Overview

This topic provides a brief introduction of the Overview page in the Security Center console. The Overview page in the Security Center console is a security operations center for Alibaba Cloud services. The Overview page dynamically displays the security score, risks that threat your assets, status of all your assets, and the features that you have enabled. You can upgrade Security Center, renew the subscription, increase the asset quota, and modify notification settings on this page.

In the Security Center console, you can view and manage your assets on the Overview page.

The Overview page displays the following sections:

• Upgrade and Renew: This section displays the edition of Security Center. You can upgrade Security Center to the Basic Anti-Virus, Advanced, or Enterprise edition, increase the asset quota, and renew the subscription. For more information, see Upgrade Security Center, increase asset quota, and renew subscription.

  You can click Check Now to scan for vulnerabilities, baseline risks, and configuration risks in the assets.

• Secure Score: displays the security score of your assets and the number of risks detected on your assets. For more information, see Security score. For more information about how to improve the security score, see Improve the security score.

  Click Fix Now and the Security Risk page appears. You can then follow the instructions to view related topics or manage risks.

  The Security Risk page displays the following types of risks that need to be managed at the earliest opportunity:

  • Configurations of core features
  • Unhandled alerts
  • Unfixed vulnerabilities
  • Baseline risks
  • Cloud service configuration risks
  • Attacks and other types of risks
• Status: This section displays the numbers of assets that have installed the Security Center agent and those that have not, which respectively indicates the number of assets that have been protected by Security Center and those that have not. The risk statistics are also displayed.

  Move the pointer over the number below Unprotected and click Install Agent to go to the Agent tab. On this tab, you can install the Security Center agent on the unprotected assets. For more information about how to install the Security Center agent, see Install the Security Center agent.

• Security Detection and Defense Capabilities: This section displays the engines used to scan assets, log capacity, anti-virus database update time, system vulnerability scan time, number of precise defense events, and number of tamper protection events. This information allows you to monitor the defense and security status of your assets in real time.
• Threat Statistics: You can view threat statistics, as shown in the following table.

  Threat type	Description
  Unhandled alerts	This section displays the total number of alerts in your assets and the numbers of alerts at different risk levels. Security Center classifies alerts into the following severity levels: Urgent: high severity risks. This level of risk indicates that intrusion events have been detected on your servers, such as reverse shells. We recommend that you view the details of the alert events and handle the events in a timely manner. Warning: medium severity risks. This level of risk indicates that suspicious events have been detected on your servers, such as suspicious CMD command sequences. We recommend that you view the details of the alert events, assess whether your servers are at risk, and handle the events as needed. Notice: low severity risks. This level of risk indicates that low-risk events have been detected on your servers, such as suspicious port listening behaviors. We recommend that you view the details of the alert events. You can click the number below Unhandled Alerts to go to the Alerts page where you can view and manage alert events. For more information, see Manage alert events.
  Unfixed vulnerabilities	This section displays the total number of unfixed vulnerabilities and the numbers of vulnerabilities at different risk levels. You can click the number below Unfixed Vul to go to the Vulnerabilities page where you can view and manage vulnerabilities. For more information, see Vulnerability priorities.
  Baseline risks	This section displays the total number of baseline risks in your assets and the numbers of baseline risks at different risk levels. You can click the total number below Baseline Risks to go to the Baseline Check page where you can view and manage baseline risks. For more information, see Baseline checks.
  Attack Type Distribution	This section displays the total number of attacks against your assets. You can click the number below Attacks to go to the Attack Awareness page where you can view attack analysis. For more information, see Attack awareness.

• Config Assessment Risks: This section displays the risks detected in the baseline configurations of cloud services.

  You can click See All to go to the Cloud Platform Configuration Assessment page where you can view and manage configuration risks in your cloud services. For more information, see Cloud service configuration assessment.

• Issue Resolved: This section displays the number of alerts, vulnerabilities, and baseline risks that have been managed in the last 15 days. The statistics are displayed in a bar and trend chart.