議   程   資   訊

時   間

主       題

講       者

09:00-09:30

Registration

09:30-09:40

Opening Remark

王偉先理事長

研討主題:「IPv6發展現況及安全考量」

09:40-10:20

全球與台灣IPv6 發展現況

曾憲雄 講座教授

• 亞洲大學 資訊多媒體應用學系
• 台灣網路資訊中心 董事長
• 交通部「新一代網際網路通訊協定互通認證計畫」總主持人

10:20-10:40

Refreshment Break

10:40-11:20

IPv6網路安全

11:20-12:00

IPv6安全焦點座談 (Q&A)

主持人：曾憲雄 講座教授

12:00-13:00

Lunch Break

研討主題: 「網路攻擊及防禦系統分析」

13:00-14:00

Understanding Advance Persistence Attacks (APT) and Countermeasures

Stephen Singam

CISSP (Certified Information Security System Professional), CEH (Certified Ethical Hacker).

CTO HP Enterprise Security Services - Asia Pacific & Japan

• Mr. Singam has an MS in Management of Technology from the University of Pennsylvania and MS in International Management from University of Reading (United Kingdom).
• Mr. Singam designed and developed the first FOX Content Security Architecture, Standards and Policies which covers all release platforms from Script Development to Home Entertainment worldwide. He is also a review member of the 9th working draft of the United States Government NIST Cloud Computing Standards Roadmap.
• Mr. Singam is the Cloud Security and Big Data Security Technical Editor for Information Security The Complete Reference, Third Edition; McGraw-Hill Osborne Media; Publication Date: February 22, 2013.

14:00-15:00

Bring Your Own Device (BYOD) Security

15:00-15:30

Refreshment Break

15:30-16:30

Privacy Guide for Cloud Service Providers and Customers

※以上各節皆包含Q&A時間

16:30-17:00

Cloud Security Application-information analysis & protect

張聖彥 客戶總監/HP-Autonomy

研討主題:「IPv6發展現況及安全考量」

全球與台灣IPv6發展現況

講者:

曾憲雄 講座教授

在上網普及與數位匯流的趨勢下，IP網路迅速地成為目前使用最普及與應用最廣泛的通訊設施，但隨著2011年起國際各區域網路資訊中心陸續宣佈IPv4位址發罄，使得IPv6網路的佈建與使用勢在必行。到底IPv6通訊協定與IPv4有何不同？要如何由IPv4網路環境移轉至同時支援IPv4/IPv6 雙協定的網路環境？全球IPv6網路的佈建和使用狀況為何？台灣已經做了哪些IPv6升級的準備並且是否有IPv6網路服務可以使用？政府與民間在IPv6網路的升級進展為何？本報告將針對全球與台灣 IPv6 的發展現況做完整的介紹。

IPv6網路安全

講者:

曾憲雄 講座教授

IPv6本身的安全性設計上以及IPv6網路運作的安全性上是否優於IPv4？IPv6到底解決或減緩了哪些IPv4已有的一些網路安全問題？IPv6本身又存在哪些安全性弱點？在面對IPv4與IPv6雙網並存的時代，需要在網路安全上做哪些因應準備？由於IPv4位址通訊協定的傳輸模型，並未考慮到安全通訊保密機制的部分，因此導致目前許多常見的網路攻擊行為，必須倚靠額外的防護機制進行補強，比較IPv6與IPv4 在網路安全議題的處理方式，會發現IPv6位址通訊協定在網路安全上有許多設計的優點，這是因為IPv6協定設計時的安全性考量比IPv4更完整，但實際導入IPv4/IPv6雙協定之後所面對的安全性議題時，仍需要檢視IPv6可能發生的安全性弱點，以及各項安全性防禦設備在納入IPv6後所需要考量的工作，才能真正達到IPv6網路安全防護的功效。本報告將針對上述議題做一系列完整的介紹說明與建議。

研討主題: 「網路攻擊及防禦系統分析」

Understanding Advance Persistence Attacks (APT) and Countermeasures/

Bring Your Own Device (BYOD) Security/

Privacy Guide for Cloud Service Providers and Customers

Speaker:

Stephen Singam/ HP ESS CTO

• Creating security value to your business

To improve the value of Business investments, Security professionals must align with the business teams. By understanding what business managers need to achieve, Security teams can employ game-changing technologies and processes that will achieve better business outcomes.

At HP Enterprise Security Services, we believe Business-Security alignment is essential. It not only boosts financial performance and market competitiveness, but it spurs innovation needed for diverse projects, now and in the future whilst Security being an enabler and not an inhibitor

The HP ESS CTO is dedicated help you and your teams to align with business goals while mitigating Security risks.

• Agenda

This complimentary session draws on the experiences of HP industry and Security experts who have helped customers unleash the business building power successfully using Security as an Enabler world-wide.

This session ensures that you receive the breadth and depth of security information you need to formulate your enterprise business visions and goals.

• Snapshot of the key session topics

1. Driving factors

Understanding how Social Media, Bring your own device ( BYOD) and Data Leakage affect businesses and its competitive and corporate strategies.

2. Peer analysis

Comparing Cloud and Mobile environments with peers and industry leaders in terms of Security, Regulatory and Compliance risks.

3. Key priorities

Evaluating key priorities for businesses, required technology capabilities, and IT solutions exposed to current and emerging Security risks.

• Benefits of the Sessions

This HP ESS CTOs & CxOs Session differs from other meetings and standard workshops.

We deliver three important takeaways:

1. Detailed feedback vs. industry peers and leaders.
2. Clarity on how Security can play a profitable role in the business.
3. One-Page Executive summary of the your key business priorities, its associated security risks and practical & cost-effective Security plan.

Cloud Security Application-information analysis & protect

Speaker:

張聖彥 客戶總監/

HP-Autonomy

在上網普及與數位匯流的趨勢下，資料類型已大幅的改變，85% 的資料屬於非結構性資料，且每12個月資料量會增長一倍，巨量資料促使資訊管理的方式改變，有多少資料獲取的管道就有多少外洩的管道，確保資料之機密性、完整性及可用性，維持機關業務之順利運作及保障民眾權益，乃當今不可或缺之議題。

• Analyze all customer insights across all information types.
• Understand customers’ interests and intent inside and outside the organization.
• Automate manual processes to accelerate time to web.
• Act in real time for truly dynamic and targeted experiences