Title: P2P??????
1?????????????
- ????????????
- ???
- 101?11?8?
2????????
????
????
??
??
????
??
??
??
??
?? ????
???? ????
?? ??
?? ???
???? ???
?? ??
??? ???
3?????????
4 P2P??????
??
???
???
??PC
PDA
NB
5??????
OSI?????? IEEE 802.11 (WLAN??)
(7) Application Layer ??? (?????)
(6) Presentation Layer ??? (?????)
(5) Session Layer ??? (?????)
(4) Transport Layer ??? (?????)
(3) Network Layer ??? (?????)
(2) Data Link Layer LLC Sub-layer
(2) Data Link Layer MAC Sub-layer
(1) Physical Layer Physical Layer
Internet
?????,?? ???????
??????, ??????
6??????
Botnet
?????????
????????????????,?????????,?????????????
7??????????
8????????
???? ????
???? ????
???? ????
???? ????
???? ????
???? ????
???? ????
???? ????
???? ????
9??????????
- ????
- ??????????
- ?????????
- ????????
- ????
- ????????????????
- ??????????
- ?????????????
- ????????????????
- ????????
- ?????????????
- ??????????
10????????????
- ???????????????
- ????????????????,????????????
- ???????????
- ??P2P???IM (Instant Message)??????????????????????
?
11?????????????
- ????????,???????????????????
- ?????????????????,????????????????????
- ??????????,????????????????,???????????
- ??????AD?????????,???????????????????
12Sony?? 7,700?????
- ?????2011-4-28
- Sony???????PlayStation Network(PSN)???????Qriocity
?????,7,700????????????????,?????????????????? - Sony???PS????????????????????????????????????????
???????????????,????????????????,???????? - ??????Ponemon?????,???????,??????????????318??,??2
009???48??????,Sony????????240?????
13?5????? ???????
- ??? 2008-08-27
- ?????!????????????????????????????????,???????????
??????????????????????????,???300?,??????????,????
????5,000???,????????????,????! - ?????????????????????????????????????????,????????
???,?????????,????2,300???????,??????????????,????
??????????????? - ????,????????,??????????????????
14??3,500??????????
- YAHOO????2011-7-28
- ?????????(Korea Communications Commission,
KCC)??,?????????????,??????Nate(www.nate.com)
?Cyworld(www.cyworld.com)????????,????3,500???????
?? - Nate???2,500????????,Cyworld????3,300?????????????
???4,860??,??,??????7?6 - ?????????????,?????????ID????????????,????????????
????? - ????Nate?CyWorld?????,?SK Communications?????????3
00???,??????SK Communications????????????,????,???
???100???,?2.6???????3,500???????????,?SK
Communications??????35????,?9?????(??????)
15???? Zappos??2,400????
- ??????2012-1-30
- ????????Zappos????????
- ????Zappos???????????,???2,400??????,???????E-mail
???????????????? - Zappos??,??????????????
16LinkedIn?? 650????????
- ??????2012-6-11
- ??????LinkedIn????????
- ?????????650??LinkedIn?????,????????Twitter???,???
?????????????? - LinkedIn?6/6??????,????????????,??????????
17????????30????????
- ??????????(Northwest Florida State College,
NWFSC)??30????????????????,????????????,??????????
???
18????? 20?????
- ?????2011-6-10
- ????????,????(Citigroup Inc.)???????,?????20??????
??????????? - ????????????????(Citi Account Online),???????????,
????????????? - ????,?????????????????????,???????????????????????
???????????????,???????,???????
19???2??????????2008???????
- ??????2011-12-26
- ??????????,????????????2??????,??????????????????,
??????????????????,???????2003-2005???
20???1.6?????? ??400?
- ?????2010-12-10
- ??????????99?4???????,???????????????,????????????
??????,??????4??? - ?????????????,??????????????,???????????,?????????
??,???????? - ??????,???????????,?99?4???,?????????????????,???
???????????,????,??????????,?????
21????????????????????
- ??????2012-10-22
- ?????(Burlington)??????????????,???????????????,??
?40??????,??????????????,??????????????????? - ??????????????????????????,????????????????????Bry
an Harrison??,?????????????????,??????????????????
?,?????????????????,????????????
22???????!????????????
- ??????2012-3-5
- ???????,????????????!??????????,???????????,??????
?,??????????????????,??????????? - ?????????????????????,?????????????????????
- ???????????,???????????,?????????????????
23??????? ?????
- ??????? 2010-10-19
- ?????????,????????(Facebook)????????????,?????????
??????????????,?????????????????????,?????????????
???????????????????????????,??????????????????????
??????? - ???????10?????,???????(FarmVille)???????(Texas
Holdem)?,??????????????,????????????????????? - ?????????????????????25????????,??????????????????
?????????
24???Android?? ???????
- ???????2011-5-18
- ????????(Ulm University)??????????,????Android????
???,??????????????????,??????????,????Android
2.3.3????????? - ??????,??????????????,?????????????????????,????Fa
cebook?Twitter?Google???????? - ??,Android 2.3.3????????????????,??Android
2.3.3?????,????????????????????????,???????
25Wi-Fi??? ???????
- ????2010-12-16
- ????,????????????,?????????????????,???????,??????
?????,????????Wi-Fi??,?????????????,???????????? - ?????????,??????????,?????????????????????,???????
??????2?????,?CNN????,???????????? - ????????????Wi-Fi??,???????????,???,??????????,???
???????,??????,???????????????,????
26??????????
- ??????????
- ???????????
- ??????????
- ????????????
- ???????????
- ??????????
27??????????
- ????????????
- ??????????????????????
- ????????
- ????????????????????????????????????????
- ???
- ?????????????????????????????????????????????
- ???????
- ?????????????????????
- ???????
- ??????,????????????
28?????????????
- ????
- ????
- ?????
- ????
- ??????
- ??????
- ??????
- ??????
- ????
- ????
- ??????
- ????
- ????????
- ????????
- ?????????
- ????
- ????
- ??????
- ?????
- ???????
29???????
??????? ????????
?????????
??
??
30???????????
?????????
????
101?10?1?
84?8?11?
99?4?27?
99?5?26?
101?9?26?
???? ???????
????
????? ???????
?????????????
????? ?????????
30
31???????????(1/2)
- ????????????(?3?)
- ???????
- ??????
- ???????
- ????????????
- ????
- ????(?8?)
- ????????,????????????????????????,????????????
- ????(?12?)
- ??????,????????????????????,??????????????
32???????????(2/2)
- ??????(?28?)
- ?????????????????,?????????500???2?????????,??????
???????,?????2?? - ????(?28?29?)
- ??????????,???????????????????????????,???????????
????????????????,???? - ???????????,???????????????????????????,??????????
??????????,????
33???????????
34??????
????
35??????
- ??????????
- ??????
- ?????????????????????????,??????????
- ????????????????????
- ????????????????????????,????????????,??????
????
???? ??????????
36????????
??? ????????
?????? ??????
???? ????????????????????
????? ??????????????????
???????
37????????
?? ???????????
?? ???????????????????????????????????????????????
????
???? ????????(?) ??????
?????????????(?51?)
?? ????????????????
38????????
?????????????????
??????????????????????????
39???????????(1/5)
- ??????
- ???????????,?????????,????????????(?????)??????
- ??????
- ?????????????,??????????????,?????????????????????
???????,?????? - ??????????,????????????????????????????,?????
40???????????(2/5)
- ??????
- ???????????????????????????????,????????,?????????
???? - ?????????,????????????????????,?????????????
- ????????????,???????????,?????????????????????????
??????????????? - ???????????????????,???????????,??????????????????
- ????????????,?????????????????????
41???????????(3/5)
- ??????
- ????????????,????????????????(?)??,???????????????
????,?????????????,????,????????,???????? - ??????
- ???????,?????????????,??????????????????,???????,?
??????????????????????
42???????????(4/5)
- ??????
- ?????????????????????????????2?(?????????????????
,??????????????5 ????2 ??????) - ???????????????2???????(????)??????????5???????(
?????) - ?????????????????????????,????????????,??????????
?,?????????
43???????????(5/5)
- ????????????
- ??????????????,????????,????????????,?????????????
???????,??????????????????????????,???????????,??
?????????????????????,??????????????????
44???????????(1/5)
- ?????????????(?3?)
- ????????????????????????????????
- ????????????(?4?)
- ???????????????????????????,?????????????
45???????????(2/5)
- ?????????(?7?8?)
- ?????????????????????????,?????????????
- ???????????????
- ???????????(?14?)
- ?????????,????????
46???????????(3/5)
- ???????????????(?15?)
- ??????????????,?????????,?????????????????????????
,?????????????????????????? - ???????(?16?)
- ???????????????,??????????????????????????????????
?????????????
47???????????(4/5)
- ????????(?12?)
- ????????????
- ?????????
- ??????????????
- ?????????????
- ???????????????????
- ???????????
- ?????????
- ??????
- ????????
- ??????????????
- ???????????????
48???????????(5/5)
- ??????
- ????????????
- ????????????,??????????,????????????,?????????????
?? - ???????????????,??????????????????????????????????
???????,???????????,??????????????
49?????????????
- ?6????????????????
- ???????????
- ?????????????????????????????
- ?41?54?????????????,???????????????????
- ??????????????,?2???????,???????,?????????,???????
? - ?54?????????,??1???????,??????,?????????
- ??1???????????,?????????,??????????,??????????????
,?????
50?????????????
- ?6????????????????
- ?54?????????,??1???????,??????,?????????
51????????????
- ?????????
- ??????????
- ??????????????????
- ????????????????
- ????????????
52?????????????
?? ??
???? ?????
?????(??????)?????????????,?????????????????(???????),??????? ?????????????????????????????
?????????? (?)?????????????? (?)?????????????? (?)????????????????? (?)?????(???????)???????????????????????????? (?)?????????????????? (?)??????????????????????????? (?)?????????????????????? ??????????
?????????????????,???????????????????(????)????? ????????????????????????,????????,?????????????????? ????????????????????????,????????????????????,??????????,?????????????????
???????????????,?????,??????????????????,????????? ????????,?????????????????????????????(?)?? ?????????????????? ?????????
????http//www.moj.gov.tw/public/Attachment/01217
148267.pdf
53????????????
?? ???? ???????? ???? ???? ?????? ??????? ?????????????? ????????????????(???) ????????????????(????)
? ? ?????????????????????? ???????10??3??????????6??2? 011??????? C001 C003 C011 C038 ?????????????????????????????? ? ? ?
????????????
54????????????????
?????????????????????
55????????????
????????
????
????????????????????
56??????????
???????
????
??????
???? ???????
????????????? ???????
?????????????? ???????????
57??????????
??????????
?????? ????
Where
???? ?????
Who
Why
?????
????? ?????
What
When
??????
Which
??? 6W1H
??????
How
58??????????
??
??
????
??
??
??
??
59????????????
????????????????
- OECD Privacy Principals - APEC Privacy
Framework - ISO 22307 (FS-PIA)
- ISO 27001 - ISO 27005
- ISO 29100
- ISO 27001 / ISO 20000
- NIST SP800-122 / 53
- - BS 10012
??
??
???????
- ?????????? - ??????????? - ???? - ????
- ???? - ???? - ????(??)
Personal Identifiable Information, PII
(??? ?????)
??
??
- ??????? - ??????? - ????????? ????????
- ??????? - ?????????? - ??????????
- ????????? ???????? -???????? ????
?????????????????
60??????
????
??? ????
?????
????????
??
??
??
????
??????
??????
????
????
????
60
61??????????(1/2)
62??????????(2/2)
- ?????????????????????,?????????????
- ??????????????????????????
- ???????????(Activity)??,??????????????????????????
?????????????????????? - ???????????(Task)????
- ????????????????,??????????????,??????
- ????????????????????????????
63????-?????(1/2)
?????(Activity Task) ?????(Activity Task)
Activity1???????? Task1????????(????????)???????
Activity1???????? Task2????????
Activity1???????? Task3??????????????
Activity1???????? Task4???????????
Activity1???????? Task5??????????
Activity2?????? Task1??????????????????????
Activity2?????? Task2?????????????????????
Activity2?????? Task3?????????
Activity3?????? Task1???????????????
Activity3?????? Task2?????????
Activity3?????? Task3??????????
Activity3?????? Task4???????????????
Activity4?????? Task1?????????????
Activity4?????? Task2????????
Activity4?????? Task3????????
Activity4?????? Task4?????????????????
Activity5???????? Task1????????????
Activity5???????? Task2????????????
Activity5???????? Task3????????????????
64????-?????(2/2)
?????(Activity Task) ?????(Activity Task)
Activity6?????? Task1?????????????
Activity6?????? Task2???????????????
Activity6?????? Task3??????????????
Activity6?????? Task4?????????????????
Activity6?????? Task5????????
Activity7?????? Task1???????????
Activity7?????? Task2??????????
Activity7?????? Task3???????????,?????????????
Activity7?????? Task4????????
Activity8?????? Task1??????/??????????????
Activity8?????? Task2??????/??????????
Activity8?????? Task3????????
Activity9???????? Task1??????
Activity9???????? Task2????????
Activity9???????? Task3????????????
65????-????(1/7)
?????? ????
??? ??????????????,????????????????????????????????
???????? ???????????? ?????????????????
???????? ?????????????????? ?????????????????
???????? ????????????????????????? ?????????,???????
???????? ?????????????????????? ???????????????????????????
?????????? ?????????????????????????
???????? ?????????????????? ??????????????????????????????
??????? ???????????????? ?????????????????????
????????? ???????????????????????? ?????????????????????
66????-????(2/7)
????????? ????????? ?????????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ?????? ???????
????????? ????? ???????? ?? ?? ???? ???? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??? ???? ???? ???? ???? ???? ???? ???? ???????
???? ????????? ??????(????) Y Y Y N N N N N Y
???? ???? ??????(????) Y Y Y Y Y N N N N N Y
67????-????(3/7)
????????? ????????? ?????????? ?????????? ?????????? ?????????? ?????????? ??????????
????? ???? ????? ???????? ?? ?? ???? ???? ???? ???? ??
???? ????????? ??????(????) ???? ??? 065 C001, C011, C038, C052
???? ???? ??????(????) ???? ??? 002 C001, C003
????????? ????????? ???????? ????? ????? ????? ????? ?????
????? ???? ????? ???????? ??? ???? ?? ??? ??
???? ????????? ??????(????) ?????? ??? ???? ? SSO?????????
???? ???? ??????(????) ??? ??? ???? ? ?
68????-????(4/7)
????????? ????????? ???????? ???????????? ???????????? ???????????? ???????????? ???????????? ???????????? ???????????? ???????????? ???????????? ????????????
????????? ????? ???????? ???? ??? ???? ???? ???????????? ?????? ???? ?? ???????????? ??????? ?????????
???? ????????? ??????(????) ?? ????(?????????) ???? ??-??????? ???? N/A ????????????????5???????????? ??????????????????????????? ??DB?? N/A
???? ???? ??????(????) ?? ???? ??/email?? ???????mail server/fax server ????????,?IT??????? N/A ???? (??)email?12??(????) N/A N/A N/A
69????-????(5/7)
???? ?????? ?????? ??????
???? ? ? ?
?????? ???????,???????????????????email?????,??????????????(?????????) ??????,??????????????????????????????????????????????????????????????????(?????????)??,?????????????(?????????)(?)?? ??????,?????????????????????????,??????????????????(?????????) (?)??
NIST SP800-122????????????????????????? ???????????????????????????????????????(???????????????????????????????) ????????????????????????????????????(????????????????????,?????????????????????) ??????????????????????????????????????(?????????????????????????,??????????????)
???????????????????????????? ?????????????????????????????????????????????????????????? ?????????????????????????????????????????????,??????????? ?????????????????????????????????????????????,??????????????????????????????????????????????????
70????-????(6/7)
????????? ????????? ???????? PIA/RA????????? PIA/RA????????? PIA/RA????????? ????????
????????? ????? ???????? ?????? NIST SP800-122????????? ???????????????????????????? ????????
???? ????????? ??????(????) ? ? ? ?
???? ???? ??????(????) ? ? ? ?
71????-????(7/7)
????(NIST??) ??????????????????? ??????????????????? ???????????????????
????(NIST??) ? ? ?
???????(AC-3) ?????????????????????????????????????? ???????????????????????(???????????????,??????????(port)?????(protocol)???(services))?????????,?????????????(Role-based access control)?? ???DLP?DRM??,???????????,?????????????,?????????????????????????????
????(AC-5) ??? ??????????????(separation of duties),?????????(?administrator)????????????(log) ???????????????????
??????(AC-6) ??? ????????(AC-5)??????????????? ???????????????????
????(AC-17) ??????????????????,???????????????? ?????????????????????????? ???????????????????
???????(AC-21) ??? ???????????? ????????????/????????SHA-1???????????
????????????(AC-19) ???????????????(?USB????????)?????????????????/????(???????PDA???????????????) ?????????????????(????????) ???????????????????
72??????????
??????????????
73????????????(1/5)
- AC-3 ???????
- ???????????????????????(?????????),????????
???????????????????????,??????????????????????????
? - AC-5 ????
- ?????????????,???????????,???????????????,?
?????????????? - AC-6 ??????
- ??????????????(?)???,??????????????????(???
?????),???????????????????
74????????????(2/5)
- AC-17 ????
- ?????????????????,??????????????????,??????
???????????? - AC-21 ???????
- ????????????????,???????????(??)??????????
- AC-19 ????????????
- ??????????????,????????????????????????????
??,???????????????????????????????????????????????
????,?????????????????????????????????????,???????
??????????????????????
75????????????(3/5)
- AU-2 ????
- ????????????????????????????????????
- AU-6 ???????
- ?????????????????????????????,?????????????
?????? - IA-2 ??????????
- ??????????????????????????????????????????,
?????????????????????????(two-factor
authentication),??????????????????
76????????????(4/5)
- MP-2 ????
- ?????????????,?????????????????????
- MP-3 ??????????
- ????????????????????,?????????????
- MP-4 ??????????
- ???????????????????????????????????,???????
??????????????? - MP-5 ??????????
- ??????????????????,????????????????,???????
???????????????????????
77????????????(5/5)
- MP-6 ????
- ???????????????????????????????????????????
??????? - SC-9 ????
- ??????????????,????????,???????????
- SC-28 ?????????
- ????????????????????????????,??????????????
? - SI-4 ?????????
- ?????????????????,?????????????????
78????-?????
?????(Activity Task) ?????(Activity Task)
Activity1???????? Task1???????????????
Activity1???????? Task2???????????????????????
Activity1???????? Task 3????????????????????
Activity1???????? Task 4??????????
Activity1???????? Task 5?????????????????????????
Activity 2???????? Task 1??????????
Activity 2???????? Task 2??????????
Activity 2???????? Task 3??????????
Activity 2???????? Task 4????????????
Activity 2???????? Task 5????????????
Activity 2???????? Task 6????????????
Activity3???????? Task1????????????????????
Activity3???????? Task 2??????????????????????
Activity3???????? Task 3?????????????????????????
Activity3???????? Task 4??????????????????????
Activity3???????? Task 5????????????????
Activity4???????? Task 1?????????????
Activity4???????? Task 2??????????????????
Activity4???????? Task 3????????????
Activity4???????? Task 4??????????
Activity 5??????? Task 1??????????
Activity 5??????? Task 2???????????????
Activity 5??????? Task 3???????????????
79????-????(1/8)
80????-????(2/8)
81????-????(3/8)
82????-????(4/8)
- ????????-??????????????(??)
83????-????(5/8)
84????-????(6/8)
No Checkbox Checkbox Checkbox Level Control Note
No Yes No N/A Level Control Note
????????1)??????? ????????1)??????? ????????1)??????? ????????1)??????? ????????1)??????? ????????1)??????? ????????1)???????
9 ? ?????DLP?DRM?? ????????,?????????????,???????????????????????????
????????2)???? ????????2)???? ????????2)???? ????????2)???? ????????2)???? ????????2)???? ????????2)????
10 V ? ???????????????? ?????????????????????(log)
????????3)?????? ????????3)?????? ????????3)?????? ????????3)?????? ????????3)?????? ????????3)?????? ????????3)??????
15 V ? ??????Level????????????
????????4)???? ????????4)???? ????????4)???? ????????4)???? ????????4)???? ????????4)???? ????????4)????
17 V ? ??????????????????? ??????????????????????????????????
????????5)??????? ????????5)??????? ????????5)??????? ????????5)??????? ????????5)??????? ????????5)??????? ????????5)???????
21 V ? ????????????????
????????6)???????????? ????????6)???????????? ????????6)???????????? ????????6)???????????? ????????6)???????????? ????????6)???????????? ????????6)????????????
27 V ? ??????????????????????????????????? ???????????????(?USB????????)?????????????????/????(???????PDA???????????????)
85????-????????(7/8)
- ?????????,???????????
- ??????(??????)????(RFP)?,?????????????????????????
????? - ??????(??????)????(RFP)?,????????????????????????
86????-?????????????(8/8)
- ???????????????,????????,??????????????,??????????
?? - ?????????????3???,??????????????????,?????????????
?????
???? ???? ??? ???? ???? ???? ????
???? ???? ??? ???? ???? ???????? ????
?? ?????????? 1.5 ?? O O O
?? ?????????? 1.5 ??? O O O
???? ??(??)?????????? 1 ?? ??? ???
???? ????????????? 1 ?? O
87????-?????
?????(Activity Task) ?????(Activity Task)
Activity1???????? Task1???????????????
Activity1???????? Task2?????????????????
Activity1???????? Task3???????????????????????
Activity1???????? Task4??????????????????????????
Activity1???????? Task5??????????????????
Activity1???????? Task6??????????????????
Activity2???????? Task1?????????????????
Activity2???????? Task2????????????
Activity2???????? Task3???????????????
Activity2???????? Task4??????????
Activity2???????? Task5????????????
Activity3???????? Task1?????????
Activity3???????? Task2?????????????
Activity3???????? Task3????????
Activity3???????? Task4??????????????
Activity3???????? Task5??????????
88????-????
? ? ? ? ? ? ? ? ? ? ? ?
1 ???????????????????? ?? ??? ? ?
2 ?????????????????????? ?? ??? ? ?
3 ????????????????????,???????? ?? ??? ? ?
4 ???????????????????? ?? ??? ? ?
5 ???????????????????,??????????????????????????? ?? ??? ? ?
6 ??????????????????????????????????? ?? ??? ? ?
7 ?????????????????????????????? ?? ??? ? ?
8 ??????????????????????? ?? ??? ? ?
89????-?????
Activity4???????? Task1??????????????
Activity4???????? Task2???????????????
Activity4???????? Task3????????????
Activity4???????? Task4???????????????
Activity4???????? Task5??????????
Activity5???????? Task1?????????????????
Activity5???????? Task2??????????
Activity5???????? Task3??????????????
90????-????
91????????????????????
???????(??)????????? ??????
?????????????? 3.1.1 ????????
??????????? 3.1.4 ?????? 3.1.6 ??????
???????????????? 3.1.7 ?????? 3.1.8 ?????? 3.2.2 ????????
??????????????? 3.3.3 ????????
????????????????????? 3.2.2 ????????
????????????? 3.2.1 ???????? 3.1.9 ???????? 3.2.3 ????????
??????????? 3.2.5 ???????
???????? 3.1.9 ???????? 3.2.3 ????????
?????????? 3.3.2 ????????
???????????????? 3.1.9 ???????? 3.2.3 ????????
?????????????????? 3.4.2 ????????
92????????
??????
???????????????
????????????
????????
????????
?????????
????????????
ISMS????
?????????
??????????
?????????????
?????????????
?????????????
????????
??????????????
???????????
???????????????
????
??????
????????
93?????????
- ??????????????
- ?????????????????
- ????(????)????????????????
- ???????????????????
- ??????????????
- ????????????
94????
- ?????????????
- http//www.moj.gov.tw/lp.asp?ctNode28156CtUnit8
05BaseDSD7mp001 - ??????
- http//www.icst.org.tw/
- ??????????
- http// www.icst.org.tw/ ????????
- ??????????
- http//www.icst.org.tw//????????(?????????)
- e????
- http//elearning.nat.gov.tw/ehrd2005/
- ???????
- http//cybersecurity.tw/
95