Page 76 - 2023年中科VDR報告書_英文版
P. 76

On September 20, 2023, SP-ISAC held the APT (Advanced Persistent Threats) attack
                    detection and protection course. According to the development trend of APT-related
                    information security, it introduced the use of various common knowledge in the

                    practical environment, built basic security defense technology based on background
                    knowledge, and added various new application services as the technical core. In order to
                    focus on the defense field of APT and reduce the risk of APT, it is necessary to implement

                    vulnerability scanning, so as to assist enterprises to find vulnerabilities at the first time,
                    and take immediate steps to fix vulnerabilities and curb hackers.


                    Protection objectives such as assisting in improvement and emergency response: grasp

                    the overall real-time situation through the feedback of information on security incidents
                    and network security threats from the manufacturers in the park, and release the
                    information on security threats (such as information on product and equipment security

                    vulnerabilities and blacklist of attack threats) to other manufacturers in the park to
                    achieve joint defense.


                                                                     Information Security
                             Strengthens Information
                                                                   Intelligence Analysis and
                                      Security
                                                                             Sharing
                                 Protection Awareness                 Collection and analysis
                               Information security drills,           of dome-stic and foreign
                                   technical training                intelligence, and analysis of
                                personnel training and                hacking techniques and big
                                     seminars                                    data






                                 International                          Information Security
                              Information Security                        Consulting and
                              Technology Alignment                          Assistance
                                   Resource integration,               Technical consultation,
                                introduction of information           vulnerability assessment,
                             security consultants, and foreign       emergency assistance, digital
                            expertise and regulatory assistance     forensics and digital protection


                                                               Source: National Center for High-performance Computing


















        74
        74
   71   72   73   74   75   76   77   78   79   80   81