Challenges
Challenges
-
Easy Intrusion
Some enterprises tend to pay much more attention to service functions than security. Their service systems and applications are vulnerable to attacks, which can cause massive losses.Some enterprises tend to pay much more attention to service functions than security. Their service systems and applications are vulnerable to attacks, which can cause massive losses. -
Difficult Data Protection
As attacks against databases become increasingly diverse and complex, ensuring data security has become a great challenge for all enterprises.As attacks against databases become increasingly diverse and complex, ensuring data security has become a great challenge for all enterprises.
-
High Security Investment
A large amount of money goes into building a professional security team required for security solution design, security evaluation, O&M, and security response.A large amount of money goes into building a professional security team required for security solution design, security evaluation, O&M, and security response.
Typical Scenarios
-
SAP System Security
-
SAP Hybris Security
-
Security Management
SAP System Security
HUAWEI CLOUD full-stack security service improves network and SAP system security and ensures reliable running of various applications.
Benifits
Customers’ offline data centers communicate with HUAWEI CLOUD through Direct Connect or VPNs to keep services and O&M channels secure. Virtual next generation firewall (vNGFW) is deployed to protect SAProuter and SAP Support channels.
Security groups and network ACL features enable intranet access control policies to be implemented under the minimum and default failure principles. The vNGFW is used to monitor intranet traffic.
SAP Hybris Security
To strengthen protection, Database Security Service (DBSS) is combined with numerous other security services, helping customers ensure data security on the cloud.
Benifits
DBSS provides functions such as sensitive data masking, database auditing, and database firewalls through the reverse proxy and machine learning mechanism. Key Management Service (KMS) uses highly reliable Hardware Encryption Modules (HSMs) to protect your applications. The service integrates with other cloud services such as OBS and EVS, and achieves full data encryption on the cloud.
Web Application Firewall (WAF) detects anomalous HTTP and HTTPS requests and defends against malicious attacks, such as SQL injection, XSS, website Trojan horses, and vulnerability intrusion, preventing sensitive data leakage. Vulnerability Scan Service (VSS) periodically scans vulnerabilities to locate security risks, and provides repair suggestions to prevent hacker attacks.
Security Management
A comprehensive security management solution is essential for keeping your service system running stably, improving security maintenance, and particularly, managing a distributed system environment.
Benifits
KMS delivers secure, reliable, and easy-to-use features based on HSMs. It integrates with other HUAWEI CLOUD services such as OBS, EVS, and IMS to implement data encryption and storage.
VSS detects system vulnerabilities in real time and identifies risks. Security Expert Service (SES) provides comprehensive, in-depth, and professional security reports as well as suggestions from professional evaluation organizations for your systems.
Portable O&M is supported with any terminal and browser. Asynchronous dynamic authorization requires a secondary authorization for sensitive operations. Classified Cybersecurity Protection Class-3 requirements are met for user identity authentication, access control, security auditing, and many other functions.
