關鍵基礎設施資訊安全實務
CRITICAL INFRASTRUCTURE CYBER SECURITY PRACTICES

最新消息

1. 1. 修課注意事項  (2024.06.23 17:15)

本課程上課方式將結合位於成功校區計網中心之油水電資安試驗平台，於該平台進行相關實務研究，故有部分上課時間會移地至計網中心場域上課。

課程資訊

學分數  3 

開課學期 114學年度第一學期 

課程概述  

講述常見關鍵基礎設施中工業控制系統架構、協定等概念，並配合案例及標準，介紹各種安全需求及相關規範，進而了解工業控制系統網路安全監控、評估及事件回應等議題。並結合實際場域進行相關實驗，驗證課程中講述專業知識。

Describes the concepts of industrial control system architecture and protocols in common critical infrastructure, and introduces various cyber-security requirements and related specifications with cases and standards, and then understands issues such as industrial control system network security monitoring, evaluation, and incident response. And carry out relevant experiments in combination with the actual field to verify the professional knowledge described in the course.

學習目標

1. 了解關鍵基礎控制系統架構

2. 了解關鍵基礎控制系統常見資訊安全問題

3. 探討及了解常見的關鍵基礎控制系統防護方式

教學大綱 

(參考說明，密碼為上課教室)

課程教材

講義、期刊等資料

參考教材

1. Industrial Cybersecurity: Efficiently monitor the cybersecurity posture of your ICS environment (2nd Edition), Pascal Ackerman (Packt)

2. Industrial Cybersecurity Essentials, Cisco Networking Academy Course

3. Guide to Industrial Control Systems (ICS) Security, NIST

講授方式

• • 講授 Lecture 30%

  • 實作 Workshop 30%

  • 報告 Presentation 40%

成績考評 

• 作業 40%

• 期中考 20%

• 期末考 20%

• 個人報告 20%

課程進度

週次　進度

1. Overview of Industrial Control Systems and Architecture

2. ICS Risk Management

3. ICS Risk Assessment

4. The Industrial Demilitarized Zone

5. Designing the ICS Architecture with Security in Mind

6. Introduction to Security Monitoring

7. Passive Security Monitoring

8. Active Security Monitoring

9. Midterm Exam

10. ICS Security Architecture

11. Applying Security Controls to ICS

12. Monitor Visualizing

13. Event Correlating

14. Event Alerting

15. Threat Hunting

16. Case Study

17. Final Report-1

18. Final Report-2

備註

N/A

講義

1. 1. N/A

助教資訊

助教姓名：俞漢陽

實驗室：電機系 啟端館 2樓 網宇安全實驗室 (R96208)

校內分機：62400 轉 3133

電子信箱：ta@cysec.ee.ncku.edu.tw

教師聯絡資訊

電子信箱: ihliu@cysec.ee.ncku.edu.tw