Sensitive data identification method and apparatus, device, and computer storage medium

A sensitive data identification method, comprising:

• obtaining data to be identified of a target industry;
• searching for a sensitive data rule matching the data to be identified in a sensitive data rule library corresponding to the target industry, wherein the sensitive data rule library comprises a plurality of sensitive data rules mined from a data security specification file of the target industry by using a text mining technology;
• determining sensitive information of the data to be identified according to the sensitive data rule matching the data to be identified in the sensitive data rule library;
• wherein before the searching for the sensitive data rule matching the data to be identified in the sensitive data rule library corresponding to the target industry, the method further comprises:
• obtaining the data security specification file of the target industry;
• mining the plurality of sensitive data rules from the data security specification file by using the text mining technology, wherein each of the sensitive data rules comprises parameter values of following parameters:
• a rule name, a sensitive classification, a sensitivity level, a feature item, a sensitive word and a keyword;
• the feature item comprises following parameters:
• a feature item name, a regular expression for identifying the feature item, a dictionary and a checksum;
• combining the plurality of sensitive data rules into the sensitive data rule library corresponding to the target industry;
• combining the parameters comprised by feature items in the sensitive data rule library into a feature item library corresponding to the sensitive data rule library;
• wherein the searching for the sensitive data rule matching the data to be identified in the sensitive data rule library corresponding to the target industry, comprises:
• obtaining structured data from the data to be identified;
• extracting a field name to be identified in the structured data and data corresponding to the field name;
• searching for a sensitive data rule whose keyword matches the field name from the sensitive data rule library as a first sensitive data rule;
• in response to finding the first sensitive data rule from the sensitive data rule library, determining whether a first feature item matches the data corresponding to the field name according to a regular expression and/or a dictionary preset in the first feature item, wherein the first feature item is a feature item of the first sensitive data rule;
• in response to the first feature item matching the data corresponding to the field name, determining that the first sensitive data rule is a sensitive data rule matching the structured data.