Taiwan’s financial system undergirds a US$760 billion high-tech economy, but its vulnerability to advanced hacks has raised fears of a worst-case scenario: a cyberattack from China that sends its currency and markets into a tailspin.
To bolster its online defenses, government officials and financial institutions in Taipei are consulting security experts from the US Department of the Treasury and working with US cybersecurity company SimSpace Corp to run simulated cyberattacks, cramming a hypothetical three weeks of digital assaults into an eight-hour drill.
Tabletop cyberexercises are hardly new, but the urgency to beef up digital defenses in Taiwan is acute, as it sits at the center of US-China tensions and has a presidential election next month.
Photo: Reuters
A victory by the Democratic Progressive Party could prompt Beijing to take a more aggressive approach toward Taipei.
“Taiwan has near-zero capability to defend itself from these advanced cyberattacks,” said Charles Li (李庭閣), chief analyst at Taiwanese cybersecurity firm TeamT5 (杜浦數位安全).
Li said that his firm’s work tracking state-sponsored hackers in Taiwan showed that most of the country’s companies and government agencies attacked last year “did not even notice that they were being hacked.”
The number of state-sponsored attacks has been soaring, more than doubling in three years, according to TeamT5, which has clients from Singapore to the US.
Moreover, researchers at cybersecurity firm Fortinet Inc said that Taiwan accounted for about 55 percent of the billions of malicious cyberthreats detected in the Asia-Pacific region this year.
The Ministry of Digital Affairs said that the most common attack is focused on stealing sensitive information, and that the frequency and number of threats surge depending upon geopolitical events.
For instance, during former US House of Representatives speaker Nancy Pelosi’s visit to Taipei in August last year, Taiwan “experienced foreign cyberattacks reaching levels 23 times higher than previous peaks” and some government Web sites temporarily went offline due to the large volume of distributed denial-of-service attacks, the ministry said.
That period, which coincided with unprecedented Chinese military drills around Taiwan, highlighted the nation’s vulnerabilities.
“The majority of cases we’re dealing with are espionage attacks, they’re stealing data, and they’re attempting to maintain a persistent presence inside these networks for as long as they possibly can,” said Jon Clay, vice president of threat intelligence at Trend Micro Inc.
The latest exercises indicated that Taiwan’s banks still are not adequately prepared to meet the threat, participants and internal reports said.
“The reality is, they’re getting hammered,” SimSpace Corp cofounder and chief technology officer Lee Rossey said.
The irony of Taiwan’s vulnerabilities is that the nation is home to the world’s most advanced chipmaking technology. The industry has spent heavily on some of the most sophisticated cybersecurity and physical security measures to guard its intellectual property and factories.
However, that has not translated to other sectors of Taiwan’s economy, analysts said.
During the October exercises administered by SimSpace, banks of computer screens flickered and alarms sounded, while an oversized display at the front of the room highlighted icons of bombs and missiles representing cyberattacks and threats.
Camera crews tracked the teams, filming their deliberations and actions to review later.
Besides Boston-based SimSpace, Taiwan has also had talks with experts from the US Treasury’s Office of Cybersecurity and Critical Infrastructure Protection. That engagement is still in the early stages, but the collaboration is expected to help with intelligence sharing on financial security and build new simulators to mimic large-scale cyberattacks on the finance industry and trading systems, people familiar with the plans said.
One scenario Taiwan hopes to implement in future drills is a destruction of infrastructure that results in blackouts and communication breakdowns, the people said.
The idea is to simulate the kind of events that might happen during large-scale natural disasters or military conflict, they said.
China is constantly improving its capability to launch these advanced attacks, said Hank Huang (黃崇哲), who runs the Taiwan Academy of Banking and Finance, a government-advised group that conducts research projects and trainings for the financial sector.
“There is still a long way to go in strengthening national security-level protection for the financial industry,” Huang said.
PATENTS: MediaTek Inc said it would not comment on ongoing legal cases, but does not expect the legal action by Huawei to affect its business operations Smartphone integrated chips designer MediaTek Inc (聯發科) on Friday said that a lawsuit filed by Chinese smartphone brand Huawei Technologies Co (華為) over alleged patent infringements would have little impact on its operations. In an announcement posted on the Taiwan Stock Exchange, MediaTek said that it would not comment on an ongoing legal case. However, the company said that Huawei’s legal action would have little impact on its operations. MediaTek’s statement came after China-based PRIP Research said on Thursday that Huawei filed a lawsuit with a Chinese district court claiming that MediaTek infringed on its patents. The infringement mentioned in the lawsuit likely involved
Taipei is today suspending work, classes and its US$2.4 trillion stock market as Typhoon Gaemi approaches Taiwan with strong winds and heavy rain. The nation is not conducting securities, currency or fixed income trading, statements from its stock and currency exchanges said. Authorities had yesterday issued a warning that the storm could affect people on land and canceled some ship crossings and domestic flights. Taiwan Semiconductor Manufacturing Co (TSMC, 台積電) expects its local chipmaking fabs to maintain normal production, the company said in an e-mailed statement. The main chipmaker for Apple Inc and Nvidia Corp said it has activated routine typhoon alert
GROWTH: TSMC increased its projected revenue growth for this year to more than 25 percent, citing stronger-than-expected demand for AI devices and smartphones The Taiwan Institute of Economic Research (TIER, 台灣經濟研究院) yesterday raised its forecast for Taiwan’s GDP growth this year from 3.29 percent to 3.85 percent, as exports and private investment recovered faster than it predicted three months ago. The Taipei-based think tank also expects that Taiwan would see a 8.19 percent increase in exports this year, better than the 7.55 percent it projected in April, as US technology giants spent more money on artificial intelligence (AI) infrastructure and development. “There will be more AI servers going forward, but it remains to be seen if the momentum would extend to personal computers, smartphones and
Catastrophic computer outages caused by a software update from one company have once again exposed the dangers of global technological dependence on a handful of players, experts said on Friday. A flawed update sent out by the little-known security firm CrowdStrike Holdings Inc brought airlines, TV stations and myriad other aspects of daily life to a standstill. The outages affected companies or individuals that use CrowdStrike on the Microsoft Inc’s Windows platform. When they applied the update, the incompatible software crashed computers into a frozen state known as the “blue screen of death.” “Today CrowdStrike has become a household name, but not in