As the security operation center of Alibaba Cloud, the Overview page of the Security Center console displays the threats to, and the safety score of all your assets, and all the Alibaba Cloud Security services you have bought. You can upgrade Security Center, renew your Security Center service, scale up your assets, and modify the notification method.
The Overview page includes the following modules:
- Security Center edition: Click Upgrade to Enterprise Edition/Renewon the top right of the Overview page, you can upgrade to your Security Center to
the Enterprise Edition, scale up your assets, or renew your Security Center service.
- Secure score: Safety score displays your assest's security score evaluated by Security Center,
and the number of protected and unprotected assets. For specific score descriptions,
see the Safety score table below.
To add unprotected assets under the protection of Security Center, click the number under Unprotected Assets and on the displayed Install/Uninstall Security Center Agent page, install the Security Center agent. For more information, see Install Security Center agent.
- Threat Statistics: Threat statistics includes the number of unhandled alerts, unfixed vulnerabilities, baseline risks and attacks.
- Cloud Platform Configuration Risks: This module displays the detected baseline risks of your cloud products.
- Issues Resolved: This module displays the number of events, vulnerabilities, and vulnerable baseline configurations handled during the week in the form of column charts.
Upgrade to the Enterprise Edition, scale up assets, and renew your Security Center service
- Basic Edition: The edition of Security Center is shown in the upper-right corner of the page. An
Upgrade button is also displayed. If you upgrade your Security Center Basic Edition to the
Advanced or Enterprise Edition, you are able to use such advanced functions as baseline
checks, asset fingerprints, malicious processes (malware checking), and log analysis
(needs to be purchased additionally).
- Advanced/Enterprise Edition: The expiration date of your Security Center service, and the size of your assets
(the number of servers) are displayed in the upper-right corner of the page. A Renew button is also displayed.
Note If your current number of servers exceeds the number that you specified when purchasing Security Center, an Asset Scaling button is displayed in the upper-right corner of the page. To guarantee the availability of all features, we recommend that you scale up your assets.
Safety score table
|95–100||Your assets are fully secured.|
|85–94||There are some security risks to your assets. We recommend that you strengthen the security of your servers and your system as soon as possible.|
|70–84||There are many security risks in your assets detected by Security Center. We highly recommend that you strengthen the security and protection of your system as soon as possible.|
|69 and lower||Your assets are exposed to security risks and may be easily compromised. We recommend that you immediately strengthen the security and protection of your system.|
|Lack of a security operation center||Establish an in-depth defense system. If you have any queries, submit a ticket for technical support.|
|Unfixed vulnerabilities||Fix the vulnerabilities. For more information, see Linux software vulnerabilities.|
|Unhandled security events||Handle the security events in a timely manner.|
|Lack of host protection||Enable the enterprise edition of Server Guard.|
|The protection status is offline (the Security Center agent is not installed or offline).||Install the Security Center agent.|
|Web-CMS vulnerabilities||Fix the Web-CMS vulnerabilities.|
|System software vulnerabilities||Fix the software vulnerabilities.|
|Risks detected by baseline checks||Fix the vulnerabilities of baseline.|
|Unexpected logons||Check and handle the unexpected logons.|
|Webshell threats||Check and handle the webshell files.|
|Host exceptions||Handle the host exception events.|
- Events: Number of unhandled security events.
- Times of attacks: Number of attacks today.
- Vulnerabilities: Number of unhandled vulnerabilities.
- Baseline check: Number of vulnerable baseline configurations.