Sensitive data is a critical asset for any organization, and a data leak can lead to significant financial losses. To help you mitigate this risk, Data Management (DMS) provides a digital watermark feature. You can add both visible and invisible watermarks to the DMS console to enhance your data security. This technology is provided by the Alibaba Cloud security team, ensuring a high level of security and robustness.
Prerequisites
You must have administrator permissions to enable this feature.
How it works
Digital watermarks are commonly used for copyright protection, data leak prevention, and to promote security awareness and risk warnings within an organization.
When you enable the digital watermark feature in DMS, it applies both visible and invisible watermarks across the console to protect your data:
-
Visible watermark: A watermark displayed on the data's surface. It typically appears as light-colored text tiled diagonally across the data. Examples include employee names and IDs on internal web pages or company signatures on external documents.
In Data Management (DMS), a visible watermark consists of a username and a four-digit random ID. In a database query result table, the watermark text, such as
xxx_0434, is displayed as light gray text overlaid on the data rows. -
Invisible watermark: A proprietary digital watermark technology developed by the Alibaba Cloud security team. The watermark information is hidden within the data and is not visible to the naked eye. It is used for data leak tracing and accountability.
To trace an invisible watermark, contact DMS support.
Enable the digital watermark feature
Log in to DMS 5.0.
-
In the top navigation bar, choose .
NoteIf you use the DMS console in simple mode, move the pointer over the
icon in the upper-left corner of the DMS console and choose . -
Find the target parameter and click change in the actions column.
-
In the Change Parameter dialog box, turn on the value switch.
NoteOn:
Y; Off:N. -
Click confirm change.
After you save the settings, refresh the page. The changes take effect in about 30 seconds, enabling both visible and invisible watermarks.
Data leak tracing and accountability
If a data leak occurs, use the text from the visible watermark to find the responsible user on the user management page on the DMS console.