[Dreaming, Modernization, Jointly Drawing a New Vision, the Song of Laborers]

Original title:

Tian Chao, the engineer of the "post-95" generation: be a good "gatekeeper" of network security

Rao Mandi, reporter of Science and Technology Daily He Xinghui

As the largest provincial government cloud platform in China, how many cyber attacks will "Guizhou on the Cloud" endure every day? Tian Chao's answer is: thousands of times.

From the early XSS attacks, SQL injection, to the current popular APT attacks, the network security situation is becoming increasingly severe, and new types of network attacks emerge in endlessly. The safe operation of "Guizhou on the cloud" can not be separated from the network security "gatekeeper" like Tian Chao.

As an information technology engineer of Guizhou Big Data Industry Development Co., Ltd. on the cloud, Tian Chao can always solve the crisis with "unique secrets". Recently, this young "post-95" won the National May Day Labor Medal in 2024.

Stop hackers' sneak attacks at the first time

"My job is very similar to that of a doctor. In addition to doing 'physical examination' for the system, I also need to do 'treatment' in a timely manner." Tian Chao said that the position of "gatekeeper" for network security is very special, and there is no room for any mistakes.

The most ideal state is to eliminate network security risks in the bud. To achieve this goal, Tian Chao not only needs to timely identify potential threats in daily monitoring, but also needs to work closely with team members to jointly develop and improve security strategies and prevent problems before they occur. Once attacked by the network, Tian Chao quickly turned into a "fireman" for network security, and immediately stopped the attack.

In 2023, a user unit was reported by the superior supervision unit that there was a high-risk security problem, which would seriously affect the stable operation of normal business once it was used by hackers.

The user unit is an important part of the "Guizhou on the Cloud" network security ecology. After receiving emergency help, Tian Chao immediately organized an emergency response team and rushed to the scene to conduct a comprehensive detection and analysis of the attacked system. From clues, Tian Chao caught the loophole, isolated and cleaned up the system, timely eliminated the risk hazards, and restored the system to normal operation.

"That was my most nervous experience in dealing with network security incidents. In the end, we not only effectively solved the problems of users, but also improved the team's cooperation ability in actual combat," said Tian Chao.

Ensure the data security of tens of millions of users

In the eyes of Wu Jun, the head of the Security Operation Technology Department of Guizhou Big Data Industry Development Co., Ltd. on cloud, Tian Chao is a person who loves to study.

According to his job responsibilities, Tian Chao will conduct a comprehensive "physical examination" for more than 2000 systems of "Guizhou on the Cloud" every quarter. This means that he needs to prepare more than 2000 "physical examination reports". This work not only consumes a lot of time and energy, but also may have problems such as omissions, errors or inconsistent format.

Therefore, Tian Chao used his brain to develop an automatic creation tool for penetration test reports. This innovation enables a lot of work that needs to be completed manually to be transferred to the program, which not only saves 80% of the writing time, but also improves the accuracy of vulnerability detection by 50%.

In their daily work, Tian Chao and his colleagues found loopholes, put forward warnings, and promptly removed the potential security hazards in the platform, so as to continuously ensure the security of the network platform. Faced with the heavy network security monitoring work, Tian Chao never carelessly wrote more than 600 vulnerability warning notices.

In December 2021, the Log4j vulnerability broke out. This vulnerability was later called "one of the most devastating vulnerabilities in the history of the Internet". For this vulnerability, Tian Chao carried out emergency repair work day and night to minimize the impact of the vulnerability. He tracked and studied new vulnerabilities around the clock, found repair methods and repaired the system in a timely manner, thus avoiding multiple high-risk security incidents.

"Network security is a very interesting and challenging field, which requires not only technology, but also innovative thinking." Tian Chao said that he was very happy to be associated with network security work.

In order to deal with the increasingly frequent and advanced network security attacks, Tian Chao led the technical research on WEB security, IOT security, domain control security, intranet security and security tool development, and proposed many optimization solutions.

In the four years since he joined the cloud Guizhou Big Data Industry Development Co., Ltd., Tian Chao has never had a major network security accident in the system he participated in. Tian Chao told reporters: "We should continue to be a good 'gatekeeper' for network security and protect the information and data of tens of millions of users."