蔡宜學
蔡宜學
財團法人資訊工業策進會
資安科技研究所 網駭科技研析中心 技術經理

(1) Biography :

Mr. Yi-Hsueh Tsai received the B. S. degree in electrical engineering from National Taiwan University of Science and Technology in 1998 and the M. S. and Ph.D degrees in electrical engineering from National Taiwan University in 2000 and 2005. He started working in IEEE 802.16 standardization in 2006 and received “Certificates of Appreciation for contributing to IEEE Std 802.16j-2009” in July 2009. He started working in 3GPP Rel-12 (LTE-A Pro) standardization in 2011, and working in 3GPP Rel-15 (5G) standardization in 2017, and working in both TAICS TC5 and 3GPP SA3 security standardization in 2020. He is currently a Technical Manager in Institute for Information Industry and involved in wireless standards development in both 5G Security standardization and Cybersecurity.

(2) Education : (University, period)

  • PhD., Graduate Institute of Electrical Engineering, National Taiwan University, 2000 Sep. ~ 2025 Jan.
  • Master, Graduate Institute of Electrical Engineering, National Taiwan University, 1998 Sep. ~ 2020 Jun.
  • Bachelor, Department of Electrical Engineering, National Taiwan University of Science and Technology,  1996 Sep. ~ 1998 Jun
SPEECH
演講議程
5/16 (四) 13:00 - 13:30 4F AIoT & Hardware Security Zone AIoT & Hardware Security Summit
落實 5G 資安檢測與防護的重要性 ~ 從意想不到的攻擊情境談起

以 python 實作 5G 網路元件模擬器,模擬 5G 用戶 (UE) 透過 5G 基地台 (gNB) 與 5G 核心網路 (5GC) 連線時,用戶端身分辨試與驗證的工作原理,提出「5G偽冒基地台與5G偽冒核心網路誘騙用戶攻擊」、以及「滲透5G核心網路」等 2大類型資安攻擊情境,由於是針對身分驗證程序的安全問題探究,資安攻擊情境可能造成不同程度身分權限的安全威脅,亦有可能組合成為一連串的帳號設定疏漏,導致駭客可以多種利用,進而取得合法身分權限,可以控制或滲透整個通訊網路。