Security on Alibaba Cloud
The security services on Alibaba Cloud reduce the heavy lifting required to tackle key security challenges in the cloud, and each of these challenges can be solved with the use of one or multiple Alibaba Cloud security services.
For improved application security, use DDoS mitigation, web application protection, the centralized security operations interface, and the application data protection services.
DDoS Mitigation
Web Application Protection
Centralized Security Operation
Application Data Protection
Data security is enhanced by data encryption with proper key management, data integrity, and data recovery services.
Data Encryption
Data Recovery
Data Integrity
Key Management
Platform security is made possible by reliable physical security in cloud datacenters, hardware security in server infrastructures, and virtualization security.
Physical Security
Hardware Security
Virtualization Security
A U T H E N T I C A T I O N
A U T H O R I Z A T I O N
A C C E S S C O N T R O L
L O G G I N G & A U D I T I N G
How It Works
-
Application Security
-
Data Security
-
Platform Security
-
Account Security
Application Security
Application Security
Application Security is the first line of defense to protect a customer’s application on the web. This all important line provides DDoS mitigation, web endpoint protection, centralized security operations, and application data protection, including data discovery, data masking and DLP, to prevent attacks and intrusions against internet-facing cloud applications and ensure the safety of sensitive application data. Alibaba Cloud specifically provides four related security products:
Anti-DDoS Premium Service
Helps customers mitigate high-volume DDoS attacks from the internet.
Web Application Firewall (WAF)
Filter out massive numbers of malicious intrusions to ensure application endpoint security.
Security Center
Provides a comprehensive health check service that works to protect your cloud services from a variety of attacks.
Data Security
Data Security
Alibaba Cloud is committed to protecting the data security and privacy for every customer. Alibaba Cloud helps customers manage and control data security throughout the data lifecycle with comprehensive services and capabilities to manage data encryption, data recovery, and key management.
Key Management Service (KMS)
KMS is a fully managed service that help customers create, delete, and manage encryption keys to protect data in the cloud.
Build-in Data Encryption in Multiple Products
All data at rest, such as data stored in Elastic Compute Service (ECS) Cloud Disk, Object Storage Service (OSS), Relational Database Service (RDS), and MaxCompute can be encrypted with AES256 server-side encryption or with KMS with the option to Bring Your Own Key (BYOK).
Bring Your Own Key (BYOK)
The Bring Your Own Key (BYOK) feature provided in KMS along with first-party integration with the core services of Alibaba Cloud allow for complete control of Customer Master Keys (CMKs).
Platform Security
Platform Security
Platform security is vital as the platform both directly involves physical and hardware security as well as the virtualization environment.
Physical Security
All Alibaba Cloud data center facilities are configured with strict access control, with visitor areas marked out separately to ensure physical security. Alibaba Cloud data centers and server rooms are also equipped with advanced surveillance systems covering all the areas and passages, and staffed with security guards for 24*7 patrol.
Hardware Security
Alibaba Cloud offers firmware baseline scanning, high-performance GPU instance protection, secure BIOS update, BMC firmware protection, and a chip-level trusted execution environment to protect customers’ sensitive data and encryption/decryption keys.
Virtualization technology
Virtualization technology can help customers ensure isolation between multiple tenants in a cloud computing environment. Namely, we offer virtualization isolation in computing, network, storage resources.
Account Security
Account Security
Alibaba Cloud account authentication and authorization support two-level account credentials, namely Alibaba Cloud account and individual Resource Access Management (RAM) user account, for easy separation of duties, multi-factor authentication (MFA), fine-grained authorization control, and temporary authorization tokens.
Access Control
Our access control capabilities with RAM access management are built in as standard capabilities to most cloud services.
ActionTrail Services
ActionTrail help customers easily log and audit all user access to their cloud services and resources, quickly diagnose threats.
Log Auditing
Operational records from ActionTrail can help meet customers’ compliance audit requirements.
Recorded Operations
Maintenance operations on production system can only be performed with bastion hosts. The entire operation process is recorded in logs in real time.
Global Compliance
Alibaba Cloud adheres to domestic and international information security standards, as well as industry requirements. We also engage with independent third parties to verify the compliance of Alibaba Cloud according to various requirements. Certified by more than 10 agencies across the globe, Alibaba Cloud is a cloud service provider with the most complete range of certifications in Asia.
Learn More >
Shared Responsibility
Alibaba Cloud and its customers are jointly responsible for the security of customers' applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the security burden of customers of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs.
Read More >
Alibaba Cloud Security Ecosystem
In the spirit of cooperation and providing customers with more choices, Alibaba Cloud collaborates with security partners to establish Alibaba Cloud Security Industry Ecosystem and provide customers with industry-leading security solutions that are consistent with their existing deployed security control measures.
Alibaba Cloud has partnered with Fortinet to offer advanced multi-layer protection to secure your infrastructure, data, and applications on the cloud. Fortinet security solutions enable you to reduce risks even in dynamic networks.
Malaysia Customer Success Stories
As the Official Cloud Services Partner to the Olympic Games and the infrastructure powering Alibaba, we provide high-performance cloud technology to help your business perform at its best.
By implementing Alibaba Cloud’s CDN and WAF services and working with Alibaba Cloud’s security professionals, AirAsia identified 90 percent of the traffic as Bots. Now, Alibaba Cloud provides Air Asia with weekly security reports and regular updates.
Watch Video
Founded in 1993 and headquartered in Malaysia, AirAsia is the largest airline in Malaysia and prides its self for its low-cost, high availability and superior customer service. Internationally, AirAsia is ranked as one of the world’s best low-cost airline. AirAsia operates scheduled domestic and international flights to more than 165 destinations spanning 25 countries.
Alibaba Cloud brings new cutting-edge technology, global security, and operational effectiveness. The combination allows TNG Digital Sdn Bhd to focus on building better products and services.
Watch Video
TNG Digital Sdn Bhd is a joint venture between Touch ‘n Go Sdn Bhd and Ant Financial Group. Together they have embarked on a journey to support a reliable mobile wallet for Malaysians. By employing the same Alibaba Cloud Infrastructure-As-A-Service platform as Alipay, TNG Digital was able to harness cloud computing and the latest cloud technologies to enable Malaysians with the power of mobile payments.
Resources
Whitepaper
Smart and Sound with Alibaba Cloud
Report
An Alibaba Cloud Security Report | February 2019
Report
An Alibaba Cloud Security Report | September 2018
Webinar
Protecting Your Data on the Cloud
Webinar
Cybersecurity: Safeguard Your Business Data
Webinar
Alibaba Cloud Security Innovation Lab Webinar
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
Get Started for Free Get Started for Free
