Combat:AliCloudSecurityWhitePaperForewordAlicloudtocreatethefirstInternetdatasharingplatformforthemission,withthehelpofindependentinnovationoflarge-scaledistributedstorageandcomputingcorecloudcomputingtechnologyforvariousindustries,smallbusinesses,individualsanddeveloperstoprovidecloudcomputing(includingcloudservers,openstorageservices,relationaldatabases,dataprocessingservicesandopeningup,open-structureddataservices,cloudshield,cloudmonitoring,andotherproducts)productsandservices,thisanytime,anywhere,on-demandcloud-efficientproductsandservicesalongwithsecurityadvantage.AlicloudcloudoffertheseproductsandservicesthewayfromtheAlibabaGroup,dippinginthee-commerceindustryformanyyears,whileAlicloudsecurityistheprimaryandkeycomponents.ThepaperdescribesAlicloudcloudsecuritymethods,specificallycoveringsecuritypolicies,organizationalsecurity,compliancesecurity,datasecurity,accesscontrol,1personnelsecurity,physicalsecurity,infrastructuresecurity,systems,andsoftwaredevelopmentandmaintenance,disasterrecoveryandbusinesscontinuitytentopics.describedinthisarticleinsidestrategies,processesandtechnologywillprevailpublication.Overtime,someofthedetailswillvaryproductandserviceinnovationandchange.OverviewAlicloudfollowthe“productiondatacouldnotproduceclusters”securitypolicy,coveringfromthedatastorage,dataaccess,datatransmittedtothedatadestructionandmanyotheraspectsofdatasecuritycontrolrequirements,thesecontrolrequirementsincludethefollowingtenareas:(1)Alicloudsecuritypolicyinterpretation,(2)organizationalsecurity,(3)ComplianceSafety,(4)DataSecurity,(5)accesscontrol,(6)thesafetyofpersonnel,(7)Physicalsecurity,(8)theunderlyingsecurity,2(9)systemsandsoftwaredevelopmentandmaintenance,(10)disasterrecoveryandbusinesscontinuityInterpretationofAlicloudsecuritystrategy“ProductionDatanotproduceclusters”------Alicloud-basedAlibabaGrouptenyearsexperienceininformationsecurityriskmanagementandcontrol,inordertoprotectdataconfidentiality,integrity,availabilityofgoals,developpreventivedatadisclosure,alteration,lostcontrolrequirementssuchassecuritythreats,accordingtothedifferentcategoriesofdatasecuritylevel(eg:productiondatarefertothedatatypeofthehighestlevelofsecurity,theircategorymainlyincludesuserdata,businessdata,systemdata,etc.),design,implementation,review,thecloudcomputingenvironmenttoimprovethesafetymanagementandtechnicalcontrolmeasures.(Source:Alicloudcompile:freedownloadDownload:AliCloudSecurityWhitePaper3
