中文
|
English

Alibaba Cloud malicious file detection platform

Focused on technology sharing, security capability output

Technical Blog
Platform Introduction
Technical Blog
Alibaba cloud security team according to the real attack and defense confrontation scenarios on the cloud, precipitated a number of security technologies to organize its technical blog.
webshell | 2023-04-24 16:51:13
WebShell是网站入侵的常用后门,利用WebShell可以在Web服务器上进行执行系统命令、窃取数据、植入病毒、勒索核心数据、SEO挂马等恶意操作,危害极大。 目前业内在WebShell领域的检测主要侧重于PHP,有非常多的PHP WebShell攻防文章,而JSP的检测以及攻防文章相比都较少。但实际上Java应用在生产环境中同样占据了重要的地位,不容忽视。
webshell | 2023-02-06 10:27:45
WebShell是网站入侵的常用后门,利用WebShell可以在Web服务器上进行执行系统命令、窃取数据、植入病毒、勒索核心数据、SEO挂马等恶意操作,危害极大。 目前业内在WebShell领域的检测主要侧重于PHP,有非常多的PHP WebShell攻防文章,而JSP的检测以及攻防文章相比都较少。但实际上Java应用在生产环境中同样占据了重要的地位,不容忽视。
供应链安全 | 2023-01-09 10:00:00
近年来,阿里云云安全中心持续对全球公共镜像仓库镜像进行分析,截止目前已经积累了数百万的公共镜像,并实时跟踪最新公共镜像。 为共同营造良好的网络空间环境,阿里云云安全中心将容器镜像检测能力免费开放,让更多的企业和个人开发者在遇到容器安全事件时能第一时间排查问题,快速应急!
webshell | 2023-01-05 17:52:50
WebShell是网站入侵的常用后门,利用WebShell可以在Web服务器上进行执行系统命令、窃取数据、植入病毒、勒索核心数据、SEO挂马等恶意操作,危害极大。 目前业内在WebShell领域的检测主要侧重于PHP,有非常多的PHP WebShell攻防文章,而JSP的检测以及攻防文章相比都较少。但实际上Java应用在生产环境中同样占据了重要的地位,不容忽视。
webshell | 2022-11-09 15:56:05
Webshell通常是打开权限的第一道大门,而Java Webshell在攻防演练中占据着重要的地位,随着各类防护设备不断升级,如何逃避检测成为攻击者最关心的问题。 本次议题主要介绍了多种利用Tomcat或者Java特性进行免杀的方式,以及对流量检测设备的对抗,共分为Tomcat解析篇,危险类利用篇,流量对抗篇三部分,讲解攻防演练下对检测设备的多种降维打击技术。
webshell | 2022-08-26 18:00:00
攻击者通常会使用WebShell作为网站持久化控制的手段,本议题讲解了多种绕过检测引擎的技术。通过对高级样本的长期对抗,阿里云提出了模拟执行的思路来解决WebShell问题。
1/5
Platform Introduction
阿里云恶意文件检测平台
Malicious File Detection Platform of Alibaba Cloud

For the first time, alibaba cloud security has opened the core anti-virus and malicious code detection engine in commercial products to community users. whether it is enterprise users, security operators under the normalization of network attack and defense verification, white hats, or network security enthusiasts, it is convenient to share alibaba cloud's core capabilities in host and container security detection through web pages. we hope that through the strength of the industry ecology, significantly raise the threshold for the use of black and gray production, thus changing the current situation of asymmetric attack and defense games.

2021

Aliyun Cloud Security Center was once again selected into the Gartner's "2021 Cloud Workload Protection Platform (CWPP) Market Guide" report with an excellent "automation, transparency, and integrated security experience.Learn more

2020

IDC's latest report | Software-defined security, Alibaba Cloud terminal security detection and response capabilities first.Learn more

项目成就
Project Achievement

If you have any suggestions and requests for the testing platform, please feel free to contact us.