ENTERPRISE INFORMATION SECURITY PROTECTION
Overview
To improve the network security capability, we develop technologies such as zero trust solution, security assessment for 5G infrastructure equipment, endpoint protection, and cyber threat intelligence based on AI.ENTERPRISE INFORMATION SECURITY PROTECTION
CORE TECHNOLOGY
- Zero Trust Solution
- 5G Security by Design
- Endpoint Security
- Cyber Threat Intelligence
Enterprise Information Security Core Technologies
ENTERPRISE INFORMATION SECURITY PROTECTION
Application Status
Zero Trust Solution：In line with the National Institute of Cyber Security (NICS)'s strategy to encourage domestic manufacturers to develop commercial products that align with the government's zero trust network deployment architecture, principles, and core mechanisms, we are dedicated to creating Chunghwa Telecom's zero trust solution, “xTrust.” This solution incorporates essential technologies such as identity authentication, device authentication, and trust inference. It complies with the FIDO2 international standard and includes features for data filtering and logging, as well as support for TW-fido. xTrust has successfully passed the Government Zero Trust Architecture Identity and Device Authentication Function Compliance Verification by NICS and was honored with the National Brand Yushan Award in 2024. In light of the increasing number of personal electronic devices and remote access demands, xTrust effectively addresses access control requirements and mitigates the risk of Advanced Persistent Threat (APT) attacks. It bolsters the security capabilities of governments, enterprises, and institutions as they navigate digital transformation.
5G Security by Design：We conduct security tests on O-RAN (Open Radio Access Network) base station open interfaces, 5G Next Generation base stations (gNB), the security of Multi-access Edge Computing (MEC) equipment, and cloud platform security benchmarking for the 5G core network, etc. These initiatives are part of the Asia Silicon Valley - 5G O-RAN Commercial Deployment and International Promotion Project, aimed at enhancing the security of domestic 5G mobile communication products and fortifying MEC equipment and 5G private network applications. Our techniques are based on the O-RAN ALLIANCE security specifications, the NIST (National Institute of Standards and Technology) Cybersecurity Framework, and the security guidelines from the CIS (Center for Internet Security) international organization.
Endpoint Security：We offer information security resource management services, focusing on centrally managing equipment through resource management, vulnerability management, and security management. Our goal is to ensure the effective implementation of information security policies and to enhance the risk and threat management capabilities of terminals within the organization.
Cyber Threat Intelligence： Leveraging big data analysis and AI technologies, Chunghwa Telecom Laboratories has developed the Cyber Threat Intelligence (CTI) system. CTI assists Chunghwa Telecom and its customers in understanding cyber attacks and identifying potential malicious activities, such as external threats and sensitive data leakages. This system is designed to strengthen defenses, minimize the impact of cyber attacks, and enhance overall enterprise security.