What's New

1

Data Security Zone

Creating a data security zone enforces strict resource isolation. It restricts access exclusively to designated IAM users and VPC networks.

Commercial use

Data Security Zone Overview

2

Trusted Key Space

A trusted key space is a security infrastructure dedicated to full-lifecycle key management. By centralizing fragmented keys and enhancing cryptographic trustworthiness, it ensures robust data security and compliance. Ultimately, it serves as a foundational building block for modern security systems, including trusted data spaces and zero-trust architectures.

Commercial use

Trusted Key Space Overview

3

LeRobot dataset masking

LeRobot dataset is added as a file type for OBS masking.

Commercial use

Creating and Running an OBS Masking Task

4

Data Copyright Compliance

Data copyright risk check, a data source and content security protection product, is used for AI model training. It builds copyright risk rating models to quickly identify compliance risks in AI training datasets. This helps you develop reliable, secure, and controllable AI applications.

Commercial use

AI Data Security

5

Content Identification

Content identification scans analyze text and images within common document formats stored in OBS. The system flags sensitive information by matching content against user-defined whitelists, blacklists, and the built-in DSC dictionary of millions of sensitive terms.

Commercial use

Content Identification

6

Database probe

DSC can scan assets and return possible database assets using IP addresses and ports. You can add cloud user-built database instances.

Commercial use

Adding and Authorizing Database Assets

7

Masking template creation

In a masking template, you can configure masking rules for sensitive data. When configuring a masking task, you can select a template. Masking rules in the template will be automatically matched to data.

Commercial use

Creating a Masking Template

8

Built-in identification template

Classification and grading templates are added for privacy, and financial information.

Commercial use

Supported Built-in Identification Templates

9

Risk list

The Risks page displays the Risk Score, Asset Sensitivity Level Overview, Top 5 Asset Levels, and risk details of your assets, helping you identify unsafe assets and handle risks in time.

Commercial use

Risk List

10

Service architecture adjustment

• Asset Management is changed to Asset Center.

• Asset Center is changed to Asset Management.

• Asset Catalog is changed to Asset View.

• Sensitive Data Identification is changed to Classification and Grading.

• Data Asset Protection is changed to Security Management. Policy Management is put under Security Management.

• Device Management is changed to Third-Party Device Management.

Commercial use

Asset Center

1

Credential leakage detection

DSC checks credentials such as open code repositories and blogs such as GitHub on the Internet and AKs of accounts or users in authorized cloud storage (such as OBS buckets). It can identify whether the credentials are leaked and provide alarms. View and handle credential leakage alarms in a timely manner.

Commercial use

Enabling and Viewing Credential Leakage Detection

2

DDS sensitive data identification

Sensitive data identification leverages a data identification engine to scan, classify, and grade structured data (e.g., RDS, DWS) and unstructured data (e.g., OBS).

Commercial use

Creating an Identification Task

1

Unstructured data in the asset catalog

After OBS assets are added into the asset center, detailed unstructured data information for OBS buckets can be displayed in the asset catalog.

Commercial use

Asset Catalog

2

Cross-account and cross-VPC GaussDB(DWS) database instances

The asset center now supports the addition of cross-account and cross-VPC GaussDB(DWS) database instances. Once these instances are added, operations such as sensitive data identification and masking can be performed.

Commercial use

Adding a Cross-Account or Cross-VPC Instance

3

AI-assisted identification of unstructured data

When the Data Type is configured as OBS, AI-assisted identification of unstructured data can be enabled. This feature utilizes a proprietary natural language processing engine for scanning and supplementary identification, facilitating automated data processing. When activated, built-in rules are verified by AI-assisted algorithms to further reduce the false positive rate.

Open beta testing

Creating an Identification Task

4

Image masking in OBS masking

OBS masking in static data masking supports image masking. The primary image types addressed are faces and license plates. Masking options include mosaic and white block redaction.

Open beta testing

Creating a Static Data Masking Task

1

OBS Masking Task

After creating an OBS masking task, you can mask sensitive information of OBS data.

Commercial use

Creating an OBS Masking Task

2

Policy Center

• Policy baseline: The policy baseline is a structured set of data security policies, encompassing data security management regulations, data classification and grading requirements, cross-border data transfer management regulations, and requirements for important and core data. DSC provides preset policy templates based on Huawei Cloud's data security governance experience and supports policy addition, deletion, modification, query, structured display, filtering, and querying.

• Log collection: DSC collects logs from applications (including DBSS and API Data Security) to assist in tracking data flow and promptly identifying exceptions and risks.

• Policy management: The administrator creates policies for database audit, encryption, watermarking, static masking, and dynamic masking on the policy management page of the policy center, and then deploys these policies to the relevant services or instances.

Commercial use

Policy Center

3

Data Transfer Details

DSC analyzes the collected logs to create a transfer diagram. It calculates various metrics based on the log data and saves the results.

Commercial use

Data Transfer Details

1

Log Stream

DSC can manage LTS assets and identify sensitive data within them.

Commercial use

Adding a Log Stream

1

DLI Masking

 DLI data can be masked.

Commercial use

DLI Masking

2

Event Management

DSC integrates with key security components, including Database Audit, Cloud Bastion Host, API Security, Database Encryption and Access Control, and Database O&M, enabling centralized event management and real-time event delivery to DSC. This allows users to promptly verify and handle events. You can also convert alarms on the Alarm Management page to events.

Commercial use

Event Management

3

Identification result download

After completing the sensitive data identification task, you can view the results by clicking Identification Result in the Operation column of the corresponding task in the identification task list. The results will show the total number of sensitive information items, top 10 matched rules, and sensitive information categorizing and leveling results. You can download the result file to your local computer.

Commercial use

Identification result download

4

Image watermarking

The DSC console offers a feature for injecting watermarks into JPG or JPEG files. You can refer to apply customized watermarking to your cloud-stored files in OBS buckets or to images on your local device.

Commercial use

Image watermarking

5

Alarm Management

When a system or service alarm is generated from the DBSS service, the alarm is pushed to the DSC in real time. Users can check and handle the alarm. 

Commercial use

Alarm Management

6

Security Awareness Large Screen

There are always such scenarios as presentation, reporting, or real-time monitoring where you need to present the analysis results of DSC on large screens to achieve better demonstration effect. It is not ideal to just zoom in the console. Now, DSC Large Screen is a good choice for you to display the service console on bigger screens for a better visual effect.

By default, DSC provides an integrated situational awareness dashboard that presents a thorough analysis of risky assets, identification, masking, and watermarking tasks, as well as events and alarms in the cloud. This dashboard facilitates swift recognition and response to the overall status of assets, including addressing risky assets and urgent alarms.

Commercial use

Security Awareness Large Screen

1

Data Privacy Protection

Data Risk Detection is renamed Data Security Operation, including OBS Usage Audit (originally Data Usage Audit) and Watermark Tracing.

Commercial use

OBS Usage Audit

2

Sensitive Data Identification

Sample data can be viewed in the sensitive data identification results.

Commercial use

Viewing the Identification Result

1

Document Watermarking

Added support for batch adding document watermarks.

Commercial use

Document Watermarking

2

Data Masking

Added support for sensitive data encryption and masking.

Commercial use

Masking Rules

3

Database Watermarking

Added support for lossless pseudo-row and lossless pseudo-column watermarks.

Open beta testing

Database Watermarking

4

Asset Map

Optimized the Asset Map GUI.

Open beta testing

Asset Map

5

Access Key Leakage Detection

The access key leakage detection function is brought offline.

--

--

1

Asset map

The asset map helps you build a panoramic view of your data assets. It displays the data distribution, data sensitivity, and risk levels in an intuitive way.

Commercial use

Overview

1

This issue the first commercial release.

DSC is billed on a yearly or monthly basis. DSC provides the standard and professional editions, and the database and OBS expansion packages.

Commercial use

Buying DSC