Overview
Leveraging the extensive threat data collected by Security, the Cloud Workload Protection Platform (CWPP) harnesses machine learning to deliver a diverse range of security protection services. These include asset management, trojan detection and prevention, intrusion detection, vulnerability alerting, and security baseline establishment. CWPP aids in establishing a robust security protection system to address critical network security risks encountered by servers. It extends unified security protection to non-Cloud servers and facilitates seamless sharing of security intelligence within the Cloud, ensuring consistent protection levels for private IDCs akin to those in the cloud environment.
Benefits
Asset Management
Gather and oversee fingerprint data for your assets, covering accounts, ports, processes, and applications.
Virus SCan
Combatting trojan viruses, including miner trojans and blackmail trojans, leveraging certified AI-powered virus database, Webshell detection engine, and TAV engine.
Intrusion Defense
Monitor intrusion events and issue alerts for various unauthorized activities. These include abnormal login attempts, brute-force attacks, malicious requests, high-risk commands, local privilege escalation, reverse shell, and more.
Vulnerability Scan
Scan for vulnerabilities in Linux, Windows, Web-CMS, and applications. Prompt alerts upon detection of vulnerabilities and offer expert solutions for remediation.
Security Baseline
Manage security baselines with the preset baseline check items (CIS, weak password). Check the baseline score and resolve the risks according to the suggested solutions.
Core File Monitoring
Monitor core files for unusual activities and generate alerts accordingly. You have the flexibility to manage these alerts as per your requirements. This functionality is exclusive to Linux versions 3.10 and beyond.
Scenarios
Intrusion Defense
Vulnerability Response
Asset Fingerprint Management
Security Baseline Check
Use Case
Online services frequently encounter threats and attacks. Failure to establish an efficient preemptive warning and response system can result in data breaches or service disruptions for enterprises.
Solution
Identify intrusion events utilizing CWPP intrusion defense, which detects virus files, abnormal logins, brute-force attacks, malicious requests, high-risk commands, local privilege escalation, and reverse shells.
Use Case
Companies without a dedicated security team to assess emerging vulnerabilities.
Solution
Utilizing CWPP’s Vulnerability Scan feature, organizations can track the effects of new vulnerabilities and address them based on recommendations from CWPP experts.
Use Case
Within server environments, various types of software coexist. In the event of a new vulnerability, assessing its potential business impact promptly proves challenging.
Solution
Leveraging CWPP’s Asset Fingerprint functionality, enterprises can swiftly discern, categorize, and enumerate server components. This facilitates the creation of a comprehensive overview of enterprise asset fingerprints, thereby enhancing the efficiency of emergency response efforts.
Use Case
Enterprises require compliance with industry-specific security standards but lack the necessary capabilities and experience.
Solution
Evaluate the service using predefined and customized baseline policies, and address identified issues based on expert recommendations.
Compute
Edge Computing
Container
Distributed Cloud
Microservice
Serverless
Essential Storage Service
Data Migration
Data Process and Analysis
Relational Database
NoSQL Database
Enterprise Distributed DBMS
Database SaaS Tool
Networking
CDN and Edge platform
Network Security
Data Security
Application Security
Endpoint Security
Business Security
Security Services
Security Management
Domains & Websites
Office Collaboration
Enterprise Applications
Data Analysis
Image Recognition
Face Recognition
Voice Technology
AI Platform Service
Natural Language Processing
Optical Character Recognition
Internet of Things
Message Queue
Middleware
Communication
Interactive Video Services
Stream Services
Media On-Demand
Media Process Services
Media SDK
Cloud Real-time Rendering
Game Services
Game Video Service
Education Services
Blockchain Service
Building Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
Education