How Alipay’s Trusted Deep Defense System Secures Financial Transactions

Recently, the China Cyberspace Security Association announced the list of "2025 Important Industry Security Protection Typical Cases," and Alipay’s "Trusted Deep Defense System based on Security Parallel Slices" was selected as a typical case for the financial industry and awarded the "Best Case" title.

The case collection, organized by the China Cyberspace Security Association, seeks security protection systems and operational results that demonstrate significant protection effectiveness, innovative technology applications, and efficient management practices across important or cross‑industry domains.

As global enterprises deepen digital transformation, the rapid growth of applications, massive data volumes, diverse access subjects, and increasingly complex access paths create greater security challenges. Existing security controls struggle to keep up, affecting business efficiency, while advanced threats such as APT attacks and targeted ransomware continuously evolve.

To address these risks, Alipay introduced a "Trusted Deep Defense System" that leverages security parallel slices and trusted computing. This architecture implements proactive immune trusted computing, allowing only expected behaviors and providing multi‑layer coverage of all threat paths, thereby greatly reducing the probability of security incidents.

Alipay first proposed the security parallel slice concept in 2019, emphasizing that security and business run in parallel, with security capabilities and business scenarios both integrated and decoupled. By injecting security points through dynamic/static injection and proxy mechanisms, the system enhances defense without modifying original business logic. It builds layered defense models across application runtime, service access, and infrastructure (containers, OS, network) to achieve trustworthy control.

Currently, the Trusted Deep Defense System based on security parallel slices fully covers Alipay’s services, achieving zero false positives, zero missed detections, and zero business interruptions even during peak events such as Double 11, demonstrating high‑performance, precise protection capabilities.