• Products & Solutions
    • Enterprise Network Solutions
      • MPLS Private Network
      • MPLS Remote Access (SSL VPN)
      • SD-WAN
      • Private WAN Ethernet
      • Dedicated Internet
    • Enterprise Cloud Solutions
      • Managed Cloud – ONE Cloud Director
      • Cloud Connect
      • Cloud Backup and Disaster Recovery
    • Cybersecurity Solutions
      • Secure Access Service Edge (SASE)
      • Threat Prevention – DYXnet CloudShield
      • Secure VNF – DYXnet EdgeShield
      • Email Security
    • AI & Other Solutions
      • AI Computing Solution
      • Enterprise AI Applications
      • Video Conferencing – Zoom
      • Enterprise Data Centre Services
      • ICT Consultation
  • Industry
    • Banking & Professional Services
    • Retail & Manufacturing
    • Education & Public Sector
    • Healthcare
    • ICT
    • Travel & Logistics
  • Company
    • About DYXnet
      • Overview
      • Awards and Recognitions
      • Corporate Social Responsibility
    • Newsroom
      • In the News
      • Events
      • Multi-media Centre
    • Work with us
      • Office Location
      • Career
      • Partnership
  • Resources Centre
    • Customer Service
      • Customer Login Portal
      • Customer Self-Service Platform
      • Customer Charter
    • Download Area
      • Customer Success Stories
      • Solution Brochures & Services Forms
  • Get In Touch
Login
DYXnet logo CN CMYK
  • Products & Solutions
        • Enterprise Network Solutions
          • MPLS Private Network
          • MPLS Remote Access (SSL VPN)
          • SD-WAN
          • Private WAN Ethernet
          • Dedicated Internet
        • Enterprise Cloud Solutions
          • Managed Cloud – ONE Cloud Director
          • Cloud Connect
          • Cloud Backup and Disaster Recovery
        • Cybersecurity Solutions
          • Secure Access Service Edge (SASE)
          • Threat Prevention – DYXnet CloudShield
          • Secure VNF – DYXnet EdgeShield
          • Email Security
        • AI & Other Solutions
          • AI Computing Solution
          • Enterprise AI Applications
          • Video Conferencing – Zoom
          • Enterprise Data Centre Services
          • ICT Consultation
  • Industry
        • Healthcare
        • Banking & Professional Services
        • Retail & Manufacturing
        • ICT
        • Education & Public Sector
        • Travel & Logistics
  • Company
        • About DYXnet
          • Overview
          • Awards and Recognitions
          • Corporate Social Responsibility
        • Newsroom
          • In the News
          • Events
          • Multi-media Centre
        • Work with us
          • Office Location
          • Career
          • Partnership
  • Resources Centre
        • Customer Service
          • Customer Login Portal
          • Customer Self-Service Platform
          • Customer Charter
        • Download Area
          • Customer Success Stories
          • Solution Brochures & Services Forms
  • Get In Touch
HK

Global

EN
HK

Hong Kong

EN
繁
CN

Mainland China

EN
简
TW

Taiwan

EN
繁
Login
HK

Global

EN
HK

Hong Kong

EN
繁
CN

Mainland China

EN
简
TW

Taiwan

EN
繁
DYXnet logo CN CMYK
  • Products & Solutions
        • Enterprise Network Solutions
          • MPLS Private Network
          • MPLS Remote Access (SSL VPN)
          • SD-WAN
          • Private WAN Ethernet
          • Dedicated Internet
        • Enterprise Cloud Solutions
          • Managed Cloud – ONE Cloud Director
          • Cloud Connect
          • Cloud Backup and Disaster Recovery
        • Cybersecurity Solutions
          • Secure Access Service Edge (SASE)
          • Threat Prevention – DYXnet CloudShield
          • Secure VNF – DYXnet EdgeShield
          • Email Security
        • AI & Other Solutions
          • AI Computing Solution
          • Enterprise AI Applications
          • Video Conferencing – Zoom
          • Enterprise Data Centre Services
          • ICT Consultation
  • Industry
        • Healthcare
        • Banking & Professional Services
        • Retail & Manufacturing
        • ICT
        • Education & Public Sector
        • Travel & Logistics
  • Company
        • About DYXnet
          • Overview
          • Awards and Recognitions
          • Corporate Social Responsibility
        • Newsroom
          • In the News
          • Events
          • Multi-media Centre
        • Work with us
          • Office Location
          • Career
          • Partnership
  • Resources Centre
        • Customer Service
          • Customer Login Portal
          • Customer Self-Service Platform
          • Customer Charter
        • Download Area
          • Customer Success Stories
          • Solution Brochures & Services Forms
  • Get In Touch
HK

Global

EN
HK

Hong Kong

EN
繁
CN

Mainland China

EN
简
TW

Taiwan

EN
繁
Login
HK

Global

EN
HK

Hong Kong

EN
繁
CN

Mainland China

EN
简
TW

Taiwan

EN
繁

【Chinese Only】WePro180 : 紅藍攻防大賽奪佳績 第一線網絡安全團隊專業「練兵」

News BACK TO PREVIOUS

Jan 20, 2025

紅藍攻防大賽奪佳績 第一線網絡安全團隊專業「練兵」

隨著科技發展,網絡安全威脅變得無孔不入,攻防戰時刻上演。網絡安全團隊的角色就如軍隊,為企業網絡做好防守,保護寶貴的數碼資產。到底網絡安全團隊如何「練兵」?今天我們就訪問了 DYXnet 第一線的網絡安全專家團隊——這隊夢幻組合去年首次參加由 Fortinet 舉辦的「紅藍對戰 攻防演練大賽」,從業界十二隊隊伍中脫穎而出,取得亞軍佳績!同時,第一線團隊亦分享了安全事故應對策略貼士,有助企業提升網絡安全態勢。

 

「第一線攻防演練大賽 2025」匯聚第一線中港台三地團隊的網絡安全精英參加。

 

攻防演練分秒必爭 各司其職堅守網絡安全防線

近年網絡安全業界興起紅藍攻防演練,旨在加強安全團隊對網絡威脅的應對能力。攻防戰模擬現實中各式各樣的網絡攻擊情景,由紅隊扮演攻擊者,藍隊負責防守,參賽者不僅要具備專業知識,還需熟悉各種防禦措施、工具及人員配置,以應對不斷變化的網絡威脅。在 Fortinet 舉辦的「紅藍對戰 攻防演練大賽」中,各參賽隊伍擔當藍隊防禦者,對抗由 Fortinet 專家組成的紅隊攻擊。第一線派出四名網絡安全精英參賽,他們在攻防戰中各司其職:隊長是資訊安全顧問鍾而政(Louis),他負責識別環境中的弱點,從而制定加強保安措施的方案;資訊安全產品經理曾昭儒(Alfred)對網絡安全工具及產品的能力有透徹理解,為制定防守策略提供精準建議;另外還有資訊安全工程師謝浩賢(Howard)及陸子朗(Richard)負責具體的技術操作,他們在日常工作中累積了豐富經驗,能迅速察覺風吹草動!

 

代表第一線出征 Fortinet 紅藍攻防戰的四位核心成員,比賽時各司其職,合作充滿默契。

 

比賽設四個題目,涉及的安全事故範疇相當廣闊,包括特權存取管理(PAM)、遙距控制管理、阻斷服務攻擊(DDoS)、勒索軟件、釣魚攻擊等多種情況。Louis 指出:「我們必須迅速判斷警報事件的性質,將高風險事件及時攔截,但同時要避免錯誤攔截失分。」比賽節奏非常緊湊,Alfred 笑言:「比賽每節 15 分鐘,期間紅隊不停攻擊,所有事故都極具嚴重性,我們連上洗手間及喝水的時間都沒有!」Richard 回憶道:「計分板即時顯示分數,令我緊張不已,司儀在開始不久後即宣佈其他隊伍開始得分,而我們仍然是零!」Howard 補充:「我們是後來居上的,起初還未熟習比賽系統,但我們始終保持著自己的節奏,逐漸追上來。」

「團隊的默契是致勝關鍵,這次比賽不僅加強了團隊的信任及合作,還提升了我們對相同類型安全事故的響應效率,也增進了我們應對新型攻擊的能力。」Louis 續說:「我們有幸獲得亞軍,是對第一線團隊的肯定。我們非常期待下一場比賽。」

 

團隊的默契是致勝關鍵,這次比賽不僅加強了第一線資安團隊的信任及合作,還提升了對相同類型安全事故的響應效率,也增強了應對新型攻擊的能力。

致力培訓網絡安全專才 首辦三地攻防演練大賽

第一線的網絡安全團隊訓練有素,面對不斷進化的網絡攻擊,團隊不僅緊貼時下最新的網絡攻擊趨勢,還會定期進行「軍演」,包括剛於上週首次舉辦跨區紅藍對戰攻防演練——「第一線攻防演練大賽 2025」,匯聚來自中港台三地 SOC、NOC 及 QSM 部門的網絡安全精英組隊參賽。第一線在可控的雲端 One Cloud Director 中設置模擬真實的網絡環境,針對企業日常遇到的各種攻擊進行模擬訓練,當中包括數據外洩、內部可疑通訊、OWASP 攻擊、企業應用程式漏洞、DDoS 及釣魚郵件等不同範疇,考驗參賽隊伍在警報事件調查、事故排查及響應等方面的應對能力。

 

以為 Louis 等人再次在比賽中獲勝?原來這次他們倒過來擔任紅隊,向八隊藍隊展開攻擊!Louis 解釋:「這種思維轉換相當重要,以黑客角度去分析漏洞,才可以知己知彼。」他們在比賽後跟參賽者進行回顧和經驗分享,結合紅藍隊的意見及角度,他續說:「這種操作在網絡安全領域中稱為『紫隊(Purple Team)』,可增進協同合作,識別大家在演練時錯過的問題。」

 

策劃這次攻防演練的第一線產品及服務管理集團總監施純烽(Joe)表示:「我們將攻防演練作為內部培訓的重要一環,這些訓練可讓安全團隊沉浸式體驗到最新的攻擊趨勢及進階持續性威脅,進一步強化應對能力之餘,更可提升團隊協作和時間管理,確保團隊在實際情況出現時能迅速響應,保護客戶的網絡及數碼資產。」

 

「第一線攻防演練大賽 2025」匯聚第一線中港台三地團隊的網絡安全精英參加。

企業定期進行安全審計 提升網絡安全態勢

在當前瞬息萬變的安全環境中,企業必須加快反應速度,以防止黑客在入侵後迅速掃描網絡並盜取資料。Joe 指出,企業應做好日誌管理,有效利用安全事件排查工具,這些工具可以幫助 IT 人員快速識別和應對事件。他提到,「如遇高風險事件,企業可以使用自動化響應工具,迅速將其阻截,這樣不僅可以減少損失,還能提高整體的安全防護能力。」

 

此外,基本的防護措施如端點偵測(EDR)、入侵防禦系統(IPS)、IT 系統庫存管理(IT Inventory Management)和補丁管理(Patch Management)等,也是企業降低事故發生機率的重要手段。這些措施能夠在黑客尚未入侵之前,提供一層有效的防護。Joe 提醒,「企業應定期進行安全審計和漏洞掃描,以確保所有系統和應用程式都已更新,並且沒有已知的安全漏洞。」若 IT 人手不足,企業則可考慮採用第一線的網絡安全託管服務 MDR,由專業的 SOC 團隊持續監控及即時響應,確保安全事故發生時能快速有效地應對。Joe 強調,「企業在面對日益嚴峻的網絡安全挑戰時,必須採取主動的防禦措施,才能在這場無形的戰爭中立於不敗之地。」這樣的防護不僅能保護企業的數據資產,還能增強客戶的信任,為企業的長遠發展奠定堅實的基礎。

 

Source:wepro180 https://www.wepro180.com/%E7%B4%85%E8%97%8D%E6%94%BB%E9%98%B2%E5%A4%A7%E8%B3%BD%E5%A5%AA%E4%BD%B3%E7%B8%BE%e3%80%80%E7%AC%AC%E4%B8%80%E7%B7%9A%E7%B6%B2%E7%B5%A1%E5%AE%89%E5%85%A8%E5%9C%98%E9%9A%8A%E5%B0%88%E6%A5%AD%E3%80%8C/

DYXnet Hosts its First Cross-Region Simulated Attack and Defense Exercise to Strengthen Cybersecurity Capabilities
Previous Article
【Chinese Only】中國財富網: 春節網絡安全不容小覷 第一線DYXnet “內外兼修” 時刻提供防護保障
Next Article

DYXnet logo CN CMYK_allwhite

Quick Links

About VNET
Customer Self-service Platform

Products & Solutions

Enterprise Network Solutions
Enterprise Cloud Solutions
Cybersecurity Solutions
AI & Other Solutions

Industry

Banking, Financial & Professional
Retail & Manufacturing
Education & Public Sector
Healthcare
ICT
Travel & Logistics

Connect with us

Linkedin Weixin Youtube
Contact Us
Privacy Statement  | AI Ethics Statement | Disclaimer & Copyright | Copyright 2025 by DYXnet. All Right Reserved.
粤ICP备17165541号 合字B1.B2-20080003
Privacy Statement  | AI Ethics Statement | Disclaimer & Copyright | Copyright 2025 by DYXnet. All Right Reserved.
粤ICP备17165541号 合字B1.B2-20080003
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Cookie settingsACCEPT
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled

Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

Non-necessary

Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.

SAVE & ACCEPT