[目的/意义]数据安全风险除数据本身泄密以外,更包括数据关联分析和情报生成与感知后带来的隐性
安全风险。为解决公共数据开放衍生的开源情报与国家安全之间的矛盾,需要实施隐性数据安全风险治理,从而
健全国家数据治理体系、保护国家数据主权。[方法/过程]基于后果主义下的风险管理建立分析框架,梳理出隐性
数据安全风险治理的行为流和认知流。基于对隐性数据安全风险的本体认识,全面分析其表现形式和生成逻辑,
为构建针对性治理机制提供思路。[结果/结论]隐性数据安全风险具有隐蔽性和随机性的样态特征、转移性和扩
散性的运动特征、场景性和累积性的环境特征,基于认知、利益、制度和技术的生成逻辑,在暗数据、数据汇聚、数
据挖掘、数据画像、数据权益、隐私计算等方面表现出安全风险。
[Purpose/significance] In addition to the leakage of data itself, data security risk includes the implicit secu⁃
rity risk brought about by data correlation analysis and intelligence generation and perception. In order to solve the con⁃
tradiction between open source intelligence derived from public data access and national security, it is necessary to im⁃
plement the governance of implicit data security risk, so as to improve the national data governance system and protect
national data sovereignty. [Method/process] An analytical framework is established based on risk management under
consequentialism to sort out the behavioral and cognitive flows of implicit data security risk governance. Based on the
ontological understanding of implicit data security risk, its manifestations and generative logic are comprehensively
sorted out, and targeted governance mechanisms are constructed. [Result/conclusion] Implicit data security risk has
the existential state characteristics of concealment and randomness, the movement characteristics of transferability and
diffusion, and the environmental characteristics of scenario and accumulation. Based on the generative logic of cogni⁃
tion, interest, system, and technology, it exhibits security risks in dark data, data aggregation, data mining, data profil⁃
ing, data rights, and privacy compute.