Multi-layer Ransomware Protection - Security and Governance

Secure your server files and databases from ransomware with our solution. Huawei Cloud security practices are applied to ransomware detection and prevention. We coordinate cloud security and storage to prevent intrusions, data leakage, and tampering; and limit the impacts of attacks when they happen.

Multi-layer Ransomware Protection Helps Companies Establish E2E Protection

Intrusion Prevention

Our six-layer intrusion prevention system can detect 99% of ransomware attacks and block them within seconds.

Attack Containment

We implement east-west and north-south micro-isolation of servers, containers, and applications. Suspicious processes, servers, and applications are automatically isolated and blocked.

Leakage Prevention

You can apply different protective measures to different categories of data, check for database breaches and other anomalies, and audit and trace data to enhance critical data security.

Anti-tampering

This solution can identify ransomware processes, block encryption, and detect tampering in SQL databases. It also coordinates the cloud and storage to create tamper-proof snapshots.

Why Choose This Solution?

E2E Ransomware Protection System

A security system of six levels protects everything from networks, servers, containers, and applications, to databases and backups. It provides comprehensive protection against intrusions, attack spreads, data leakage, and tampering.

Detection and Blocking Within Seconds

You can identify all the known ransomware families based on AI, signatures, threat details, and abnormal behaviors; enabling you to quickly detect and block high-risk behaviors in processes, servers, and databases. The detection rate is as high as 99%.

Full-lifecycle Data Protection

Your data will be protected throughout their lifecycle from creation to destruction; and before, during, and after an incident. Our solution automatically identifies and blocks tampering processes and high-risk operations on SQL databases. Tamper-proof snapshots help protect critical data. We have succeeded in more than 1,000 ransomware protection projects so far.

Ransomware Protection on Files and Databases

Server Files
Databases

Server Files

Challenges

Ransomware gangs will use password cracking and the exploitation of vulnerabilities to infiltrate an OS, container, or app, at which point they can encrypt your data or create a hidden backdoor that lets them exfiltrate sensitive information.

Solution

Intrusion prevention: Application vulnerabilities and alarms can be detected. Abnormal ransomware processes and infected files can be isolated within seconds.

Attack containment: You can take advantage of our preconfigured playbooks for north-south and east-west isolation of networks, processes, and applications to defend against ransomware attacks on your servers.

Leakage prevention: Data leakage detection and source tracing analysis help you prevent and review incidents.

Anti-tampering: Storage services create tamper-proof snapshots of your files.

Benefits

Comprehensive measures: Ransomware attacks on server files can be blocked within seconds by our six-level security system. We protect everything from networks, servers, and containers, to applications, databases, and backups.

Accurate ransomware detection: The ransomware detection rate reaches 99%, with a false positive rate of less than 1%.

Fast backup and recovery: Cloud-storage collaboration and tamper-proof snapshots help you recover data within minutes.

Databases

Challenges

Databases are the core of many modern businesses, which makes them a tempting target for a diverse range of ransomware attacks. Ransomware gangs will attempt to crack passwords, take advantage of application vulnerabilities, and use SQL injection to gain access. Once in, attackers may use SQL statements to encrypt, exfiltrate, or delete your data.

Solution

Intrusion prevention: Get notified of and handle database weak passwords, brute-force attacks, and vulnerability exploits in a timely manner.

Attack containment: Take advantage of our preconfigured playbooks for the north-south and east-west isolation of networks, processes, and applications to defend against ransomware attacks on your databases.

Leakage prevention: Prevent and review incidents based on data leakage detection and source tracing analysis.

Anti-tampering: Storage services create tamper-proof snapshots of your files.

Benefits

Comprehensive measures: Ransomware attacks on databases can be blocked within seconds by our six-level security system. We protect everything from networks, servers, and containers, to applications, databases, and backups.

Accurate ransomware detection: The ransomware detection rate is as high as 99%, with a false positive rate of less than 1%.

Fast backup and recovery: Tampering with SQL database can be detected immediately. Cloud-storage collaboration and tamper-proof snapshots help you recover data within minutes.

Multi-layer Protection on Cloud Servers and Databases

Border Protection

Inter-region access control policies

Attacks can be detected and blocked at the network layer.

Cloud Security Management Zone

Encrypted traffic on the cloud is checked at the network layer, with visualized statistics provided.

Malicious behavior and ransomware can be detected at the server, application, and database layers.

Network-wide situational awareness helps you identify and handle threats.

Data Backup Zone

Security services work with cloud backup to restore data and reduce losses.

Related Services

HSS

CBR

CFW

WAF

Documentation

Huawei Cloud Safeguards Corporate Cloud Services

Huawei Cloud Security Services Help Kingdee Cloud Build a Comprehensive Security System

Kingdee Cloud Cosmic used the Huawei Cloud security solution containing SecMaster, Host Security Service (HSS), and Web Application Firewall (WAF) services to build a complete security system.