CWP (Cloud Workload Protection) is based on massive threat data accumulated by Tencent Security. It uses machine learning to provide users with security protection services such as hacker intrusion detection and vulnerability risk warning. It mainly includes password cracking interception, remote login reminder, Trojan file detection, high-risk vulnerability detection, and other security features to solve the main network security risks currently faced by servers, help enterprises build a server security protection system, and prevent data leakage.
The CWP APIs covered in this chapter are all API 3.0 APIs.
You can call APIs to operate CWP, such as asset management, malicious file scan, intrusion defense, vulnerability detection, and baseline detection.
For all supported API information of CWP, see API overview.
See the table below for common CWP API terminology:
| Term | Description |
|---|---|
| Host | Includes Tencent Cloud servers and non-Tencent Cloud servers. It is the main object of CWP protection. |
| Host list | A feature for unified security control over server assets, including asset sync, categorization, and risk viewing. |
| Asset fingerprint | Collection and identification of asset information such as software, ports, and processes running on a host. |
| Malicious file scan | A security feature that detects files on hosts based on the cloud scan engine and isolates malicious files such as trojans and viruses. |
| Intrusion detection | A security protection feature that detects hacker attacks, including abnormal login, brute force cracking, and malicious requests. |
| Vulnerability detection | Detect security vulnerabilities in hosts and provide remediation suggestions to identify and fix security risks in advance. |
| Baseline detection | Perform security checks and assessments on system configuration and provide reinforcement suggestions. |
| Advanced defense | A security protection feature that monitors and defends against hacker attacks, including network attacks and core file monitoring. |
You can use the API Explorer tool to call APIs online.
This document takes [one-click vulnerability detection] as an example to introduce the steps for calling an API through the API Explorer tool:
피드백