III won information security award recognized by Information Security Leadership Achievements (ISLA) and promises to continue R&D in cutting edge information security technologies
Caption: The 10th (ISC)2 Information Security Leadership Achievements (ISLA) held a ceremony in Bangkok, Thailand on the evening of July 26. CTTI Section Manager Ching-Hao Mao and Section Head Kai-Chi Chang were recognized in the information security practitioner category. The photo shows David P. Shearer (right), CEO of (ISC)2, and Dr. Jae-Woo Lee (left), Fellow of (ISC)2, presenting the award to CTTI Section Manager Ching-Hao Mao (middle).
Caption: Section Head Kai-Chi Chang were recognized in the information security practitioner category at the 10th (ISC)2 Information Security Leadership Achievements (ISLA). The photo shows David P. Shearer (right), CEO of (ISC)2, and Dr. Jae-Woo Lee (left), Fellow of (ISC)2, presenting the award to Section Head Kai-Chi Chang (middle).
The 10th (ISC)2 Information Security Leadership Achievements (ISLA) held a ceremony in Bangkok, Thailand on the evening of July 26. Section Manager Ching-Hao Mao of the CyberTrust Technology Institute of the Institute for Information Industry and Section Head Kai-Chi Chang were recognized in the information security practitioner category. Between them they hold five patents and have published more than 40 information security related articles at international conferences and in periodicals. Meanwhile, Section Manager Ching-Hao Mao and his team were named an Information Security Practitioner Category Showcased Honoree. At the award ceremony, they shared their research experience in control and analysis of big data security.
The International Information System Security Certification Consortium, or (ISC)2, is the world's largest nonprofit organization of credentialed information security professionals in 135 countries. As part of (ISC)2's global awards program, ISLA aims to recognize the ongoing commitment by information security practitioners to build a highly qualified and ethical workforce and the ongoing commitment by information security leaders throughout Asia-Pacific. The Institute for Information Industry (III) has been recognized by this international information security award in four consecutive years. It reflects international recognition of the III's long term commitment to information and communication security in Taiwan and its performance so far.
Long term investment in information security monitoring and threat analysis, III creating core values of information security R&D in Taiwan
Since joining the III in late 2009, Section Manager Ching-Hao Mao has been involved in collection and analysis of information security data. He is also part of a team building a second-tier surveillance platform in order to apply data analysis and provide an overview of interinstitutional information security threats. The results have been adopted by a number of domestic information security companies. Furthermore, with the support of the Department of Industrial Technology of the Ministry of Economic Affairs, Section Manager Mao and his team have worked on "SecBuzzer - Social Media Security Threat Analysis" and "CTA in Cloud - Cloud Software and Services". SecBuzzers follows information security communities in order to automatically detect popular information security issues. It keeps up with the latest threats by taking advantage of the speed of social media to overcome delays in reports released by large information security companies. CTA in Cloud is designed to support Google Apps for Work and offers calendar search, corporate compliance check, and detection of risky behaviors. The system analyzes users and entity relationships and automatically sends alerts for irregularities in cloud services in order to create a complete cloud computing surveillance environment. Results of his research have been successfully transformed into machine learning applications in information security and taking Taiwan's information security sector to the next level.
Zombie network a growing threat to online security! III: Tracking threats and unmasking zombies!
The other honoree Section Head Kai-Chi Chang, since joining 2008, has been involved in network analysis at ICSTC. He and his team have been working with international information security teams based in Taiwan and other countries on detection of zombie networks with great results. Detection of IoT Botnets in recent years has revealed that most hacked devices are digital surveillance cameras, routers and set-top boxes and include common components of industrial control systems, such as heating pumps, telecommunications equipment and industrial control data loggers. It is estimated that the hacked environment is worth more than NTD10 billion.
The team detected the infamous financial fraud zombie network, Citadel Botnet, between 2013 and 2014, and successfully decoded and restored the bank account numbers, credit card numbers, and personal data stolen by hackers. The European Cybercrime Centre (EC3) had also praised the team's performance. This year, Chang is named an ISLA honoree in the information security practitioner category by (ISC)2 for his successes in tracking IoT Botnets and analyzing IoT Malware.
Two honored for information security achievements and putting III on the map
The III CyberTrust Technology Institute (CTTI) encourages staff to become part of the global information security community. Information security personnel had been invited by the Forum of Incident Response and Security Teams (FIRST) in 2012, 2013, and 2014 to share their experience in encoding loopholes, tracking zombie networks, big data analytics, and information security surveillance technology. CTTI was invited to become a member of the FIRST Vulnerability Reporting and Data eXchange SIG (VRDX-SIG) in 2013.
Furthermore, Section Manager Ching-Hao Mao and Section Head Kai-Chi Chang, besides the recent honors, have often been invited to universities and colleges in Taiwan and speak on their practical experiences in order to raise awareness of online threats among students and to inspire interest in information security research. Technological applications will become increasingly prevalent in the future. CTTI is working to create a momentum in Taiwan's information security industry before taking domestic information security companies onto the world stage.
CTTI(III)：Shu Chiu Hung
Planning & Evaluation Division(III):Meredith Chang, Joy Yen, Freesia Shen