Taiwan Academic Network Computer Emergency Response Team (TACERT), established in June 2010 and supervised by the Ministry of Education,is the cybersecurity incident response team and coordination center for the Taiwan Academic Network(TANet) serving more than four thousand institutes.The main purposes of TACERT are to respond and coordinate cybersecurity incidents in the network community, to reduce cyber threats and vulnerabilities, to disseminate cyber threat information, and to raise security awareness. TANet has been a primary target for adversaries practicing their hacking skills.TACERT adopts an iterative three-step management method (pre-incident prevention,incident response, and post-incident improvement) for the control and continuous improvement of the network security. TACERT has been actively involved in reducing cybersecurity incidents and raising security awareness by performing the following tasks. 1.Incident response drill: To practice the responsiveness and shorten the response time of incident handling. 2.Security education and training program: To promote the Cyber Security Management Act, to improve prevention and detection skills, to raise security awareness. 3.Incident investigation and malware analysis report: To provide a detailed analysis of incidents and prevention suggestions. 4.Cybersecurity support: To provide technical assistance on incident response. 5.Cyber threat intelligence sharing: To disseminate security trends, vulnerabilities, early warning threats, cybersecurity technologies, and security laws and policies. 6.Incident response coordination: To serve as the contact point and communication channel among different parties involved in incident handling and response. By raising security awareness, assisting incident response, distributing threat intelligence information, and performing the training programs, TACERT has achieved to enhance the security level of the network community and to prevent cyberattacks. |