I
Cybersecurity Recommendations
The necessary measures to ensure the basic cyber security of the platform:
1.
Use Strong Passwords
Please refer to the following suggestions to set passwords:
The length should not be less than 8 characters.
Include at least two types of characters; character types include upper and lower case letters, numbers
and symbols.
Do not contain the account name or the account name in reverse order.
Do not use continuous characters, such as 123, abc, etc.
Do not use overlapped characters, such as 111, aaa, etc.
2.
Customize the Answer to the Security Question
The security question setting should ensure the difference of answers, choose different questions
and customize different answers (all questions are prohibited from being set to the same answer) to
reduce the risk of security question being guessed or cracked.
Recommendation measures to enhance platform cyber security:
1.
Enable Account Binding IP/MAC
It is recommended to enable the account binding IP/MAC mechanism, and configure the IP/MAC
of the terminal where the commonly used client is located as an allowlist to further improve access
security.
2.
Change Password Regularly
We suggest that you change passwords regularly to reduce the risk of being guessed or cracked.
3.
Turn On Account Lock Mechanism
The account lock function is enabled by default at the factory, and it is recommended to keep it
on to protect the security of your account. After the attacker has failed multiple password attempts,
the corresponding account and source IP will be locked.
4.
Reasonable Allocation of Accounts and Permissions
According to business and management needs, reasonably add new users, and reasonably
allocate a minimum set of permissions for them.
5.
Close Non-essential Services and Restrict the Open Form of Essential Services
If not needed, it is recommended to turn off NetBIOS (port 137, 138, 139), SMB (port 445), remote
desktop (port 3389) and other services under Windows, and Telnet (port 23) and SSH (port 22) under
Linux. At the same time, close the database port to the outside or only open to a specific IP address,
such as MySQL (port 3306), to reduce the risks faced by the platform.
6.
Patch the Operating System/Third Party Components
