could not find a version that satisfies the requirement xxxxx (from versions: none)解决办法
The solution of unable to create servlet file after idea restart
随机推荐
Oracle connection pool is not used for a long time, and the connection fails
2022 spring recruitment begins, and a collection of 10000 word interview questions will help you
A complete tutorial for getting started with redis: AOF persistence
How-PIL-to-Tensor
Babbitt | metauniverse daily must read: is IP authorization the way to break the circle of NFT? What are the difficulties? How should holder choose the cooperation platform
新标杆!智慧化社会治理
Jericho turns on the display icon of the classic Bluetooth hid mobile phone to set the keyboard [chapter]
When you go to the toilet, you can clearly explain the three Scheduling Strategies of scheduled tasks
应用程序启动速度的优化
Leetcode 77: combination
简单冒泡排序
Optimization of application startup speed
uniapp适配问题
知识图谱构建全流程
Redis getting started complete tutorial: client management
Lavel PHP artisan automatically generates a complete set of model+migrate+controller commands
HMS Core 机器学习服务打造同传翻译新“声”态,AI让国际交流更顺畅
[secretly kill little partner pytorch20 days] - [Day1] - [example of structured data modeling process]
leetcode
The whole process of knowledge map construction