Threat Detection Service: Monitors Security Events in Real-Time

Benefits

: Event Alerts and Log Query
Monitors security events in real time and provides resolutions, analyzes alerts, and queries alert details from logs.

: Raw Log Storage and Query
The Enterprise Edition allows customized queries and analysis of logs within the last 180 days.

: Risk Quantification and Prediction
Provides quantified threat analysis and risk prediction based on machine learning.

: Easy-to-use User Interface
The Enterprise Edition provides an easy-to-use user interface, allowing you to understand the security situation in real time.

Features

Security Monitoring

Reduces the amount of false alarms, using correlation analysis of networks and hosts. This is one of the biggest concerns of enterprise security personnel.

Monitors enterprise system vulnerabilities, listener ports, intrusions, web attacks, and DDoS attacks, and learns about new threats and opinions on enterprise security.

Intrusion Detection

Detects intrusions by modelling and analyzing data such as traffic data, host activity data, and host operation logs. Detects with an accuracy of up to 99.99%.

Quickly and accurately detects the cause of network security status changes based on large amounts of data.

Vulnerability Analysis

Detects vulnerabilities in real time, including web vulnerabilities, such as SQL injection and XSS vulnerabilities, third-party open-source software vulnerabilities, ECS instance vulnerabilities, and system configuration vulnerabilities.

Detects vulnerabilities in real time to enable quick vulnerability fixes.

Screens

Visualizes accesses to your system and attacks from across the globe.

Allows you to report the overall security situation to colleagues and business visitors.

Threat Analysis

Alibaba Cloud Security engineers analyze all possible threats to your system offline using data models that are built through big data analysis.

Identifies attackers and sends attack alerts, allowing you to block all attacks.

Log Analysis

Allows you to export a large number of logs for correlation and analysis.

Provides Petabyte-level data storage and analysis, enabling more intelligent security management in the age of digital technology.

Detects attacks by analyzing the network logs, automatically responds to security events, and identifies unusual activities.

Scenarios

Are there any vulnerabilities in my system?
Is my network secure?
What are the impacts of DDoS attacks on my system?
Who is attacking my system?
How do I manage the system security?

Are there any vulnerabilities in my system?

Many websites have critical vulnerabilities. You can use TDS to detect the vulnerabilities on your ECS instances.

TDS detects common web vulnerabilities, third-party open-source software vulnerabilities, host OS software vulnerabilities, and critical vulnerabilities known only to a small number of attackers, and sends you early-warning alerts and fixes for these vulnerabilities.