Browsing by Author "Yang, Chung-Huang"

Now showing 1 - 2 of 2

A study on critical infrastructure Information Technology Malfunction controls - Illustration of Taiwan
(2008)
Farn, Kwo-Jean
;
Lin, Shu-Kuo
;
Lin, Kuo-Sui
;
Yang, Chung-Huang
;
資訊管理與財務金融系註：原資管所+財金所
A critical infrastructure (CI) consists of those physical and information technology facilities, networks, services and assets which, if disrupted or destroyed, have a serious impact on the health, safety, security or economic well-being of citizens or the effective functioning of governments. Nowadays, the operation controls of these infrastructures have been computerized and have gradually become open systems. The Malfunction controls of the Information Technology (IT) have been one of the focuses in the researches of information security management in Industrial Control System (ICS). In this paper we discuss the IT Malfunction of ICS security incidents which occurred in Taiwan, and explore the details of the controls for CI.
CORAS for the Research of ISAC
(2008)
Fu, Ya-Ping
;
Farn, Kwo-Jean
;
Yang, Chung-Huang
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
The development of the Internet has elicited the importance of information security. For national information security, other than providence and release of information security protection messages, critical infrastructure information protection (CIIP) has also become part of the overall network security. How to integrate the related information security data for industries and establish the integrative monitoring and analytical platform is the first priority at Taiwan. Hence, the establishment of the Information Sharing and Analysis Center (ISAC) for critical infrastructures has become the most important topic at present. The ISAC establishment places the greatest emphasis on information exchange and analysis so that there must be a unified standard for the exchange format and operation. Because the differences between critical infrastructures are quite large and the sources of the workflow processes and threats are not quite the same, a public tool is required for such establishment. This research discusses how to use Consultative Objective Risk Analysis System (CORAS) to establish ISAC of critical infrastructures and takes a telecom company as an example to simulate episodes of possible risks that might occur and to discuss how it functions, how it is established, and how it handles risks.