大家好：
因近期國內外發生數起駭客入侵金融機構及公司行號若干資訊系統事件，故提醒大家使用資通訊設備及各類系統時，務必注意相關資安要求事項。以下兩點為近期資安注意事項：

1.NAS 的資安要求
  1.1 校內若有開放NAS服務的管理人員，請務必修改預設密碼，所有可登入之帳號的密碼需符合規定(8碼以上，包含英文大寫字元、英文小寫字元、數字、特殊符號)。
  1.2為符合資料傳輸之機密性的要求，NAS服務應採用網站安全傳輸通訊協定（HTTPS）加密傳輸。校外資安稽核單位將會對本校開放允許校外連線IP進行不定期查核，故請有提供NAS服務的單位，務必以HTTPS進行資料傳輸。
  1.3 NAS應設置在校內使用，若有校外連線需求，請盡量使用VPN連線，勿直接開放校外網路連線。

2.資通訊設備交接
校內人員若有承接其它人員轉移之資通訊設備時，請務必執行下列步驟： 
  2.1備份資通訊設備內重要的資料至其它裝置。
  2.2將移交帳號的密碼予以修改，不可沿用原有的密碼。
  2.3盤點設備內所有帳號，請將未使用或已離退畢業的帳號停權或刪除；確認擁有管理者帳號（如Super user）的密碼是否符合資安規範(8碼以上，包含英文大寫字元、英文小寫字元、數字、特殊符號)。
  2.4資通訊設備若為筆電或桌機，請在備份重要資料後，進行硬碟格式化，重新安裝作業系統及所需軟體。
  2.5依本校相關資訊安全規範進行資通訊設備之資安設定。

若有資安相關問題，請洽電子計算機中心技術諮詢推廣組：
張云蘋 6929  applechang@mail.ntust.edu.tw
游順發 6209  rogeryu@mail.ntust.edu.tw

Important Notice for Information Security

Hello everyone,

Due to several recent incidents of hacking into the information systems of financial institutions and companies, therefore, please be reminded about the relevant information security requirements when using information and communication equipment and information systems. Please read the following notices for information security:

1.NAS information security requirements
  1.1 If there are administrators who open NAS services in the school, they must change the default passwords. The passwords of all accounts must comply with information security regulations.( 8 chars or more, including English uppercase characters, English lowercase characters, numbers, and special symbols.)
  1.2 In order to meet the confidentiality requirements of data transmission, the NAS service should use the website secure transmission protocol (HTTPS) to encrypt the transmission. The off-campus information security audit unit will check the IP of the school that allows off-campus connections. Therefore, units that provide NAS services must use HTTPS for data transmission.
  1.3 The users of the NAS are all on-campus personnel (eg. faculty, staff and students), if need for off-campus connection, please use a VPN connection as first priority, and do not directly open the off-campus network connection.

2.Transfer of information and communication equipment
  2.1 Back up important data in the information device to other hard drives.
  2.2 To modify the password of the transfer account, the original password cannot be used.
  2.3 Inventory all accounts in the device. Please suspend or delete unused or resigned, retired, graduated accounts. Please confirm whether the password of the account with the super user conforms to the information security regulations. (Above 8 codes, including English uppercase characters, English lowercase characters, numbers, and special symbols.)
  2.4 For laptops or desktops, please format the hard disk after backing up important data, and reinstall the operating system and required software. 
  2.5 Set information security according to relevant campus information security regulations.

For more question about information security, please directly consult with Computer Center, at rogeryu@mail.ntust.edu.tw or applechang@mail.ntust.edu.tw