Updated on 2024-04-15 GMT+08:00

Risk Statistics

On the dashboard page of the HSS console, you can learn the security status and risks of all your servers and containers in real time, including the risk index, risk trend, top 5 event types, and service quota.

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
  3. In the navigation pane, choose Dashboard.

Asset Risk Index (Last 7 Days)

You can check the risks in protected servers and containers in the last 7 Days.

To handle the risks, click Handle Now. The Risks pane will be displayed on the right. You can handle risks by referring to the corresponding guidance. You can handle the following types of risks:

  • Intrusions
  • Vulnerabilities
  • Unsafe settings

To check your asset security, click Scan.

Protection Status (Last 24 Hours)

You can check the numbers of protected and unprotected servers and nodes.

To enable protection for a server, click Enable Protection.

Risks (Latest 24 Hours)

You can check the number of server asset risks, server vulnerabilities, server baselines, and container risks, and their comparison with the previous day.

Risk Statistics

You can check the risk trend in the last 24 hours, last 3 days, last 7 days, and last 30 days.

Table 1 Risk statistics

Category

Event

Asset risks

  • Accounts
  • Open ports
  • Processes
  • Installed software
  • Auto-started items
  • Web applications
  • Web services
  • Web frameworks
  • Websites
  • Middleware
  • Databases

Server vulnerabilities

  • Linux vulnerabilities
  • Windows vulnerabilities
  • Web-CMS vulnerabilities
  • Application vulnerabilities

Server baseline risks

  • Password complexity policy check
  • Common weak password check
  • Unsafe configuration check

Container risks

  • Local image vulnerabilities
  • Private image vulnerabilities
  • Malicious files in images
  • Image baseline

Intrusions (Last 24 Hours)

You can check the total number of intrusions detected on servers and containers, and the severities of the intrusions.

These intrusion statistics are updated at 00:00 every day.

Top 5 Events

For servers protected by the enterprise, premium, or container security edition, you can check the top five types of intrusion events detected in the last 24 hours, last 3 days, last 7 days, or last 30 days; and the number of each type of events.

If no data is displayed due to connection problems, fix your network and click to retrieve data again.

Real-time Alarms

You can check real-time alarms.

Check the latest five unhandled intrusion events in the last 24 hours, including their severities, alarm names, occurrence time, and statuses.

  • To check alarm details, click an alarm name.
  • To handle an alarm, click Handle in its Operation column. After the alarm is handled, it will be removed from the list. The list refreshes and displays the latest five intrusion events that have not been handled in the last 24 hours.
  • To check more alarm events, click View More.