E-surfing Managed Cloud Platform Portal

Business Challenge

Application Security

The authentication information should adopt at least two factor authentication, and the main network equipment should select two or more combination of authentication technologies for the same user; configure access control policies and rules; mark sensitive resources; and apply fault tolerance and self-protection.

Data Security

Data integrity check self-service capability; data transmission and storage confidentiality; operating system, network equipment, database management system, main application system, with local / remote backup and important information recovery function

Network Security

Effective monitoring, detection and blocking of network security "remote access and unauthorized access"; application level access control of core network nodes; independent management of regional devices and components centralized monitoring and management; centralized management of malicious code, virus and patch upgrade; centralized audit and centralized alarm.

Host Security

The access control policy is configured by the authorized subject, and the access rules of the subject to the object are specified. The granularity of the access control should be user level or process level for the subject, and file and database table level for the object. The security mark is set for the sensitive information, and the access of the subject to the information with security mark is controlled.

Application Scenario

Secure Communication Network

In order to ensure the integrity and confidentiality of data, network security audit is carried out on network security, including the operation status of network equipment, network traffic, user behavior in operation and maintenance, and encryption and decryption technology is used in the process of communication network data transmission.

Safe Area Boundary

e Cloud guarantees that the cloud platform it provides can achieve cross-border access, data flows communicate through border protection devices, and deploy access control mechanisms and set access control rules at the boundary of network area, so as to ensure the security of user area boundary on the cloud platform.

Overall Structure

Introduction

It is suitable for customers whose basic condition is that the business application hosting platform meets the requirements of three-level classified protection certification, and apply for three-level classified protection certification with the application system as the main body. Application classified protection certification requirements include application hosting platform (cloud computing infrastructure platform) and application. e cloud provides a "shared responsibility" model for security service classified protection. The specific classified protection service process includes four stages: grading and filing, gap analysis, safety rectification, etc.

Architecture Characteristics

1、Free Migration 2、Scalability 3、Maturity and Stability 4、Security Architecture and Technical Measures 5、Network Technique 6、Network Coverage 7、Machine Room / Bandwidth Resources 8、Disaster Recovery Capacity