Huawei Iceberg Security Creates 7 Security Services and Creates a New Blueprint for China's Network Security Industry
Following Huawei's security capabilities accumulated over the past 20 years, Huawei Cloud has built an "iceberg" security system: the cloud+5G+AI services users see on the iceberg, and the perfect security system and capabilities of Huawei Cloud, including the security service system provided to users, the global security operation management system The global security compliance system and the physical security system from the chip to the server are ahead of users, eliminating more than 99% of security threats for users. They:
1. As the security operation center of the enterprise, situational awareness service has provided a unified threat detection and risk disposal platform for hundreds of large enterprises and tens of thousands of users, including Huawei Cloud and Terminal Cloud. Through big data analysis and AI technology, it can timely discover various security threats on the cloud and connect related services for subsequent processing.
2. Web application firewall, which can detect and protect websites in real time under large traffic and concurrency, and identify malicious requests and unknown threats, such as SQL injection; At the same time, by restructuring the triple architecture of cluster, region and cross zone, the reliability can be improved to more than 99.99%.
3. Enterprise host security service, which provides users with asset management, vulnerability management, intrusion detection, baseline inspection and other services to help enterprises reduce security risks. Currently, it has covered hundreds of thousands of virtual machines; It is the only cloud service provider in China that supports both static and dynamic web page tamper prevention, guarding millions of Huawei cloud users and hundreds of millions of end users.
4. Container security services, with strong security and application lifecycle management capabilities, make cloud local development more secure and effective, and help Huawei cloud container services achieve the best results of Forrester evaluation.
5. Database security service, as the only domestic database protection product integrating database firewall, data desensitization and database audit, is necessary for cloud users to prevent data leakage.
6. Data encryption service, as the last link of data protection, is embedded in more than 20 basic cloud services, realizing one key encryption of data, and calling hundreds of millions of times every year. The national security encryption scheme based on Kunpeng technology can achieve transparent encryption and is applicable to important infrastructure such as finance and government affairs.
7. Equal protection evaluation service, based on the latest equal protection security 2.0 standard, cooperates with national high-quality equal protection evaluation partners to provide customers with full process equal protection evaluation service and help more than 300 enterprise systems pass the equal protection evaluation.
Iceberg security capability creates a native security platform
In addition to providing users with perfect security services, Huawei Cloud has also built a "built-in security" cloud platform of "natural security" with stronger security capabilities, providing security protection for the entire cloud platform under the "invisible" iceberg of users:
1. Cloud platforms, from chips to hardware, operating systems to cloud services, are independently developed by Huawei, and end-to-end security is strengthened, such as Huawei's own security credibility foundation (ROT), chip level firmware/key security protection, and credibility management.
2. Ensure the security credibility of the cloud platform and cloud services. For example, the encryption module of enterprise storage hard disk meets FIPS140-2 authentication requirements, privacy protection requirements, and security features cover 100% the entire life cycle of the cloud platform and cloud services, from planning to online.
3. The global security team, 7 * 24, proactively detects, discovers, predicts and responds to security issues involving DDoS attacks, public opinion monitoring, platform operation security, tenant security incident response, etc.
4. Constantly benchmark and follow the most authoritative security compliance standards in the world to improve the cloud platform and improve the security of cloud platform cloud services. So far, Huawei Cloud has obtained more than 50 security compliance certifications worldwide, including PCI-DSS certification, Level 4 warranty certification, ISO22301, TL9000, and ISO/IEC27701.
