Drills Conference Presentation Publication Incident Report

231 G-ISAC has covered over 98.97 IPs in Taiwan and has shared total of 112,514 security incident and critical information. Figure 3 Distribution of G-ISAC 3. Events OrganizedCo-Organized

3.1. Training

In 2014, TWNCERT has joined the APCERT Steering Committee and is responsible for APCERT Education and Training program. The goal of the training program is to raise comprehensive cyber security technical skills and awareness of members, provide a channel for members to share and exchange valuable experiences with other member teams and thus creates a better cyber environment within Asia Pacific region. On November 5 th , APCERT had 10 member teams attend the first training course event, Malware Behavior Analysis and Detection, presented by TWNCERT.

3.2 Drills

TWNCERT participated in the APCERT Drill in February 2014, and also conducted an annual cyber exercise among the Taiwan government sectors in October.

3.3 Conference

TWNCERT hosted APCERT 11th AGM Conference on March18-21 TH . The theme of APCERT Conference 2014 is “Prepare for a Better Future – The Role of CSIRT 232 Community”. There are 21 APCERT teams from 17 economies and up to 200 attendees to join the annual event on cyber security throughout the Asia Pacific and beyond. 4. Achievements

4.1. Presentation

In 2014, TWNCERT has presented in the following international annual conferences:  APCERT AGM and Conference 2014, March – Taipei  FIRST conference, June – Boston  14th Regional Asia Information Security Exchange Forum Meeting, July- Bangkok  APEC TEL 50, September- Brisbane  Meridian Conference 2014, November- Tokyo TWNCERT also convened several forumsconferences for the Taiwan Government sectors in 2014.

4.2. Publication

TWNCERT collect and publish security advisories, news or guidelines via its website. In 2014, TWNCERT website published 173 security related awareness news. TWNCERT defined Taiwan Government Configuration Baseline TWGCB since 2013. The purpose of TWGCB is to create security configuration baselines for information technology products widely deployed across the government agencies. There are 213 government agencies under poll, 157 agencies have applied TWGCB on business computers. 5. International Collaboration

5.1. Incident Report

In 2014, TWNCERT received more than 3,417 international information security incident reports, provided assistance and cooperation to other CERTs and governments. Chart below is the classification of the incident reports: 233 Figure 4 Classification of the international incident reports TWNCERT has reported Botnet Information via G-ISAC to 19 countries, including Australia, Belgium, Brazil, China, France, Germany, Indonesia, India, Japan, Malaysia, Netherlands, Philippines, USA, Russia, Spain, Singapore, South Korea and Thailand.

5.2. International Organization Membership