CYBER TAIWAN PAVILION

In times of conflict, when critical infrastructure in Taiwan, including undersea cables and satellite communications, face disruption, the combination of Persistent Systems MPU5 and cybersecurity technology developed by Jrsys can be leveraged to establish MANET digital resilient telecom networks. Loitering drones equipped with MPU5 MANET can maintain uninterrupted communication, facilitating access and connection for authorized devices even under challenging circumstances. This solution is well-suited for military, police, firefighting, and critical infrastructure applications.

Satellite communication is the most critical link in modern military and commercial network communications. By using post-quantum cryptography (PQC), our solution aids in enhancing the safety of network communication with quantum attack resistance. The system provides a military-grade safety mechanism and is powered by a high-performance SOC platform, which incorporates built-in PQC secure tunnel technology, and a Zero-Trust framework with FIDO authentication. The system establishes strong chip-level trust anchors to enhance the overall security of satellite network systems.

lSECUDOCX INC. provides control and tracking of confidential and sensitive data access based on a zero-trust premise to protect and manage sensitive file contents effectively, thus preventing and deterring malicious acts by outsiders and company insiders. From the moment a file is created, file data is intelligently classified based on confidentiality, and sensitive files are encrypted immediately, keeping highly sensitive files secure while circulating inside and outside the organization. File access is only allowed in a controlled environment, and all user access to sensitive files is recorded and analyzed to effectively safeguard the contents of confidential and sensitive files.

Trustworthy Internet of Military Things (IoMT) Gateway that lays the foundation for dual-use 5G secure mobile networks for military and civilian purposes, supporting highly available and secure multimodal communications. The lightweight Trusted Rich Execution Environments (T-REE) technology and Zero-Trust communication support from FiduciaEdge Technologies safeguard edge devices, communication security, and user data privacy in application services. We provide highly reliable security protection for IoT data analysis nodes, offering a trusted communication endpoint solution.

Our communication modules are designed specifically for drones, and they provide reliable transmission of control signals and video streaming between the ground control station and the drone. The range of transmission varies from 5 to 50 kilometers. The two-way transmission is encrypted, which enhances data security and ensures a secure communication channel for military operations.

ORION ZTMEET is an Eavesdropping-Proof Zero Trust Secure Meeting Solution developed by integrating ORION WebRTC from Octon Inc. into the EAR ZT zero-trust network management platform. It is well tested and commercially deployed on 4G/5G/FTTx/Satellite networks already. ORION ZTMEET has ITRI’s post-quantum cryptography embedded between PDP and PEP to provide quantum threat resistant abilities, too. It makes ORION ZTMEET able to establish secure distributed traffic exchange through mesh like PDP and PEP network to replace traditional centralized traffic exchange to enhance communication resilience during peacetime/wartime, prevent eavesdropping, and ensure minimal latency.

As the quantum era approaches, traditional encryption is facing significant challenges. ITRI PQC team has proposed PQC Chip & System Common Platform, which facilitates industrial development of PQC chips and applications.  This project showcases the Post-Quantum Cryptography (PQC) chip algorithm and silicon intellectual property, which implements algorithms derived from ML-KEM(CRYSTALS-Kyber) and ML-DSA(CRYSTALS-Dilithium). It provides key encryption and digital signature solutions to address future challenges posed by quantum computing. The silicon intellectual property core includes FPGA versions for ARM and RISC-V processors, with applications in finance, communications, medicine, automobile, and national defense to help domestic industries respond to quantum threats and seize post-quantum chip application opportunities.

Chelpis Quantum Corp. is the nation’s sole cybersecurity enterprise exclusively dedicated to post-quantum cryptography (PQC) research and development. Mirle Automation specializes in providing professional solutions for operational technology (OT) in industrial control settings, catering to large-scale operations worldwide. Through collaboration, both entities have jointly developed the industry’s pioneering Quantum-Safe AGV System, integrating a zero-trust architecture (ZTA) with post-quantum secure encryption mechanisms and cybersecurity protections, substantially mitigating the risks of data leakage and unauthorized access.

Industrial control environments have persistently been prime targets for cyberattacks, compounded by the high availability requirements of legacy systems. This solution, leveraging a zero-trust architecture and post-quantum cryptography, fortifies internal network security transmission and remote connection operation control. The system offers traceability features to prevent device data tampering or theft and provides agentless plug-and-play gateways. It also implements industrial control compliance certifications (such as SEMI E187, IEC 62443) to ensure the security of operational technology (OT) systems, thus elevating international competitiveness in industrial control cybersecurity.

Developed by 2udg Inc. in collaboration with other domestic and international companies, the EAR Zero Trust solutions follow NIST SP 800-207 guidelines and are based on the patented OmniBud EAR Zero Trust technologies and Layer 3 and Layer 7 network management technologies named EAR ZT. It owns core components of PDP, 7 models of PEP and essential data sources includes 3 Mode AOTP and FIDO. EAR ZT makes ZTNA deployment easy to reduce the limitation of protected IT/OT devices, network architectures, communication protocols and meet the intra and across organizations requests by E.164 numbering and authentication. After embedding ITRI’s post-quantum cryptography, EAR ZT is ready to cope with the coming impact of quantum threats. PQC ZTNA is not a concept only, it is a commercial network deployed in the real-world already by EAR ZT. 

Comxper is a versatile solution for managing enterprise compliance and can be used to implement various standards on a daily basis. Although compliance management is crucial for a company’s ESG performance and reputation, compliance with industry, government, and international standards can be challenging and abstract. Comxper helps compliance teams to follow regulations and guidelines, organize task forces, conduct targeted self-inspections, track events and corrections, and audit documents. Once certification is obtained, Comxper can continue to help businesses improve their operational performance.

In recent years, the use of facial recognition for access control has been increasing, as more businesses begin to use AI facial recognition systems to manage employee attendance or control access to certain areas. This year, a simulation of a server room scenario will be used to demonstrate the security features of access control devices, showing how they are able to resist spoofing attacks using fake or altered biometric samples. 

With technology constantly evolving, the widespread use of smart mobile devices and the Internet of Things (IoT) has created new vulnerabilities for hackers to exploit. To address this, the Administration for Digital Industries, part of the Ministry of Digital Affairs, has launched a cybersecurity authentication and certification program. This initiative aims to improve the security of mobile applications (Apps) and IoT devices by setting cybersecurity standards. Products that meet these standards will receive cybersecurity labels, incentivizing businesses to prioritize cybersecurity in their offerings.

With the semiconductor supply chain facing increasingly severe threats, under the support of the Administration for Digital Industries, Ministry of Digital Affairs, III collaborated with Taiwan Electrical and Electronic Manufacturers' Association (TEEMA) to release chip security standards and establish Taiwan's first Collaborative Test Laboratory on Chip Security. Furthermore, it obtained the SESIP international certification from TrustCB, a Dutch commercial verification institution. This certification enables chip manufacturers to undergo chip product cybersecurity assessments and testing services, thus achieving the goal of "local testing, global recognition."

While developing communication system software, automated tools that comply with international security standards (3GPP, ORAN) are used for testing, assisting industry players in establishing a security system development life cycle (SSDLC) development environment, which is conducive to tracing and expanding the security of software and hardware systems. needs, assisting industries to more easily develop products that meet diverse needs.

In recent years, there have been numerous security incidents involving access control systems globally. To address this issue, the Industrial Technology Research Institute (ITRI) has developed a solution called "Secure Chip Tunnel Protection Technology" which can ensure the privacy of users is not attacked and their identity information is not stolen. Currently, ITRI is collaborating with DeCloak, a cybersecurity company that specializes in data security and privacy protection, to integrate "Privacy Protection Technology" which uses deep learning to blur images and confuse facial recognition, into the access control system . This collaboration aims to create a safer environment for users of facial recognition access control system.

To reinforce cybersecurity, Billows Technology proposes an AI strategy composed of deception, prediction, and defense. This approach aims to enhance an organization’s existing cybersecurity defenses, achieving the dual benefits of repelling external threats while eliminating internal ones, thereby boosting Taiwan’s capacity for independent cybersecurity research and development.

This facial recognition solution enables secure identity verification without disclosing personal image data. During the verification process, no facial photos are stored or transmitted, avoiding the leakage of individuals' facial privacy. Compared to conventional facial recognition systems, it possesses a higher level of privacy protection mechanisms. This solution can be widely applied in smart healthcare systems, such as signing medical consent forms, verifying patient identities during surgery, confirming medical record access permissions, and controlling access to hospital rooms. It can even integrate with DeCloakVision's wide-area visual information to prevent highly monitored patients from entering hazardous areas inadvertently.

Internationally recognized as the only privacy-secure AI of its kind worldwide, DeCloakVision has been honored with the CES Innovation Award for two consecutive years at the world's largest consumer electronics show! DeCloakVision is a multi-modal AI surveillance system with privacy and security at its core, compliant with international privacy protection regulations. It strikes a balance between protecting individual privacy and enabling targeted observation and tracking for specific activities. Primarily utilized in healthcare, it encompasses detecting patient falls, risky behaviors, and identifying elderly individuals, monitoring their movements when necessary to ensure personal safety. Additionally, the system adopts decentralized AI models, employing differential privacy and homomorphic encryption technologies to achieve secure and anonymous behavioral analysis, thereby providing more comprehensive protection for privacy and security in such as smart healthcare.

• Anti-Virus, Anti-Intrusion, Anti-Web Threat and Firewall rules.
• Protection against vulnerabilities in EOS Operating System, e.g., Windows XP, 2000, 2003…
• Hardware Bypass never interrupts the network connection of backend equipment.
• Industrial Control System (ICS) protocol protection
• Patented Core Technology - Deep Packet Inspection (DPI)
• Compliance with SEMI-E187 cybersecurity guidelines.
• Deployment of multiple layers of defense, including network segmentation and isolation protection, and endpoint protection.

Hospitals that offer online appointment booking and inquiry services, as well as those that have connected medical devices, face increased cybersecurity risks from DNS tunneling attacks. Through collaboration with academia, Billows Technology has successfully designed a situation framework and AI model to form a generative AI module for assisting decision making in response to cybersecurity breaches. In the event of DNS tunneling and other malicious network attacks, alerts can be sent through messaging software while providing recommendations for handling such incidents. The AI-driven security system identifies malicious activity by analyzing network traffic patterns and takes proactive measures to block suspicious traffic, thereby detecting and preventing DNS tunneling attacks. By using AI to bolster cybersecurity, healthcare providers can enhance their defenses against DNS tunneling, safeguard patient data and critical infrastructure, and ensure uninterrupted medical services.

The FIDO passwordless authentication system replaces the use of traditional usernames and passwords with biometrics, eliminating the inconvenience of forgetting passwords and reducing the chance of username and password theft. It uses public-private key pairs, where the private key is bound to the device while the public key is stored in the system. Passwords or personal information are not stored, thus enabling a truly passwordless authentication system. In addition, the software solution has passed identity authentication by the National Institute of Cyber Security, as well as UAF and FIDO2 certification. It is fully equipped to assist government agencies, financial institutions, and enterprises in establishing FIDO passwordless authentication systems.

First in Taiwan! CHANGING is the first company in Taiwan to successfully pass the second-stage certification for the Zero Trust Architecture Device Authentication System initiated by the National Institute of Cyber Security. In a Zero Trust Architecture (ZTA), all connected devices are not trustworthy by default. Devices must be equipped with a Trusted Platform Module (TPM) and must pass authentication before they can connect to the network and access sensitive system information. Devices not on the whitelist cannot connect to the network even if someone has successfully stolen the username and password, effectively preventing unauthorized connections. The Zero Trust Architecture has been successfully implemented in government agencies with cyber security responsibility Level A.

Workplace Safety

In recent years, hacker groups have increasingly utilized various identity-related attack tactics to obtain privileged account permissions and "legitimately" access corporate networks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has even highlighted that their stakeholders continue to endure nation-state level identity attacks, which conventional cybersecurity solutions struggle to detect. By collaborating with CHANGING and CyCraft Technology, our zero-trust solution provides multiple protection checkpoints, multi-dimensional threat exposure assessments, and a management platform for anticipating and mastering field security postures, effectively combating new-generation identity attack tactics. Employees need no longer excessively worry about whether their actions will disrupt company operations; instead, they can focus more on their productive endeavors.