Design And Implementation Of Information Security Operation Platform Of A Bank

A bank informatization after 30 years development has established the basic framework of the financial data communication network,realized the basic group business data processing and unified management,built up an unified data warehouse&data base platform(data base platform of data warehouse),preliminarilyset upan international-operated informatization bank of IT centralization,digital services,intensive operation and management refinement.As the bank information and systemintegration,information security problem is more outstanding,so the information security must be attached great importance toin the field of organization and management,and put into the bank's overall development strategy.after years of practice,A bank information security system as the bank-widemanagement,has formed information security management framework taking four topics of organization system,system construction,risk managementmeasures and technical measures as the core.By the measures of technology and management,the continuous improvement of information security control and promotion hard control abilityensures the confidentiality,integrity and availability of bank information system and data.However,A bank information security technology system still exists the following problem:lack of an unified global integrity of information security management planning,information security operation situation analysis and unified view of wanda group;incomprehensive information security event monitoring;lack of interdisciplinary active defense,information security threat perception and warning function,and business perspective in the implementation process.So the security systemis not really meet the needs of further business development.In response to the Internet financial information security challenge for the Banks,this article on the base of data mining theory and threat awareness of information security related theory,put forward to establish a set of systematic and comprehensive,dynamic and coherent information security operation center to realize the whole information security operation situation,the unity of the security incident management and disposal,analysis and display.The Center,taking enterprises's business as the core,realizes the safety of the large-scale data mining association,analysis,and effectively,the real-time anomaly detection,and the intelligent safety analysis and threat visualization,forms information security threats situational awareness systemwith intelligent data analysis as the core,and provide s intelligence sharing,security desktop awareness and advanced threat detection analysis,etc.This article,based on clustering analysis algorithm in data mining algorithm,taking the mean of K-MEANS method toclassify and count the electronic document copy records,formed the electronic document copy leak risk model,and designed experiments to verify analysisby using A bank electronic document copy records in A data set as test data.On the basis of the data mining model,this article forms definition of information security platform based on data mining goal,and analysesthe information security requirements according to the needs of the business operation platform,and makes the safe operation of the platform of information system architecture and function design in detail,and then establishes the concrete implementation plan of the information security platform.Finally the designed was realized by system USES Java language and put into production run.The preliminary production run results show that the system has realized the information technology of risk identification,measurement,monitoring and control in the commercial bank,and promote the continuous improvement and perfect of A bank information technology risk management.The first innovation of this article is Study on the information security management system of banks from the perspective of information,Information security operation center is the product of the combination of information security technology and management information system,which provides a new idea for the construction of information security management system;The Second is to proposethe construction of intelligent data analysis as the core of information security operation center system referring to the international information security threat situational awareness theory,and combining with A bank information security work practice;The third point is to establish the data model combining with the practical work of information security of the data mining,and adopting the clustering analysis algorithm to information security leak risk and the data analysis,data model.The research idea and the content of this paper,information security management for domestic Banks,has theoretical guidance and practical reference value.