View and export reports on database audit status and security risk analysis results-Data Security Center(DSC)-阿里云帮助中心

Report Center displays audit status and security risk analysis results for your database assets through comprehensive, compliance, performance, security operations, and database business and session analysis reports. You can view supported report types and export reports as needed.

Supported report types

Report type	Report name	Description
Comprehensive analysis report	Comprehensive analysis report	Provides a comprehensive analysis of databases from several perspectives: SQL statement execution, session connections, risk events, SQL performance, and sensitive data access.
Compliance analysis reports	Classified Protection compliance self-check report	Checks Classified Protection compliance and analyzes data asset risks based on the data audit requirements of the GB/T 28448-2019 standard (Classified Protection 2.0). The analysis covers abnormal operations, data leaks, vulnerability attacks, SQL injection, risky operations, and custom rules.
	Data Security Law report	Generates a compliance report for your database assets based on the Data Security Law. It covers sensitive data posture, security review trends, sensitive data protection, and data risk assessment, helping managers, data security owners, and security administrators understand data status, detect anomalies, and fulfill data security responsibilities.
	Sarbanes-Oxley report	A database security audit compliance report based on the Sarbanes-Oxley Act of 2002 (SOX). Following the Plan-Do-Check-Act (PDCA) model, the report is divided into three parts: Plan and Organize, Certify and Control, and Assess Risk. It helps managers and auditors detect, analyze, locate, and respond to abnormal and non-compliant behaviors, providing a basis for information security management decisions.
Performance analysis report	Performance analysis report	Analyzes database performance from five aspects: performance change trends, databases with the worst performance, longest-running SQL statements, SQL statements with the worst performance, and most frequently executed SQL statements.
Security operations analysis reports	Audit trend analysis	Includes trend analysis for the number of SQL statements, alerts, sessions, and execution duration.
	Alert source analysis	Analyzes alert sources based on the distribution of client IP addresses and database accounts that trigger alerts.
	Rule hit analysis	Analyzes rules hit by alerts based on the alert name distribution graph and distribution list.
Database business analysis reports	Database analysis	Analyzes database distribution from the dimensions of statement count, failed statement count, new session count, failed session count, and alert count.
	Database access source IP analysis	Analyzes client IP distribution from the dimensions of statement count, failed statement count, new session count, failed session count, and alert count.
	SQL statement analysis	Analyzes the distribution of operation types, databases, IP addresses and accounts, and client tools from the dimension of statement count.
	Failed statement analysis	Analyzes the distribution of operation types, databases, IP addresses and accounts, and client tools, and ranks failed SQL statements from the dimension of failed statement count.
	SQL statement change trend analysis	Shows a trend graph for SQL statement counts and a list of SQL statement counts for each time period.
	Client tool analysis	Analyzes client tool distribution from the dimensions of statement count, failed statement count, new session count, failed session count, and alert count.
Database session analysis reports	New session analysis	Analyzes the distribution of databases, IP addresses and accounts, and client tools by new session count. Currently supports only traffic collection (Agent) data. Cloud-native log collection data is not supported.
Database session analysis reports	Failed session analysis	Analyzes the distribution of databases, IP addresses and accounts, and client tools by failed session count. Currently supports only traffic collection (Agent) data. Cloud-native log collection data is not supported.

View report analysis objects, scope, and details

Log on to the Data Security Center console.
In the navigation pane on the left, choose System Settings > Report Center.
On the Report Center page, click the tab for the report type that you want to view.
Select a time range for the report. The default is Today. Other options include Yesterday, Last 7 days, Last 30 Days, MTD, or Last 3 Months. You can also select a custom time range within the last three months. View the analysis objects, scope, data manifest, data domain manifest, and specific analysis content of the report.

Note
Reports cannot be generated for specific assets. You can only view reports for All Data Assets.

Export reports

Export reports in HTML, Word, or image format for offline viewing and analysis.

On the report tab, click Export in the upper-right corner.
In the Export dialog box, set Export Type to HTML, Word, or Image.
Click Generate Report.
After the report is generated, click Download Report.