Abstract: A security gateway for validating ingress traffic and/or a response to the ingress traffic in a computer network, and a method for validating the same. The security gateway includes a proxy server and a gateway agent. The proxy server receives the ingress traffic and/or the response and forwards the ingress traffic and/or the response to the gateway agent. The gateway agent validates the ingress traffic and/or the response as valid ingress traffic and/or valid response or invalid ingress traffic and/or invalid response based on predetermined validation requirements. The proxy server further receives the valid ingress traffic from the gateway agent and forwards the valid ingress traffic to a backend service and/or receives the valid response from the gateway agent and forwards the valid response to a client device or blocks the invalid ingress traffic and/or invalid response.

Abstract: A third party gateway for validating egress traffic in a computer network system is provided. The third party gateway includes a proxy and a gateway agent. The proxy includes a termination proxy and a forward proxy. The proxy is configured to terminate Transport Layer Security communication for the egress traffic. The proxy is further configured to forward the egress traffic to the gateway agent. The gateway agent is configured to validate the egress traffic as valid traffic or invalid traffic based on predetermined validation requirements. The proxy is further configured to receive the valid traffic or the invalid traffic from the gateway agent, and to forward the valid traffic to a destination service or to block the invalid traffic.

Abstract: A third party gateway for validating egress traffic in a computer network system is provided. The third party gateway includes a proxy and a gateway agent. The proxy includes a termination proxy and a forward proxy. The proxy is configured to terminate Transport Layer Security communication for the egress traffic. The proxy is further configured to forward the egress traffic to the gateway agent. The gateway agent is configured to validate the egress traffic as valid traffic or invalid traffic based on predetermined validation requirements. The proxy is further configured to receive the valid traffic or the invalid traffic from the gateway agent, and to forward the valid traffic to a destination service or to block the invalid traffic.

Abstract: Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified in the query request. Personally identifiable information associated with the query request may then be de-pseudonymized. Accordingly, a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request may be generated. The personally identifiable information in the response may be pseudonymized such that the pseudonymized personally identifiable information and data included in the response is provided to a client.

Abstract: Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified in the query request. Personally identifiable information associated with the query request may then be de-pseudonymized. Accordingly, a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request may be generated. The personally identifiable information in the response may be pseudonymized such that the pseudonymized personally identifiable information and data included in the response is provided to a client.

Abstract: According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.

Abstract: According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.

Abstract: According to embodiments of the present disclosure, there is provided a method, apparatus, device, storage medium and program product for log information processing. The method comprises: determining a source of a target log in response to a log query request, wherein the log query request indicates that a target user requests to query the target log; determining a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of a variable item in the target log; and performing, based on service attribute information of the target user, the log desensitization policy and service authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log.

Abstract: Systems and methods directed to providing a data security labeling framework at a first device are described. The system may include a storage area and at least one data labeler. The data labeler may be configured to locate one or more data instances, define one or more security attributes to be used under one or more different contexts, and apply a labeling to the located one or more data instances such that each label provided by the labeler includes or is otherwise associated with a plurality of security attributes.

Abstract: A star-shaped hyperbranched polymer with a triethanolamine core, a carboxylate lateral group and a dithiocarboxylate end group has a formula of N[CH2CH2OCOCH2CH2(COOM)N(CSSM)CH2CH2N(CSSM)2]3, wherein M is Na+, NH4+ or K+. The star-shaped hyperbranched polymer has an effectively stabilization effect on heavy metals in MSWI fly ash. A method thereof for stabilizing is simple, low in dosage, cheap and without secondary pollution. Therefore, heavy metals leaching concentration in fly ash stabilized production is lower than a limit of Chinese national standard. Furthermore, acid and alkali resistance thereof is sufficient, which decreases a long-term pollution risk in natural environment.

Abstract: A star-shaped hyperbranched polymer with a triethanolamine core, a carboxylate lateral group and a dithiocarboxylate end group has a formula of N[CH2CH2OCOCH2CH2(COOM)N(CSSM)CH2CH2N(CSSM)2]3, wherein M is Na+, NH4+ or K+. The star-shaped hyperbranched polymer has an effectively stabilization effect on heavy metals in MSWI fly ash. A method thereof for stabilizing is simple, low in dosage, cheap and without secondary pollution. Therefore, heavy metals leaching concentration in fly ash stabilized production is lower than a limit of Chinese national standard. Furthermore, acid and alkali resistance thereof is sufficient, which decreases a long-term pollution risk in natural environment.