Comprehensive security services-Alibaba Finance Cloud-阿里云帮助中心

Alibaba Finance Cloud offers comprehensive security services to help you effectively address various attacks and security vulnerabilities, ensuring your cloud services remain stable and operational.

Comprehensive security service solution

The comprehensive security service solution is the result of years of security technology research by Alibaba Group. It combines the powerful data analytics capabilities of the Alibaba Cloud platform to provide a one-stop security service. This service includes Anti-DDoS, CC attack prevention, Elastic Compute Service (ECS) intrusion prevention, web attack prevention, vulnerability analysis, Threat Detection Service, penetration testing, and content security detection and control. It helps users easily address various attacks and security vulnerabilities and ensures that their cloud services remain stable and operational.

A series of expert services are also available. These services leverage the experience of Alibaba security experts to ensure customer security. To address the growing security threats in the finance industry and meet the unique security needs of Finance Cloud customers, Alibaba Group offers a security assessment service. For the application and business systems of Finance Cloud customers, Alibaba provides a full range of security services, such as security consulting and assessment, application security assessment, security system consulting and planning, and security education and training.

Security solution	Category	Product	Product Positioning
Finance Cloud security consulting and assessment service (SDL security framework)	Security management	Threat Detection Service	Builds a security management system, provides a comprehensive understanding of your security posture, and simplifies security decision-making.
	Network security	Basic DDoS Protection	Provides up to 5 Gb of free DDoS mitigation for ECS and SLB customers.
	Network security	Anti-DDoS Pro and Anti-DDoS Premium	Provides 20 Gb to 300 Gb of DDoS mitigation capability and CC attack prevention for up to 2 million queries per second (QPS).
	Server security	Server Guard	Intercepts brute-force attacks, performs trojan scans, sends alerts for unusual logons, and fixes important vulnerabilities.
	Information security	Content Moderation	Provides real-time monitoring, detection, and blocking of various types of non-compliant content, such as gambling, pornography, and firearms.
	Expert services	Penetration testing service	Simulates cyberattacks to attempt intrusions and assess for major security vulnerabilities or risks.
		Managed server security service	Provides server security assessments and hardening, important vulnerability detection and fixing, and 24/7 security event response.
		Network security expert service	Provides manual monitoring and protection for major events with a 99.9% availability Service-Level Agreement (SLA).
	Security system consulting and assessment services	Security consulting and assessment	A security consulting and assessment service tailored for Finance Cloud customers. It helps customers in the finance industry improve their security level and defend against security risks.
		Application security assessment service	Provides security scanning and hardening solutions for the application systems and mobile clients of Finance Cloud customers. This includes baseline check and hardening solutions, black box security testing and hardening solutions, and white box code auditing and hardening solutions.
		Security system consulting and planning	Provides design and output for security management and technical systems for Finance Cloud customers. It also provides consulting, design, and output for a full set of Security Development Lifecycle (SDL) consulting services.
		Security education and training	Provides training for Finance Cloud customers on topics such as information security awareness, threat modeling, security penetration testing, secure code auditing, security emergency response, and cloud security O&M.
	Third-party products	Bastionhost	Bastionhost primarily addresses issues such as account management, authentication management, permission management, audit management, and automated O&M. It solves IT O&M challenges such as system account reuse, chaotic O&M permissions, and non-transparent O&M procedures.
		SSL VPN and IPsec VPN	VPNs primarily solve the security problem of users remotely accessing sensitive data in private application services. They are the simplest and most secure solution.
		Firewall	A firewall primarily protects an internal network from intrusion by unauthorized users. It establishes a security gateway between user networks and provides features such as access rules, authentication, packet filtering, and fencing.
		OTP two-factor authentication	OTP two-factor authentication primarily solves the problem of server password cracking. The combination of a logon password and a one-time password (OTP) effectively prevents accounts from being compromised.
		Log audit	Collects logs from various assets and performs intelligent association analysis on the logs. It achieves multi-dimensional correlation, has numerous built-in association rules, supports various attack and defense detection and compliance checks, and provides visualization.