HSS

HSS
When using certain public images, you are advised to enable protection to improve the overall security for ECSs. HSS is designed to improve the overall security for ECSs. It reduces security risks with account cracking prevention, weak password detection, malicious program detection, two-factor authentication, vulnerability management, and web page anti-tampering.

Choosing the HSS edition
On the ECS console, you can choose the basic edition or advanced HSS edition. After you select an HSS edition, the system automatically installs the HSS agent and protects your servers.
- Basic edition (one-month free trial): After this function is enabled, the HSS basic edition can be used free of charge for 30 days. The HSS basic edition supports detection of OS vulnerabilities, weak passwords, and brute force cracking to improve the overall security for your ECSs.
  
  After the free trial period expires, the HSS basic edition quotas will be automatically released, and HSS will not protect your servers.
  
  If you want to retain or upgrade HSS security capabilities, you are advised to enable the advanced HSS edition. For details, see What Should I Do When the Free Trial of HSS Basic Edition Expires?
  
  This option is selected by default.
- Advanced HSS edition (paid): You can choose from HSS basic, professional, enterprise, premium, and Web Tamper Protection (WTP) editions the enterprise edition and you need to pay for it.
  After ECSs are purchased, you can switch between different editions on the HSS console after Advanced HSS edition (paid) is enabled. For details about the differences among different editions, see Specifications of Different Editions.
- None: HSS is disabled and servers are not protected.

For an existing ECS without HSS configured, you can manually install an agent on it.

ECS can be protected externally and internally.

**Table 1** Methods for improving ECS security
Type	Description	Method
External security	DDoS attacks and Trojan horses or other viruses are common external security issues. To address these issues, you can choose services such as HSS and cloud-native anti-DDoS based on your service requirements.	You can use the following external security methods to improve ECS security: Enabling HSS Monitoring ECSs Enabling Anti-DDoS Periodically backing up data For details, see Methods for Improving ECS Security.
Internal security	Weak passwords and incorrect ports opening may cause internal security issues. If the internal security is not improved, external security solutions cannot effectively intercept and block various external attacks.	You can use the following internal security methods to improve ECS security: Enhancing the login password strength Improving the port security Periodically upgrading the OS For details, see Methods for Improving ECS Security.