A Survey on Security Vulnerability Analysis for Taiwan’s High-Tech Industry

• Main Authors: Chih-ta Chen, 陳志達
• Other Authors: none
• Format: Others
• Language: zh-TW
• Published: 2011
• Online Access: http://ndltd.ncl.edu.tw/handle/84989822865062014763

碩士 === 雲林科技大學 === 環境與安全工程系碩士班 === 99 === After the September 11, 2001 terrorist attack in the United States, public concerns were focused on the prevention of deliberate actions by terrorists and criminals. In order to avoid mass incidents caused by terrorist to those plants operating hazardous materials (HAZMAT), The United States’ Department of Homeland Security (DHS) had enforced the Chemical Facility Anti-Terrorism Standards (CFATS) and related acts to improve the Security Vulnerability Analysis (SVA) and preventive management of chemical process industries (CPI) that handle HAZMAT. The SVA is a comprehensive consideration to integrate the factors of location, process, and cyber security issues as well as threat and vulnerability analysis, security countermeasures, emergency response and mitigation. Since high-tech industries were our important economic sources in Taiwan, many manufacturers increase their productivity and use more and more HAZMAT and, hence, increase the leakage risks of possible accidents or deliberate actions. Therefore, it is necessary to promote the SVA process for our high-tech industries. This study surveyed sixty-nine optical and semiconductor manufactories with chemical processes in three science parks and members of TESIA (Taiwan Optoelectronic Semiconductor Industry Association). The questionnaires were on the situations of safety management, emergency response, mutual assistant and SVA. The results indicated that both industries performed well on information and cyber safety, especially on intellectual property right protection and cyber safety. However, the prevention of deliberate actions and the consequence analysis of possible accidents were not established uniformly for all. It is needed to promote those concepts and preventive measures. Considering the physical security, those manufacturers would have high risks of deliberate attacks due to their high visibility, accessibility and attractiveness. They would need to strengthen their functions in monitoring system and related security facilities as well as to improve their awareness and training. According to the years’ experiences of SVA in other countries, we should adopted their assessment methods and technology with our active critical infrastructure (CI) protection plan in order to assess our important resources and CIs and to promote proper risk management.