Customers or enterprises have a large amount of sensitive data assets. Leaks of the sensitive data assets can lead to significant financial losses. Data Management (DMS) allows you to use digital watermarks to resolve the preceding issue. You can add visible and invisible watermarks on web pages to enhance data security. This feature is supported by the security team and policy team of Alibaba Cloud and provides high security and robustness.

Prerequisites

You are a DMS administrator.

Overview

Digital watermarks are typically used to protect copyright, prevent data leaks, raise the security awareness of employees, and warn of risks.

After you enable digital watermarks, DMS adds visible and invisible watermarks on the user interface (UI) of the DMS console to ensure data security.
  • Visible watermarks: the watermarks that appear on the medium where data is provided. By default, visible watermarks are identical and light-colored texts with a diagonal layout. For example, for web pages on the corporate intranet, the text of each visible watermark can be the name and ID of the current employee who is viewing the web pages. For documents that are externally provided, the text of each visible watermark can be the signature of an enterprise.
    In DMS, each visible watermark consists of a username and a four-digit ID that is randomly generated, as shown in the following figure.An example of visible watermarks
  • Invisible watermarks: the watermarks that are hidden inside the medium where data is provided. These watermarks are developed by the security team of Alibaba Cloud. You can use invisible watermarks in scenarios such as data leak tracing.

    If you want to use invisible watermarks to trace data leaks, choose Help > Human Services in the top navigation bar. Then, contact the support group for help.

Enable digital watermarks

  1. Log on to the DMS console V5.0.
    Note To switch to the previous version of the DMS console, click the 5租户头像 icon in the lower-right corner of the page. For more information, see Switch to the previous version of the DMS console.
  2. In the top navigation bar, choose System Management > Configuration.
    Configuration
  3. On the Configuration page, find the configuration item for digital watermarks and click Change in the Actions column.
  4. In the Change Parameter Configuration dialog box, set the value to Y in the Value field.
    Note If you want to disable digital watermarks, set the value to N.
  5. Click Confirm Change.
    After the setting is complete, refresh the page. It takes about 30s for the setting to take effect.

Data leak tracing and accountability

Assume that a data leak occurs and the leaked data contains visible watermarks. To find the user who is responsible for the data leak, you can use the text of visible watermarks to search for the user on the User page of the DMS console. For more information, see Manage users. If you cannot find the user who is responsible for the data leak based on visible watermarks, you can obtain invisible watermarks by performing the following steps: Log on to the DMS console. Choose Help > Human Services in the top navigation bar. Then, contact the support group for help.