Alibaba Cloud Linux security benchmarks have been certified by the Center for Internet Security (CIS). The CIS has published CIS Alibaba Cloud Linux benchmarks. This topic describes CIS Alibaba Cloud Linux benchmarks and how to download them.
Background information
The CIS is a renowned nonprofit organization that has been operating as an online community for decades to safeguard against cyber threats. It works with public service sectors, businesses, and academia from around the world to develop security best practice solutions for cyber defense, called benchmarks. For more information, visit the official CIS website or see CIS in Wikipedia. The CIS has published benchmarks for most Linux distributions such as Alibaba Cloud Linux, CentOS, and Ubuntu. CIS benchmarks are well recognized as important security standards for cloud-based operating systems.
The CIS certification for Alibaba Cloud Linux 2 security benchmarks was completed on August 16, 2019. Then, the CIS published CIS Aliyun Linux 2 Benchmark v1.0.0. The CIS certification for Alibaba Cloud Linux 3 security benchmarks was completed on February 6, 2022. Then, the CIS published CIS Alibaba Cloud Linux 3 Benchmark v1.0.0. Alibaba Cloud Linux is the first CIS certified operating system in China.
Introduction to CIS Alibaba Cloud Linux benchmarks
- The CIS benchmark for each Alibaba Cloud Linux release provides specific security
recommendations for more than 200 items in the following areas: initial setup, services,
network configuration, logging and auditing, access, authentication, authorization,
and system maintenance.
- CIS Aliyun Linux 2 Benchmark v1.0.0 includes 204 items.
- CIS Alibaba Cloud Linux 3 Benchmark v1.0.0 includes 266 items.
- Each item is described from the following aspects: profile applicability, scoring
information, description, rationale, impact, audit, remediation, and references. In
CIS Alibaba Cloud Linux benchmarks, items are classified into different profile levels:
Level 1 and Level 2.
- Level 1 items cover basic security configurations that are easy to implement and have minimal impact on performance.
- Level 2 items are suitable for high-security environments and may incur performance overheads.
- Items in CIS Aliyun Linux 2 Benchmark are categorized as
ScoredandNot Scoredbased on scoring information. Items in CIS Alibaba Cloud Linux 3 Benchmark are categorized asAutomatedandManualbased on scoring information.ScoredandAutomated: If an item is categorized as Scored or Automated, the compliance of this item with the provided security recommendation affects the benchmark score. If this item complies with the provided security recommendation, the benchmark score is increased. If this item does not comply with the provided security recommendation, the benchmark score is decreased.Not ScoredandManual: If an item is categorized as Not Scored or Manual, the compliance of this item with the provided security recommendation does not affect the benchmark score. The benchmark score does not change with this item regardless of whether the item complies with the provided security recommendation.
Download CIS Alibaba Cloud Linux benchmarks
| Download method | Description |
|---|---|
| Download CIS Alibaba Cloud Linux benchmarks from the CIS Benchmarks page. |
Visit the CIS Downloads page and download the CIS benchmark for your Alibaba Cloud Linux release.
 |
| Use a CIS account to download CIS Alibaba Cloud Linux benchmarks |
Visit one of the following pages to download CIS Alibaba Cloud Linux benchmarks in
the PDF format.
Note Before you can download CIS Alibaba Cloud Linux benchmarks from the pages, you must
create a CIS account and then use this account to log on to CIS WorkBench. If you
already have a CIS account, use the account to log on to CIS WorkBench as prompted.
If you do not have a CIS account, click Register Now! on the CIS WorkBench logon page to create an account and then use the account to
log on. After you log on to CIS WorkBench, you can participate in the discussions
in or the development of the CIS community.
|
| Download CIS Alibaba Cloud Linux benchmarks by email | You can specify an email account on the official CIS website and then download CIS
Alibaba Cloud Linux benchmarks by email. Perform the following operations:
|
