2014 Latest server Security software evaluation report

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

According to the CNNIC (China Internet Network Information Center), as of December 2013, the number of Chinese web sites reached 3.2 million, a 520,000 increase from 2012, growth rate of 19.4%, but according to the latest Baidu survey results show that 65% of the Chinese site is unsafe, including 31% The site is in a moderate or highly critical state.

In such a grim situation of information security, how to do a good job of server security protection, information security? Today I selected the Yun Yu, accelerated music, safety Bao, 360 Web site defender Four of the market more popular server security products do horizontal comparison:

Four Product function module:

As you can see from the list, four products have anti-CC, SQL injection, XSS and other attacks against the application of the defense measures, the attack on the application layer is more common attack mode, so four products have made corresponding defensive measures, their differences are mainly reflected in the network layer, System Layer Defense strategy: in the network layer of protection, accelerated music, safety Bao, 360 of Web site guards have the function of defending against DDoS, application layer protection, with the CC, SQL injection, XSS Cross station, and in the system layer protection, only cloud lock has the function of protection against operating system. The following explains the role of the network layer, Application Layer Security protection, respectively:

Network layer Security protection based on CDN technology:

Baidu accelerated music, safety Bao, 360 site guards are based on CDN technology security products, such security products have two major roles: Web site acceleration and security protection. From an accelerated point of view, the service provider in a number of places to deploy CDN nodes, can effectively enhance the Web site access speed; From a security point of view, you can isolate the hacker and the Web server interaction between the connection, hide the Web server IP address to ensure that the site safe and stable operation, This is the most effective method of security protection against DDoS attacks at present. However, although the CDN technology for static Web site acceleration effect is very obvious, but the dynamic file acceleration effect has been unsatisfactory, in addition, if the hacker already know the target server's IP, this defense means may be ineffective.

Strengthening the operating system to provide immunity

Yun Yu is the industry's first cloud security product for server operating systems, which enhances the security level of the server by strengthening the operating system. Most of China's web sites use Windows and Linux systems are C2-level operating systems, the defense of the attack is weaker, hackers are easy to attack the operating system vulnerabilities, cloud lock by refactoring Ssoos (operating system security subsystem) method, The original function module from dozens of to hundreds of items, so that it has a lot of B1-level operating system security features, from the system kernel layer immune malicious code (viruses, trojans, worms) execution, System layer vulnerability attacks. Simply put, Yun Yu is like a "system lock" that locks system resources (files, registries, users, ports, disks, services, and so on) securely, while maintaining their availability without tampering and malicious access. Yun Yu Although the operating system to achieve the real security, but in the network layer of defense, but there is no accelerated music products such as the defensive function.

System Layer + Application Protection + Network Layer protection to build server security protection system

Whether it is to accelerate the music or cloud lock, have only done the protection of part of the level, only the two types of products combined to achieve the system layer, application layer and network layer of multiple protection, in order to achieve server real security, Therefore, the current stage of more effective defense strategy is: Using cloud lock www.yunsuo.com.cn to ensure the security of the server operating system, and then with a CDN technology based on network security products such as accelerated music, security treasure or 360 Web site guards.