Yung-Wei Tang

PricewaterhouseCoopers Risk Consulting Taiwan Ltd. / Risk Assurance Partner

Yung-Wei has dedicated many years to the field of cybersecurity, possessing extensive experience both on the operational side and as a consultant. He has provided corresponding cybersecurity consulting and testing services to numerous financial institutions and technology companies. Additionally, he has contributed to the cultivation of information security talent, with the hope of promoting industry security upgrades and fostering diverse cybersecurity professionals.

SPEECH
4/17 (Thu.) 09:30 - 10:00 7F 701B SecOps Forum
Crisis and Defense of the Fortress of Computation ~ Gaining Insights into the New Battlefield of Cybersecurity through the Security Architecture of High-Performance Computing as Outlined in NIST SP 800-223

In today's rapidly evolving digital landscape, High-Performance Computing (HPC) has become a core technology across various fields, from scientific research to financial analysis, all relying on its powerful computational capabilities. However, with technological advancements, security threats have also grown increasingly complex, highlighting the importance of a thorough examination of the security of HPC environments. This presentation will focus on the NIST SP 800-223 standard, providing an in-depth analysis of the security architecture, threat assessment, and security posture of high-performance computing. The talk will cover the background of NIST SP 800-223 and its significance in HPC security, followed by a discussion on how to establish a robust security architecture to guard against various potential threats. Subsequently, we will delve into the major security threats currently facing HPC environments, including the characteristics and impacts of both internal and external attacks, and offer effective countermeasures. Additionally, the presentation will emphasize the concept of security posture, exploring how organizations can assess and enhance their protective capabilities within high-performance computing.