On December 30, the Cyber Information Security Ecosystem Cooperation Forum under "eSurfing Digital Technology Ecosystem Conference 2022" was held on the cloud. Li Jun, Vice President of China Telecom, released the eSurfing Cloud Security White Paper, which comprehensively elaborated the security development vision of China Telecom eSurfing Cloud and provided a guidance for the industry to build secure, stable and reliable cloud services.

Li Jun, Vice President of China Telecom

Release Ceremony of eSurfing Cloud Security White Paper

Guang Xiaoming, deputy General Manager of China Telecom Cloud Technology Co., Ltd., interpreted the eSurfing Cloud Security White Paper. With new threats emerging, the cloud security has become increasingly severe and complex in recent years. Cloud security technology is confronting with numerous challenges. In order to effectively cope with the cyber security risks, the White Paper, centering on the core concepts of integration and openness, trustworthiness and controllability, elasticity and robustness, and intelligence and flexibility, puts forward the target conception of building an eSurfing Cloud security system that is characterized by independent core technologies, industry-leading defense capabilities, full-stack products ordered as per use, and guarantee of robust and effective operation.

Guang Xiaoming, deputy General Manager of China Telecom Cloud Technology Co., Ltd.

Centering on the target conception of the security system, the White Paper systematically introduces 20 key measures of eSurfing Cloud security system, covering the following five aspects: technology system, capability system, service system, operation system and ecosystem construction.

In terms of technology system, eSurfing Cloud has built a first-class cloud security R&D system, proactively implemented DevSecOps, accelerated the breakthrough of cloud security core technologies, improved the layout of ITAI security technologies, and completed the supply chain security governance system. With respect to capability system, eSurfing Cloud has continuously consolidated its operation capability, strengthened its security and compliance governance capability, enhanced its security protection capability for key information infrastructure, improved its safeguarding capability for major activities, and built its system elasticity. In regard to service system, eSurfing Cloud has developed the full-stack and multi-scenario cloud security products "Red Shield" series, and provided multi-scenario solutions to enhance 7x24 professional security services. As for operation system, eSurfing Cloud has improved the system and process, increased the platform operation capability, strengthen the daily operation capability, and enhanced the availability of talents. In terms of ecosystem construction, eSurfing Cloud has established a broad and solid National Cloud alliance ecosystem, and practiced a shared responsibility system.

At present, eSurfing Cloud has made fruitful achievements in security atomic capability, defense-in-depth system, integrated smart O&M, etc. It has been widely recognized for its overall security capability, and has won a number of certifications and honors, including MLPS Level-3 certification for nearly 70 resource pool nodes, and the highest rating of 5-star Plus Trusted Cloud Service for 66 resource pools. Meanwhile, eSurfing Cloud's IaaS security capability ranks first in the number of passed certifications in the industry and has been honored to receive the Award of Trusted Cloud Service for 8 consecutive years.

Cloud security is the cornerstone of rapid development of digital economy. With the changes of demands and the continuous evolution of countermeasure techniques, eSurfing Cloud will further strengthen its capacity building in cloud native security, integration of cloud, network and security, and autonomy of cloud security core technologies, create a cloud-network security system with higher quality, embark on an innovative, secure and trustworthy development of eSurfing Cloud with China Telecom’s characteristics, and join hands with partners to build the prosperity of National Cloud security ecosystem.