Lawyer Cheng Jiandu demonstrates an end‑to‑end AI‑assisted litigation process for an equipment sale dispute, showing how AI can organize materials, verify facts, perform multi‑model checks, and generate draft documents while the lawyer retains ultimate decision‑making and oversight.
A hurried snapshot‑sharing command set public=true, unintentionally exposing customer data to all tenants, leading to a panic‑filled rollback, a painful post‑mortem, and a series of hard‑earned lessons about avoiding manual high‑risk operations, enforcing audit controls, and demanding productized UI for cloud infrastructure tasks.
Anthropic's Claude Tag embeds a constantly‑online AI teammate directly into Slack channels, prompting a shift from ad‑hoc queries to proactive assistance while raising enterprise concerns about data residency, permission granularity, cost predictability, and cultural acceptance.
The article breaks down data governance into four essential pillars—data standards, data quality, data security, and metadata management—illustrating why each is critical, how they interrelate, and practical steps enterprises can take to embed them into data pipelines for trustworthy, secure, and discoverable analytics.
The article analyzes Tianyi Cloud's transition from labor‑intensive cloud service handling to an AI‑driven intelligent assistant, detailing the business challenges, the architecture that couples AI, data, and business middle platforms, and the measurable efficiency gains achieved through model‑based automation.
On June 18, 2026, the People's Bank of China’s Jiangsu branch announced a historic ¥7.21 million fine against Suzhou Bank for eleven breaches spanning network security, data protection, anti‑money‑laundering, and other regulatory areas, highlighting a stark gap between the bank’s proclaimed compliance framework and regulator enforcement.
Many enterprises assume that deploying AI inside their own network saves money and protects data, but a detailed total‑ownership‑cost analysis shows on‑premise solutions cost three to five times more than external APIs, incur hidden hardware, electricity, and staffing expenses, deliver lower performance, and are best replaced by a hybrid architecture.
The article explains how NVIDIA’s AI‑Q Blueprint packages a full deep‑research pipeline into a portable Agent Skill, letting developers add secure, on‑premise research capabilities to existing agent frameworks with minimal code while keeping sensitive enterprise data local.
The article analyses the structural mismatch between banks' demand for instant data‑driven decisions and their legacy, component‑heavy architectures, then details how SelectDB’s high‑performance, unified MPP engine, schema‑change agility, and financial‑grade security enable a real‑time data‑warehouse platform that supports diverse banking scenarios from dashboards to fraud detection.
The article argues that data leaks stem from a missing trust architecture rather than technical lapses, and outlines how CIOs should lead zero‑trust data governance through classification, dynamic access control, continuous verification, and cultural change.
In September 2024, a Beijing algorithm engineer illegally accessed his company's server cluster, executed a notorious delete command that erased over 89 TB of AI training data and 3D model assets, causing system paralysis and more than 200,000 yuan in losses, and was sentenced to five years and ten months in prison for destroying a computer information system.
On April 27, 2026, China’s National Development and Reform Commission announced a prohibition on Meta’s over‑$2 billion acquisition of Manus, a leading AI agent platform, citing security concerns over key technology, data safety and industrial competitiveness.
This article explains why passive defenses no longer suffice, defines data security governance as an organizational management discipline, and walks through a four‑step process—asset inventory, classification, control rules, and continuous monitoring—supported by six core security technologies.
In April 2026, the People's Bank of China Xinjiang branch fined Hami City Commercial Bank 3.836 million yuan for multiple regulatory breaches, including cybersecurity and data‑security violations, and also fined two of its technology staff members, illustrating a growing trend of dual penalties for banks and their tech personnel in China.
Discover six quirky yet practical Windows Terminal commands—from visualizing directory trees and monitoring network connections to securely wiping free space, tracing routes, fetching jokes via curl, and enabling speech synthesis—each explained with usage tips, parameters, and real‑world examples to boost your Windows productivity.
This article presents a practical CTO decision checklist that distinguishes five critical areas requiring direct oversight—architecture, data security, AI strategy, talent ladder, and technical debt—and four domains to delegate, using a decision‑matrix framework and 2026 technology trends to guide leaders.
Xiaomi Miclaw, an AI agent built on the MiMo large model, launches a limited closed beta to demonstrate system‑level tool access, multi‑turn context management, IoT ecosystem integration, and self‑evolution capabilities while emphasizing data security and user‑controlled permissions.
After a board meeting where investors bombarded me with seven tough questions about ROI, system stability, AI impact, delivery speed, data breaches, team output, and long‑term strategy, I realized that a CTO must translate technical decisions into clear business value and earn stakeholder trust.
The new “Automotive Data Outbound Security Guidelines (2026)” issued by MIIT and other ministries seeks to balance data security with cross‑border flow, defining a two‑layer demand, detailing data categories, assessment, contracts, certification, and protection measures, and signalling a massive market opportunity for data‑security services in the automotive industry.
This article reviews the current state, feasibility, industry adoption, concrete deployment scenarios, and future directions of applying large language models to data security, covering technical challenges, architectural designs, prompt engineering, privacy‑preserving techniques, and practical case studies.
The article shares a practical roadmap for building a data governance framework, covering data standards, metadata management, master data management, data quality, security, and asset management, with step‑by‑step methods, real‑world examples, and tools to help teams align definitions, automate checks, and protect sensitive information.
The first national medical AI data security and privacy standard, backed by the National Health Commission and industry leaders, outlines a full‑lifecycle risk‑control framework and calls on hospitals, AI firms, regulators and legal experts to join its drafting process.
The article explains that effective data security governance requires a four‑layer framework—facility, storage, control, and application—coordinated across management, business, and IT teams, illustrating common pitfalls with real‑world examples and practical safeguards.
Many enterprises spend heavily on cloud services yet see little efficiency gain because they misunderstand cloud computing’s true value, select the wrong deployment model, or ignore key pitfalls; this article explains core concepts, selection criteria, benefits, real‑world use cases, and common mistakes to avoid.
Major tech firms including ByteDance, Microsoft, and Amazon are banning the AI coding assistant Cursor over concerns that it uploads proprietary code to cloud models, posing data leakage and potential remote control risks, highlighting a broader industry shift from efficiency‑driven AI tools to security‑first policies.
The article explains why treating data as an asset matters, distinguishes data asset management from traditional data governance, and outlines four practical steps—inventory, standardization, quality & security, and value realization—to turn raw data into a strategic business resource.
The article explains what a data dictionary is, why it is essential for collaboration, clarity, and security, and provides a step‑by‑step guide—including examples of data items, structures, flows, storage, and processing—to help teams create and maintain effective dictionaries.
The article explains why data is a critical asset, outlines the severe consequences of data breaches, and provides a step‑by‑step framework for classifying and grading data to enable precise protection, efficient resource allocation, and regulatory compliance.
The IEEE 3169‑2025 standard, led by Ant Group, introduces a unified five‑level security grading framework for privacy‑preserving computation across technologies like MPC, federated learning and TEEs, detailing attack‑defense effectiveness, information leakage categories, and additional metrics to guide secure data‑flow implementations.
QR codes, evolving from simple barcodes, now serve as a universal bridge between the physical and digital worlds, enabling rapid data capture, secure transactions, and massive industrial tracking, while their design, error correction, and standards ensure reliability across billions of daily scans worldwide.
This article examines why small‑and‑medium businesses consider cloud‑based inventory solutions, outlines their key benefits such as real‑time data sharing and finance‑business integration, highlights risks like data security and limited customization, and provides practical criteria for deciding whether a cloud inventory system fits your company.
The article recounts how a social‑app team faced compliance rejection, realized the risks of storing passwords, phone numbers, IDs in plain text, and then built a pragmatic encryption‑at‑rest solution that balances security, queryability, and operational simplicity.
This article provides a comprehensive overview of differential privacy, covering its mathematical foundations, evolution from theory to engineering, classification of privacy mechanisms, practical implementation cases such as Alibaba's Secure Data Hub, and diverse application scenarios across healthcare, finance, location analytics, and energy forecasting.
This article examines why containerizing MySQL often leads to data‑security, performance, state, and resource‑isolation problems, outlines five key drawbacks of running MySQL in Docker, and explains the scenarios where containerization can still be viable.
This document outlines the background, scope, key definitions, and strict data security red lines that all employees must adhere to, including prohibitions on bypassing security measures, unauthorized data use, external disclosures, cross‑border transfers, and requirements for handling sensitive information.
Private Set Operations (PSO) enable multiple parties to perform set intersections, unions, and related computations on encrypted data, preserving privacy through cryptographic techniques such as public‑key encryption, oblivious transfer, and garbled circuits, and are applied across advertising, finance, healthcare, and government for secure data collaboration.
The Model Context Protocol (MCP) is an open‑source interface that standardizes how large language models interact with external data sources and tools, offering a USB‑C‑like universal connector for AI applications, with built‑in session management, security, and flexible HTTP/SSE transport for seamless real‑world integration.
The article analyzes why running MySQL in Docker containers can cause data‑security risks, performance bottlenecks, state management problems, and insufficient resource isolation, while also outlining scenarios where containerization might still be viable.
This article details how a Southeast Asian tech giant migrated from Google BigQuery to Alibaba Cloud MaxCompute, redesigning its permission architecture with multi‑level access control, namespace‑based hierarchies, role inheritance, policy‑tag driven dynamic data masking, and cross‑account user management to meet strict security and compliance requirements.
This article introduces the comprehensive design and evolution of a unified metadata lineage platform for big data, covering background, data processing chain, lineage models, system architecture, quality metrics, application scenarios, and future plans to enhance data governance, quality, and security.
The CCF‑Ant Research Fund 2025, now open for its first batch, invites global university and institute researchers to apply by August 25 2025 for up to 50 projects spanning data security, hardware‑software co‑design, supercomputing, and artificial intelligence, with detailed topics, eligibility rules, and submission channels provided.
This article explains why encrypting data transmission is essential, and demonstrates three PHP-based methods—using HTTPS, symmetric encryption (e.g., AES), and asymmetric encryption with OpenSSL—to protect communication, along with sample code and key management tips.
Huolala, a major internet freight platform, outlines its multi‑layered data security compliance system—covering national standards, industry regulations, organizational structures, technical safeguards, lifecycle management, incident response, audits, and AI‑driven maturity models—to ensure robust protection of personal and critical business data.
This article examines how HuoLala, a major internet freight platform, constructs a comprehensive data security compliance system that aligns with national standards, industry regulations, AI‑assisted processes, certification requirements, and a continuous PDCA improvement cycle.
Easysearch, developed by INFINI Labs as a domestically‑optimized replacement for Elasticsearch 7.10.2, offers high compatibility, enhanced Chinese processing, reduced disk usage, built‑in security, and compliance with Chinese trust‑platform standards, making it a cost‑effective, low‑risk solution for tender‑stage search and analytics.
The People's Bank of China has issued a comprehensive Data Security Management Measures, effective June 30, 2025, outlining classification, protection, risk monitoring, incident response, and legal responsibilities for all data processors handling business‑domain data.
The SecretFlow open‑source community and Chengdu Smart City Research Institute co‑host a deep‑tech meetup in Chengdu, featuring leading experts from Ant Group, UESTC, and industry partners who will explore privacy‑computing principles, SPU technology, federated learning, and real‑world financial and governmental use cases through talks and hands‑on workshops.
This article explains why encrypting data transmission is essential, introduces HTTPS, demonstrates how to apply symmetric encryption algorithms like AES in PHP, and shows how to use PHP's OpenSSL extension for asymmetric encryption, providing practical code examples and key‑management tips.
The article explains that data governance is a systematic combination of mechanisms, processes, platforms and capabilities focused on data quality, outlines an eight‑step quality workflow, defines eight quality dimensions, describes six concrete business values, and compares governance with the data middle‑platform concept.
Integrating large language models with the open‑standard Model Context Protocol enables direct access to file systems, databases, and APIs, unlocking use cases such as automated file management, intelligent data analysis, personalized content generation, and task automation, while also raising security, privacy, and maturity challenges for future AI‑human collaboration.
The article examines why deploying MySQL in Docker containers can lead to data‑security, performance, state‑management and resource‑isolation problems, outlines mitigation strategies, discusses scenarios where containerization is feasible, and concludes with a call for community discussion while also featuring promotional material for AI‑related services.
The article explains why deploying MySQL in Docker containers can lead to data loss, performance degradation, and insufficient resource isolation, while also offering strategies and scenarios where containerizing MySQL may still be feasible.
Released by the NDRC, National Data Bureau and MIIT, the 'National Data Infrastructure Construction Guideline' outlines the concept, vision, functions, and architecture of a nationwide data infrastructure, detailing four key pillars—data flow, computing, network support, and security—and sets phased development goals through 2029.
This article explains how to secure PHP data transmission using HTTPS, symmetric encryption (AES, DES, 3DES) and asymmetric encryption with OpenSSL, providing code examples and key management advice to protect confidentiality, integrity, and prevent man‑in‑the‑middle attacks.
The article outlines several reasons why running MySQL in Docker containers is problematic—data security, performance bottlenecks, statefulness, and resource isolation—while also promoting a ChatGPT community and related services.
The Jiangxi "Secure Computing Industry Summit" convened on December 17, announcing a collaborative "Secure Computing Industry Chain Co‑construction Action" that unites leading institutions to promote privacy‑preserving computation technologies across finance, healthcare, and public data, aiming to safely unlock the value of data assets.
This article examines data as a key production factor, analyzes the data‑element ecosystem, explains data‑trust concepts and solutions, reviews relevant policies and market structures, and presents domestic and international practices and case studies illustrating how data trusts can facilitate secure, efficient data circulation and fair benefit distribution.
This article details the design, architecture, and evolution of a self‑developed customer instant‑messaging system, covering its user‑centred philosophy, layered backend structure, technology choices such as WebSocket and Spring WebFlux, and how it solved challenges in gateway design, session storage, message ACK, and queue management to achieve high availability, security, and future‑ready scalability.
This guide walks through why enterprises need to scan and protect sensitive log data, explains the regulatory background, and provides a step‑by‑step implementation on Alibaba Cloud using Data Security Center, Logtail, SPL, Ingest Processors, SDKs, StoreView queries and periodic scans to achieve comprehensive data security and governance.
Huolala’s data team details the evolution of its metadata management platform—covering architecture, stages from early Hive‑ETL to real‑time field‑level lineage, AI‑driven smart search, cost‑governance mechanisms, and security classifications—showcasing practical solutions for data discoverability, efficiency, and protection at scale.
This tutorial explains the fundamentals of data encryption, introduces differential privacy, and guides you through implementing a simple Caesar Cipher encrypt‑and‑decrypt program in Python, complete with code examples, execution instructions, and sample output.
The newly released National Data Standard System Construction Guide outlines a comprehensive framework for data supply, circulation, utilization, and security, emphasizing trusted infrastructure, controlled anonymization, cross‑domain usage control, and unified security assessment to enable safe, efficient data exchange across entities and industries.
This presentation reviews recent research on data security and utilization in the large‑model era, covering privacy‑preserving federated learning, knowledge‑transfer techniques, prototype‑based modeling, multi‑model fusion methods such as FuseGen, and introduces the federated knowledge computing platform FLAIR for both horizontal and vertical federated scenarios.
The article examines why deploying MySQL in Docker containers can be problematic, highlighting data‑security risks, performance bottlenecks, state‑management challenges, and limited resource isolation, while also noting specific scenarios where containerizing MySQL might still be viable.
The second Confidential Computing Forum at CNCC2024, held on October 26 in Hangzhou, gathers leading experts to discuss TEE‑based secure computing, present cutting‑edge research on confidentiality, side‑channel attacks, collaborative trust, and cryptographic applications, and outlines future directions for data security in the digital economy.
From data lifecycle vulnerabilities to inadequate audit coverage, API misconfigurations, weak privileged access, and insufficient encryption, this article outlines twelve common data security risks and their real‑world impacts, helping organizations identify and remediate gaps before breaches occur.
On September 25, Hangzhou announced the nation’s first secret‑computing center, offering end‑to‑end encrypted data storage, processing, and exchange to protect privacy while unlocking the value of big‑data across finance, healthcare, urban governance, commerce, and agriculture.
This article outlines the framework for data element circulation, identifies three major security and compliance challenges in data flow, and presents five practical measures plus a six‑step method for incorporating data assets into financial statements to enhance transparency and value.
This article presents an overview of data security related regulations, outlines the standards for data classification and grading, and showcases industry-specific classification schemes through illustrative diagrams, providing a concise visual guide for implementing data security measures.
This article examines why many enterprises repeatedly suffer data breaches, highlighting common security flaws such as manual permission management, account sharing, lack of least‑privilege, insufficient environment isolation, weak audit logging, and offers practical recommendations to strengthen information security.
This article explores how the rise of massive AI models reshapes data governance, detailing model fundamentals, architectural types, emerging challenges, a five‑domain governance framework, and practical AI‑driven applications for data standards, metadata, quality, and security, while also looking ahead to future trends.
This article reviews the evolution of telephone sales, introduces large model technologies, outlines their integration into intelligent telemarketing workflows, discusses practical implementation methods, challenges, and future trends, and shares insights from industry experts on optimizing AI‑driven sales automation.
At the 2024 China Cryptography Society Cryptographic Chip Academic Conference in Chengdu, Ant Group’s Vice President Wei Tao highlighted the evolution from general to intelligent to secure computing, emphasizing the pivotal role of cryptographic chips in data protection, AI development, and cross‑industry applications while calling for deeper industry‑academia collaboration.
This article explains how data has become a strategic resource, outlines the economic and industrial value of data, differentiates data governance from data security governance, and reviews major data security frameworks and a data‑centric security architecture to guide organizations in protecting their data assets.
At Bilibili, the security team adapted Microsoft’s Security Development Lifecycle by establishing capability practices such as training, threat modeling, secure coding, and component scanning, integrating these processes into development pipelines through dedicated business partners, extending protection to the full data lifecycle, and evolving toward automated DevSecOps with in‑pipeline DAST and a custom vulnerability management platform.
This article explains why encrypting data transmission is essential, then demonstrates three PHP-based methods—enabling HTTPS via SSL/TLS, applying symmetric algorithms such as AES, and using asymmetric encryption with OpenSSL—to protect confidentiality, integrity, and authentication of web communications.
This article outlines the evolution of data security in China, explains why data classification and grading are central to governance, and provides a step‑by‑step framework, principles, implementation details, adjustment triggers, and practical reflections for building effective data protection strategies.
This article explains how a leading insurance technology group leverages large language models to streamline data security compliance, detailing the evolution of data management, key governance challenges, multimodal AI architecture, and practical workflows for policy enforcement, risk monitoring, and asset management.
This article presents Ping An's comprehensive approach to data security compliance, detailing its evolving data management framework, the integration of large‑model AI for classification, risk monitoring, and assessment, and practical insights from a Q&A session on governance and operational challenges.
Data security, centered on the full data lifecycle, demands deep defense against dynamic, continuous risks; by adopting a new operational mindset and a comprehensive metrics system, organizations can achieve greater visibility, control, sustainability, and trustworthiness in protecting their data assets.
The 2024 WAIC Privacy Computing Forum gathered leading experts from academia and industry to discuss how encryption, anonymization, and secure multi‑party computation can protect data privacy while enabling large‑model training and inference, highlighting technical challenges, standards, and emerging solutions across AI, big data, and information security domains.
The article analyzes why deploying MySQL in Docker containers can lead to data‑security, performance, state‑management and resource‑isolation problems, while also outlining scenarios where containerizing MySQL might be feasible and offering practical mitigation strategies.
This presentation by senior data warehouse engineer Huang Luo details Wing Payment’s end‑to‑end data warehouse build, covering background challenges, governance framework, platform architecture, layered modeling, naming standards, asset management, monitoring, and future plans, illustrating how systematic data governance drives cost reduction, efficiency, and security.
The National Data Bureau’s June 12, 2024 Data Lecture Hall focused on privacy computing technology theory and practice, featuring expert talks, emphasizing secure yet usable data sharing to boost the digital economy, and gathering over 110 officials and specialists to discuss challenges and solutions.
The article outlines a comprehensive government data processing security framework—including management, technical, personal information protection, operational, regulatory, and assessment requirements—that offers reusable, practical guidance for data security across various sectors.
This article explains how a data security governance platform protects data across its entire lifecycle—from warehouse construction and collection to application—by implementing fine‑grained permission controls, encryption, masking, authentication, and comprehensive auditing, while addressing scalability, high availability, and regulatory compliance challenges.
The article outlines how data has become a critical production factor, reviews national policies, industry and enterprise challenges, and presents six key trends—including DataOps, DataFabric, and AI‑focused governance—that shape the future of data management and security.
This article explains how Microsoft Dynamics 365 leverages Azure’s multi‑layer security architecture—including zero‑trust, encryption, role‑based access control, identity management, continuous monitoring, and compliance features—to safeguard data against threats and ensure privacy for enterprises adopting cloud ERP solutions.
The Chinese national standard GB/T 43697‑2024 on Data Security Technology – Data Classification and Grading Rules has been officially released, providing universal classification guidelines and set to take effect on October 1 2024, offering essential direction for implementing data classification and grading management.
This article explains how a comprehensive data governance framework—covering data quality, metadata, master data, asset management, security, and standards—can ensure high‑quality, safe, and traceable business data while outlining implementation steps, organizational roles, platform features, and assessment methods.
This article explores the key challenges of building a large‑scale instant‑messaging service—including message reliability, ordering, read‑sync, data security, avalanche effects, and weak‑network handling—and presents practical architectural and algorithmic solutions for each problem.
Data classification and grading, essential components of data security governance, involve defining data categories, assigning sensitivity levels, adhering to national standards, and establishing organizational processes to ensure compliant, secure, and value‑driven data handling across enterprises.
In this interview, 360 Group’s Vice President of Technology Yin Yuhui discusses how the company’s Intelligent Document Cloud leverages large‑model AI to transform enterprise knowledge management, enhance data security, and deliver innovative SaaS and private‑cloud solutions for businesses of all sizes.
This article presents a comprehensive, scenario-driven data governance practice at Guoxin Securities, covering the industry's pain points, a three‑layer governance framework, detailed implementations for data standards, metadata, data quality, data modeling, and data security, and outlines future directions for intelligent and measurable governance.
This article outlines the securities sector's data‑governance background, vision, common pain points, and a comprehensive service‑oriented framework covering data models, quality, standards, metadata, and security, and demonstrates the resulting business value and future outlook.
The IEEE Standards Association has published the world’s first privacy‑computing integrated‑machine standard (IEEE 3156‑2023), highlighting China’s leadership in privacy‑preserving data technologies and outlining hardware, software, and security requirements that aim to foster global adoption and reduce collaboration costs.
This article explores enterprise data security governance, outlining practical methodologies, implementation pathways, and real-world case studies to guide organizations in planning and establishing robust data security governance frameworks while highlighting key challenges, compliance considerations, and measurable outcomes for sustained protection.
The article examines the rapid growth of China's digital economy, the rising demand for secure data circulation, and how Trusted Execution Environments (TEE) are evolving through hardware and software advances, interoperability efforts, and large‑model privacy solutions to address emerging security challenges.
iQIYI's proactive compliance risk disposal platform and full‑lifecycle privacy protection scheme were recognized by MIIT as outstanding cases, showcasing engineering‑driven privacy integration across product development, release, and operation, improving compliance rates, reducing risks, and enhancing user experience while setting industry standards.
This article explains how Python's hashlib and hmac modules can be applied in API automation to compute hashes, generate salted password hashes, create HMACs, verify data integrity, encrypt sensitive information, and produce secure tokens, providing ten practical code examples.
