The article analyzes Tianyi Cloud's transition from labor‑intensive cloud service handling to an AI‑driven intelligent assistant, detailing the business challenges, the architecture that couples AI, data, and business middle platforms, and the measurable efficiency gains achieved through model‑based automation.
On June 18, 2026, the People's Bank of China’s Jiangsu branch announced a historic ¥7.21 million fine against Suzhou Bank for eleven breaches spanning network security, data protection, anti‑money‑laundering, and other regulatory areas, highlighting a stark gap between the bank’s proclaimed compliance framework and regulator enforcement.
Many enterprises assume that deploying AI inside their own network saves money and protects data, but a detailed total‑ownership‑cost analysis shows on‑premise solutions cost three to five times more than external APIs, incur hidden hardware, electricity, and staffing expenses, deliver lower performance, and are best replaced by a hybrid architecture.
The article explains how NVIDIA’s AI‑Q Blueprint packages a full deep‑research pipeline into a portable Agent Skill, letting developers add secure, on‑premise research capabilities to existing agent frameworks with minimal code while keeping sensitive enterprise data local.
The article analyses the structural mismatch between banks' demand for instant data‑driven decisions and their legacy, component‑heavy architectures, then details how SelectDB’s high‑performance, unified MPP engine, schema‑change agility, and financial‑grade security enable a real‑time data‑warehouse platform that supports diverse banking scenarios from dashboards to fraud detection.
In September 2024, a Beijing algorithm engineer illegally accessed his company's server cluster, executed a notorious delete command that erased over 89 TB of AI training data and 3D model assets, causing system paralysis and more than 200,000 yuan in losses, and was sentenced to five years and ten months in prison for destroying a computer information system.
On April 27, 2026, China’s National Development and Reform Commission announced a prohibition on Meta’s over‑$2 billion acquisition of Manus, a leading AI agent platform, citing security concerns over key technology, data safety and industrial competitiveness.
In April 2026, the People's Bank of China Xinjiang branch fined Hami City Commercial Bank 3.836 million yuan for multiple regulatory breaches, including cybersecurity and data‑security violations, and also fined two of its technology staff members, illustrating a growing trend of dual penalties for banks and their tech personnel in China.
Discover six quirky yet practical Windows Terminal commands—from visualizing directory trees and monitoring network connections to securely wiping free space, tracing routes, fetching jokes via curl, and enabling speech synthesis—each explained with usage tips, parameters, and real‑world examples to boost your Windows productivity.
Xiaomi Miclaw, an AI agent built on the MiMo large model, launches a limited closed beta to demonstrate system‑level tool access, multi‑turn context management, IoT ecosystem integration, and self‑evolution capabilities while emphasizing data security and user‑controlled permissions.
The new “Automotive Data Outbound Security Guidelines (2026)” issued by MIIT and other ministries seeks to balance data security with cross‑border flow, defining a two‑layer demand, detailing data categories, assessment, contracts, certification, and protection measures, and signalling a massive market opportunity for data‑security services in the automotive industry.
This article reviews the current state, feasibility, industry adoption, concrete deployment scenarios, and future directions of applying large language models to data security, covering technical challenges, architectural designs, prompt engineering, privacy‑preserving techniques, and practical case studies.
The first national medical AI data security and privacy standard, backed by the National Health Commission and industry leaders, outlines a full‑lifecycle risk‑control framework and calls on hospitals, AI firms, regulators and legal experts to join its drafting process.
Major tech firms including ByteDance, Microsoft, and Amazon are banning the AI coding assistant Cursor over concerns that it uploads proprietary code to cloud models, posing data leakage and potential remote control risks, highlighting a broader industry shift from efficiency‑driven AI tools to security‑first policies.
The IEEE 3169‑2025 standard, led by Ant Group, introduces a unified five‑level security grading framework for privacy‑preserving computation across technologies like MPC, federated learning and TEEs, detailing attack‑defense effectiveness, information leakage categories, and additional metrics to guide secure data‑flow implementations.
QR codes, evolving from simple barcodes, now serve as a universal bridge between the physical and digital worlds, enabling rapid data capture, secure transactions, and massive industrial tracking, while their design, error correction, and standards ensure reliability across billions of daily scans worldwide.
This article examines why small‑and‑medium businesses consider cloud‑based inventory solutions, outlines their key benefits such as real‑time data sharing and finance‑business integration, highlights risks like data security and limited customization, and provides practical criteria for deciding whether a cloud inventory system fits your company.
The article recounts how a social‑app team faced compliance rejection, realized the risks of storing passwords, phone numbers, IDs in plain text, and then built a pragmatic encryption‑at‑rest solution that balances security, queryability, and operational simplicity.
This article provides a comprehensive overview of differential privacy, covering its mathematical foundations, evolution from theory to engineering, classification of privacy mechanisms, practical implementation cases such as Alibaba's Secure Data Hub, and diverse application scenarios across healthcare, finance, location analytics, and energy forecasting.
This article examines why containerizing MySQL often leads to data‑security, performance, state, and resource‑isolation problems, outlines five key drawbacks of running MySQL in Docker, and explains the scenarios where containerization can still be viable.
This document outlines the background, scope, key definitions, and strict data security red lines that all employees must adhere to, including prohibitions on bypassing security measures, unauthorized data use, external disclosures, cross‑border transfers, and requirements for handling sensitive information.
Private Set Operations (PSO) enable multiple parties to perform set intersections, unions, and related computations on encrypted data, preserving privacy through cryptographic techniques such as public‑key encryption, oblivious transfer, and garbled circuits, and are applied across advertising, finance, healthcare, and government for secure data collaboration.
The Model Context Protocol (MCP) is an open‑source interface that standardizes how large language models interact with external data sources and tools, offering a USB‑C‑like universal connector for AI applications, with built‑in session management, security, and flexible HTTP/SSE transport for seamless real‑world integration.
The article analyzes why running MySQL in Docker containers can cause data‑security risks, performance bottlenecks, state management problems, and insufficient resource isolation, while also outlining scenarios where containerization might still be viable.
This article details how a Southeast Asian tech giant migrated from Google BigQuery to Alibaba Cloud MaxCompute, redesigning its permission architecture with multi‑level access control, namespace‑based hierarchies, role inheritance, policy‑tag driven dynamic data masking, and cross‑account user management to meet strict security and compliance requirements.
This article introduces the comprehensive design and evolution of a unified metadata lineage platform for big data, covering background, data processing chain, lineage models, system architecture, quality metrics, application scenarios, and future plans to enhance data governance, quality, and security.
The CCF‑Ant Research Fund 2025, now open for its first batch, invites global university and institute researchers to apply by August 25 2025 for up to 50 projects spanning data security, hardware‑software co‑design, supercomputing, and artificial intelligence, with detailed topics, eligibility rules, and submission channels provided.
This article explains why encrypting data transmission is essential, and demonstrates three PHP-based methods—using HTTPS, symmetric encryption (e.g., AES), and asymmetric encryption with OpenSSL—to protect communication, along with sample code and key management tips.
Huolala, a major internet freight platform, outlines its multi‑layered data security compliance system—covering national standards, industry regulations, organizational structures, technical safeguards, lifecycle management, incident response, audits, and AI‑driven maturity models—to ensure robust protection of personal and critical business data.
This article examines how HuoLala, a major internet freight platform, constructs a comprehensive data security compliance system that aligns with national standards, industry regulations, AI‑assisted processes, certification requirements, and a continuous PDCA improvement cycle.
Easysearch, developed by INFINI Labs as a domestically‑optimized replacement for Elasticsearch 7.10.2, offers high compatibility, enhanced Chinese processing, reduced disk usage, built‑in security, and compliance with Chinese trust‑platform standards, making it a cost‑effective, low‑risk solution for tender‑stage search and analytics.
The People's Bank of China has issued a comprehensive Data Security Management Measures, effective June 30, 2025, outlining classification, protection, risk monitoring, incident response, and legal responsibilities for all data processors handling business‑domain data.
The SecretFlow open‑source community and Chengdu Smart City Research Institute co‑host a deep‑tech meetup in Chengdu, featuring leading experts from Ant Group, UESTC, and industry partners who will explore privacy‑computing principles, SPU technology, federated learning, and real‑world financial and governmental use cases through talks and hands‑on workshops.
This article explains why encrypting data transmission is essential, introduces HTTPS, demonstrates how to apply symmetric encryption algorithms like AES in PHP, and shows how to use PHP's OpenSSL extension for asymmetric encryption, providing practical code examples and key‑management tips.
Integrating large language models with the open‑standard Model Context Protocol enables direct access to file systems, databases, and APIs, unlocking use cases such as automated file management, intelligent data analysis, personalized content generation, and task automation, while also raising security, privacy, and maturity challenges for future AI‑human collaboration.
The article examines why deploying MySQL in Docker containers can lead to data‑security, performance, state‑management and resource‑isolation problems, outlines mitigation strategies, discusses scenarios where containerization is feasible, and concludes with a call for community discussion while also featuring promotional material for AI‑related services.
The article explains why deploying MySQL in Docker containers can lead to data loss, performance degradation, and insufficient resource isolation, while also offering strategies and scenarios where containerizing MySQL may still be feasible.
Released by the NDRC, National Data Bureau and MIIT, the 'National Data Infrastructure Construction Guideline' outlines the concept, vision, functions, and architecture of a nationwide data infrastructure, detailing four key pillars—data flow, computing, network support, and security—and sets phased development goals through 2029.
This article explains how to secure PHP data transmission using HTTPS, symmetric encryption (AES, DES, 3DES) and asymmetric encryption with OpenSSL, providing code examples and key management advice to protect confidentiality, integrity, and prevent man‑in‑the‑middle attacks.
The article outlines several reasons why running MySQL in Docker containers is problematic—data security, performance bottlenecks, statefulness, and resource isolation—while also promoting a ChatGPT community and related services.
The Jiangxi "Secure Computing Industry Summit" convened on December 17, announcing a collaborative "Secure Computing Industry Chain Co‑construction Action" that unites leading institutions to promote privacy‑preserving computation technologies across finance, healthcare, and public data, aiming to safely unlock the value of data assets.
This article examines data as a key production factor, analyzes the data‑element ecosystem, explains data‑trust concepts and solutions, reviews relevant policies and market structures, and presents domestic and international practices and case studies illustrating how data trusts can facilitate secure, efficient data circulation and fair benefit distribution.
This article details the design, architecture, and evolution of a self‑developed customer instant‑messaging system, covering its user‑centred philosophy, layered backend structure, technology choices such as WebSocket and Spring WebFlux, and how it solved challenges in gateway design, session storage, message ACK, and queue management to achieve high availability, security, and future‑ready scalability.
This guide walks through why enterprises need to scan and protect sensitive log data, explains the regulatory background, and provides a step‑by‑step implementation on Alibaba Cloud using Data Security Center, Logtail, SPL, Ingest Processors, SDKs, StoreView queries and periodic scans to achieve comprehensive data security and governance.
Huolala’s data team details the evolution of its metadata management platform—covering architecture, stages from early Hive‑ETL to real‑time field‑level lineage, AI‑driven smart search, cost‑governance mechanisms, and security classifications—showcasing practical solutions for data discoverability, efficiency, and protection at scale.
This tutorial explains the fundamentals of data encryption, introduces differential privacy, and guides you through implementing a simple Caesar Cipher encrypt‑and‑decrypt program in Python, complete with code examples, execution instructions, and sample output.
The newly released National Data Standard System Construction Guide outlines a comprehensive framework for data supply, circulation, utilization, and security, emphasizing trusted infrastructure, controlled anonymization, cross‑domain usage control, and unified security assessment to enable safe, efficient data exchange across entities and industries.
This presentation reviews recent research on data security and utilization in the large‑model era, covering privacy‑preserving federated learning, knowledge‑transfer techniques, prototype‑based modeling, multi‑model fusion methods such as FuseGen, and introduces the federated knowledge computing platform FLAIR for both horizontal and vertical federated scenarios.
The article examines why deploying MySQL in Docker containers can be problematic, highlighting data‑security risks, performance bottlenecks, state‑management challenges, and limited resource isolation, while also noting specific scenarios where containerizing MySQL might still be viable.
The second Confidential Computing Forum at CNCC2024, held on October 26 in Hangzhou, gathers leading experts to discuss TEE‑based secure computing, present cutting‑edge research on confidentiality, side‑channel attacks, collaborative trust, and cryptographic applications, and outlines future directions for data security in the digital economy.
From data lifecycle vulnerabilities to inadequate audit coverage, API misconfigurations, weak privileged access, and insufficient encryption, this article outlines twelve common data security risks and their real‑world impacts, helping organizations identify and remediate gaps before breaches occur.
On September 25, Hangzhou announced the nation’s first secret‑computing center, offering end‑to‑end encrypted data storage, processing, and exchange to protect privacy while unlocking the value of big‑data across finance, healthcare, urban governance, commerce, and agriculture.
This article outlines the framework for data element circulation, identifies three major security and compliance challenges in data flow, and presents five practical measures plus a six‑step method for incorporating data assets into financial statements to enhance transparency and value.
This article presents an overview of data security related regulations, outlines the standards for data classification and grading, and showcases industry-specific classification schemes through illustrative diagrams, providing a concise visual guide for implementing data security measures.
This article examines why many enterprises repeatedly suffer data breaches, highlighting common security flaws such as manual permission management, account sharing, lack of least‑privilege, insufficient environment isolation, weak audit logging, and offers practical recommendations to strengthen information security.
This article explores how the rise of massive AI models reshapes data governance, detailing model fundamentals, architectural types, emerging challenges, a five‑domain governance framework, and practical AI‑driven applications for data standards, metadata, quality, and security, while also looking ahead to future trends.
This article reviews the evolution of telephone sales, introduces large model technologies, outlines their integration into intelligent telemarketing workflows, discusses practical implementation methods, challenges, and future trends, and shares insights from industry experts on optimizing AI‑driven sales automation.
At the 2024 China Cryptography Society Cryptographic Chip Academic Conference in Chengdu, Ant Group’s Vice President Wei Tao highlighted the evolution from general to intelligent to secure computing, emphasizing the pivotal role of cryptographic chips in data protection, AI development, and cross‑industry applications while calling for deeper industry‑academia collaboration.
This article explains how data has become a strategic resource, outlines the economic and industrial value of data, differentiates data governance from data security governance, and reviews major data security frameworks and a data‑centric security architecture to guide organizations in protecting their data assets.
At Bilibili, the security team adapted Microsoft’s Security Development Lifecycle by establishing capability practices such as training, threat modeling, secure coding, and component scanning, integrating these processes into development pipelines through dedicated business partners, extending protection to the full data lifecycle, and evolving toward automated DevSecOps with in‑pipeline DAST and a custom vulnerability management platform.
This article explains why encrypting data transmission is essential, then demonstrates three PHP-based methods—enabling HTTPS via SSL/TLS, applying symmetric algorithms such as AES, and using asymmetric encryption with OpenSSL—to protect confidentiality, integrity, and authentication of web communications.
This article outlines the evolution of data security in China, explains why data classification and grading are central to governance, and provides a step‑by‑step framework, principles, implementation details, adjustment triggers, and practical reflections for building effective data protection strategies.
This article explains how a leading insurance technology group leverages large language models to streamline data security compliance, detailing the evolution of data management, key governance challenges, multimodal AI architecture, and practical workflows for policy enforcement, risk monitoring, and asset management.
This article presents Ping An's comprehensive approach to data security compliance, detailing its evolving data management framework, the integration of large‑model AI for classification, risk monitoring, and assessment, and practical insights from a Q&A session on governance and operational challenges.
Data security, centered on the full data lifecycle, demands deep defense against dynamic, continuous risks; by adopting a new operational mindset and a comprehensive metrics system, organizations can achieve greater visibility, control, sustainability, and trustworthiness in protecting their data assets.
The 2024 WAIC Privacy Computing Forum gathered leading experts from academia and industry to discuss how encryption, anonymization, and secure multi‑party computation can protect data privacy while enabling large‑model training and inference, highlighting technical challenges, standards, and emerging solutions across AI, big data, and information security domains.
The article analyzes why deploying MySQL in Docker containers can lead to data‑security, performance, state‑management and resource‑isolation problems, while also outlining scenarios where containerizing MySQL might be feasible and offering practical mitigation strategies.
This presentation by senior data warehouse engineer Huang Luo details Wing Payment’s end‑to‑end data warehouse build, covering background challenges, governance framework, platform architecture, layered modeling, naming standards, asset management, monitoring, and future plans, illustrating how systematic data governance drives cost reduction, efficiency, and security.
The National Data Bureau’s June 12, 2024 Data Lecture Hall focused on privacy computing technology theory and practice, featuring expert talks, emphasizing secure yet usable data sharing to boost the digital economy, and gathering over 110 officials and specialists to discuss challenges and solutions.
The article outlines a comprehensive government data processing security framework—including management, technical, personal information protection, operational, regulatory, and assessment requirements—that offers reusable, practical guidance for data security across various sectors.
This article explains how a data security governance platform protects data across its entire lifecycle—from warehouse construction and collection to application—by implementing fine‑grained permission controls, encryption, masking, authentication, and comprehensive auditing, while addressing scalability, high availability, and regulatory compliance challenges.
The article outlines how data has become a critical production factor, reviews national policies, industry and enterprise challenges, and presents six key trends—including DataOps, DataFabric, and AI‑focused governance—that shape the future of data management and security.
This article explains how Microsoft Dynamics 365 leverages Azure’s multi‑layer security architecture—including zero‑trust, encryption, role‑based access control, identity management, continuous monitoring, and compliance features—to safeguard data against threats and ensure privacy for enterprises adopting cloud ERP solutions.
The Chinese national standard GB/T 43697‑2024 on Data Security Technology – Data Classification and Grading Rules has been officially released, providing universal classification guidelines and set to take effect on October 1 2024, offering essential direction for implementing data classification and grading management.
This article explains how a comprehensive data governance framework—covering data quality, metadata, master data, asset management, security, and standards—can ensure high‑quality, safe, and traceable business data while outlining implementation steps, organizational roles, platform features, and assessment methods.
This article explores the key challenges of building a large‑scale instant‑messaging service—including message reliability, ordering, read‑sync, data security, avalanche effects, and weak‑network handling—and presents practical architectural and algorithmic solutions for each problem.
Data classification and grading, essential components of data security governance, involve defining data categories, assigning sensitivity levels, adhering to national standards, and establishing organizational processes to ensure compliant, secure, and value‑driven data handling across enterprises.
In this interview, 360 Group’s Vice President of Technology Yin Yuhui discusses how the company’s Intelligent Document Cloud leverages large‑model AI to transform enterprise knowledge management, enhance data security, and deliver innovative SaaS and private‑cloud solutions for businesses of all sizes.
This article presents a comprehensive, scenario-driven data governance practice at Guoxin Securities, covering the industry's pain points, a three‑layer governance framework, detailed implementations for data standards, metadata, data quality, data modeling, and data security, and outlines future directions for intelligent and measurable governance.
This article outlines the securities sector's data‑governance background, vision, common pain points, and a comprehensive service‑oriented framework covering data models, quality, standards, metadata, and security, and demonstrates the resulting business value and future outlook.
The IEEE Standards Association has published the world’s first privacy‑computing integrated‑machine standard (IEEE 3156‑2023), highlighting China’s leadership in privacy‑preserving data technologies and outlining hardware, software, and security requirements that aim to foster global adoption and reduce collaboration costs.
This article explores enterprise data security governance, outlining practical methodologies, implementation pathways, and real-world case studies to guide organizations in planning and establishing robust data security governance frameworks while highlighting key challenges, compliance considerations, and measurable outcomes for sustained protection.
The article examines the rapid growth of China's digital economy, the rising demand for secure data circulation, and how Trusted Execution Environments (TEE) are evolving through hardware and software advances, interoperability efforts, and large‑model privacy solutions to address emerging security challenges.
iQIYI's proactive compliance risk disposal platform and full‑lifecycle privacy protection scheme were recognized by MIIT as outstanding cases, showcasing engineering‑driven privacy integration across product development, release, and operation, improving compliance rates, reducing risks, and enhancing user experience while setting industry standards.
This article explains how Python's hashlib and hmac modules can be applied in API automation to compute hashes, generate salted password hashes, create HMACs, verify data integrity, encrypt sensitive information, and produce secure tokens, providing ten practical code examples.
Over the past year JD Retail’s technology team has rolled out a suite of AI‑driven breakthroughs—from end‑to‑end inventory management and explainable AI in supply chain, to large‑language‑model frameworks, advanced advertising, edge‑AI, secure data platforms, and high‑quality 3D modeling—earning industry awards and boosting efficiency across e‑commerce.
In 2023 JD Retail’s technology team delivered a suite of AI‑powered innovations—including end‑to‑end inventory management, explainable AI for supply chain, privacy‑preserving advertising models, a ReAct‑SFT‑RAG large language model framework, edge AI inference, secure data‑safe‑house infrastructure, and high‑quality 3D modeling pipelines—demonstrating broad academic and industrial impact across multiple domains.
In 2023 JD Retail Technology showcased a series of AI‑powered innovations—including end‑to‑end inventory management, explainable AI for supply chain, large‑language‑model frameworks, edge‑device inference, data‑security "security house", and high‑quality 3D modeling—demonstrating how advanced algorithms and large‑scale computing boost efficiency, accuracy, and user experience across the e‑commerce ecosystem.
This article details Xiaomi's approach to isolating production environments for data development, covering platform evolution, security and quality challenges, physical versus logical isolation techniques, productization steps, implementation roadmap, business impact, and practical Q&A insights.
This article outlines the background, importance, scenarios, challenges, objectives, and architectural design—including RBAC and ABAC models, metadata integration, data classification, and verification mechanisms—of a comprehensive big data permission management system for secure and fine‑grained data access.
This article introduces the self‑service data extraction platform developed by the Government Procurement Cloud, detailing its architecture, core modules such as self‑service extraction, data push, resource management, operation audit, permission controls, performance optimizations, and future development plans.
Since 2021 Chinese platforms have begun displaying users' IP location down to the province or country, sparking privacy debates, legal scrutiny, and practical advice on how IP addresses work, what data they reveal, and how individuals can safeguard their online anonymity.
A developer mistakenly set a cloud disk snapshot to public, exposing a major client’s data, and recounts the frantic rollback, the ensuing panic among teammates, and the hard‑won operational lessons about high‑risk manual tasks, proper safeguards, and the need for visualized tooling.
Alibaba Mama’s Secure Data Hub delivers a privacy‑enhanced clean‑room for advertising by combining multi‑party computation, federated learning and differential privacy with encrypted operators on a Flink engine, offering cloud‑agnostic, scalable deployment that enables cross‑domain analytics while protecting raw user data and boosting ROI.
This article describes the evolution of Zhaozhuan's data services, the design and architecture of the One-Service unified query platform supporting multiple storage engines, its security and intelligent query features, and future plans for finer-grained permission control, multi‑engine support, online service isolation, and improved usability.
XiaoHongShu’s award‑winning Zero‑Trust SASE Office Security Solution integrates all‑in‑one DLP, anti‑virus, identity‑bound access and distributed POPs to replace fragmented agents, delivering real‑time risk control, data‑non‑landing protection, multi‑level disaster recovery, and achieving 100% device coverage, an 80% reduction in data leakage and a 70% internal NPS after one year.
This article presents a detailed case study of how Jiangsu Bank and Ningbo Bank leveraged Ant Group’s multi‑party secure computation platform and the “YinYu” privacy‑computing framework to build joint risk‑control models, enhancing data sharing, security, and approval rates for inclusive finance.
The 2023 Big Data “Galaxy” case competition highlighted Alibaba Mama and Jiahe Tech’s privacy‑computing based cross‑domain advertising tracking and whole‑domain asset analysis as an outstanding example, detailing the Secure Data Hub platform, its use of multi‑party secure computation, federated learning, differential privacy, and the resulting improvements in data flow, compliance, and marketing efficiency.
This article explains how PHP's built-in encryption functions such as md5, sha1, base64_encode/decode, and openssl_encrypt/decrypt can be used to secure data transmission, provides code examples demonstrating AES‑128‑CBC encryption and decryption, and highlights their role in protecting sensitive information.
The author recounts a 2018 incident where a cloud disk snapshot was unintentionally made public, exposing customer data, and shares a detailed reflection on the operational mistakes, risk management failures, and recommended safeguards for high‑risk cloud operations.
