Public Mission

Cyber Security

2023-06-28
HKIRC 網絡安全青年計劃 2023 - 網站安全挑戰賽 (Chinese Only)
介紹

 

本年度首次採用學校隊制形式作賽,參賽同學需要具備出眾的能力之餘,亦考驗團隊合作能力,挑戰性大大提升!賽前會先接受網絡安全專家提供的專業培訓,再透過漏洞掃描平台進行比併!

 

 

計劃目標

 

網絡安全青年計劃的目標是識別和培養年輕的網路安全人才。這不僅能提高對網路安全的認知和知識水平,也可以鼓勵他們在網路安全領域進行道德實踐。同時,提高對網路安全職業規劃和深造的認識和興趣,有助於激發年輕人對網路安全事業的熱情和追求,進一步推動網路安全事業的發展。

 

 

計劃重點

 

  • 基本網絡安全知識
  • 針對職場的網絡安全攻擊 ​
  • 認識常見網站漏洞
  • 網站安全審計常用工具
  • 網站漏洞發掘的技巧
  • 課程完成後將安排學生參觀相關網絡安全機構

 

 

比賽詳情

 

  • 主題: 利用賽前培訓的知識,模擬網路安全研究人員識別應用程式漏洞。
  • 語言: 廣東話教授 ,使用英語教材和考核系統
  • 比賽: 比賽將分為兩部分
    • 初賽: 得分最高而且最快完成訓練後的挑戰的首二十名隊伍將有資格進入決賽。
    • 決賽: 參賽隊伍需要測試和探索漏洞網站程式,識別潛在漏洞並在有限的時間內提交報告。
HKIRC Healthy Web_Vertical - 320x240
16 June 2023
Healthy Web
HKIRC has always attached great importance to the Internet security of .hk users. In order to improve the website security of .hk users, HKIRC will launch a new website initial security health checking service "Healthy Web" to assist .hk users to review the use of their website security technology by following the criteria of OWASP Top 10. If any material adverse findings such as the disability of application security setting or the use of vulnerable website servers, etc. have been discovered, HKIRC will inform users of the appropriate precautions so that they can understand the potential risks of the website as soon as practicable and strengthen their awareness of the need to protect it.
HKIRC Cybersec Training Hub_Vertical - 320x240
2 August 2022
HKIRC Cybersec Training Hub
Introduction of the Programme Cybersec Training Hub is a complimentary self-learning platform initiated by Hong Kong Internet Registration Corporation Limited (HKIRC), which aims to lower the threshold for organisations to provide cybersecurity trainings to employees, particularly for SMEs with limited. Our vision is to jointly build Hong Kong into a healthier and safer cyber-smart city by enhancing cybersecurity awareness among different industries and employees, as well as reducing cybersecurity risks from the source.   Objectives of the Programme Offer complimentary resources for organisations to provide cybersecurity trainings to employees Raise employees’ awareness and interests in cybersecurity through interactive training elements Jointly build Hong Kong into a healthier and safer cyber-smart city   How to Start Bookmark the website of Cybersec Training Hub (cyberhub.hk) Schedule the training for your employees flexibly. On-boarding training for new joiners are highly recommended. Employees will receive an e-certificate after completing the 20-minute online self-training Send the e-certificate to HR/managers as a training record     Benefits of the Programme   Tailor-made training content Professional training content provided by well-known Big-4 cybersecurity consultancy firms User-friendly, interactive, and ready-to-use Available in Traditional Chinese and English Cybersecurity topics in real-life business environment Introduce cyber risks in real life working scenario Trainings targeting at different job positions (e.g., HR, Finance, etc.) Complimentary and easy-to-use for all SMEs Complimentary platform Flexible online trainings with no login required Layman-friendly content E-Certificate to be issued after trainings   Download the Promotion Leaflet here (available in Traditional Chinese only) Visit cyberhub.hk to start your free training NOW!     Enquiry HKIRC Cybersecurity Team:  cybersec@hkirc.hk  
view2BGtooeasy-02
20 May 2022
HKIRC Cyber Youth Programme - Game aided Learning for Cyber Security
Introduction of the Programme Cyber Youth Programme - Game aided Learning for Cyber Security is a programme initiated by Hong Kong Internet Registration Corporation Limited (HKIRC), which aim to education cybersecurity knowledge and skills via fun channels to students from primary schools or above. The programme includes: 1. Mini-Games and 2. Comic, which cover three cybersecurity topics that students commonly faced in usual daily life: Account - How to protect their accounts of devices and software Website - Understand the potential risks of browsing on the internet and stay alert Phishing - How to identify suspicious messages and avoid fall into the traps   Objectives of the Programme Enhance cybersecurity awareness among students, teachers and parents “Gamification” the difficult concept of cybersecurity to facilitate the education and teaching Raise interests of students towards cybersecurity   Mini-Games HKIRC cooperated with Hong Kong Education City (EdCity) in 2022 to develop 6 cybersecurity mini-games into EdCity’s game platform “Small Campus” - a safe virtual environment for stimulating students’ learning motivation through games. After the first game Quiz Challenge (Cybersecurity) “我問你答(網絡安全版)” , the second wave is also available now! Challenge yourself now by login to EdCity's “Small Campus” (https://www.smallcampus.net/) and choose the games! (Available in Traditional Chinese only)   Mini-Game Introduction Fun Question Game (Cyber Security ver.) 我問你答(網絡安全版) There will be total 15 levels of multiple choices question from a pool of 150+ cybersecurity-related questions from the topics - Account, Website and Phishing. Players need to choose the correct answer from 4 choices to reach the top of it.   Whac-A-Mole (Cyber Security ver.) 扑傻瓜(網絡安全版)​ Themed as domain name and safe browsing, the game has 5 stages in total. Players start from the easiest to the hardest stage by stage, and win the game by successfully choosing the correct answer.   Fishing (Cyber Security ver.) 釣魚魚(網絡安全版)​ The aim of the game is to teach players how to set a password up to standard. Within the time limit, players need to follow the instruction of the question, select a password that meets the requirements, and get the highest score.   Others 3 more mini-games will be available soon, stay tuned!     Click Here to Download the Mini-Game Details.   Comic Besides the mini-games, HKIRC also develop a comic as learning materials on the same topics - Account, Website and Phishing. Meet our Cybersecurity Ambassador “DotDot” (點點) and his friends in the comic to see what cybersecurity issues they faced in their daily life and how to protect against it to be a smart Cyber Youth! Let's download the eBook to check it out!    Download the eBook for Free:  Click Here to Download! (Available in Traditional Chinese only)   Enquiry HKIRC Cybersecurity Team:  cybersec@hkirc.hk
hub_thumbnail
1 September 2020
Cybersec Infohub - Partnership Programme for Cyber Security Information Sharing
  Cybersec Infohub is a partnership programme jointly administered by the Office of the Government Chief Information Officer (OGCIO) and the Hong Kong Internet Registration Corporation Limited (HKIRC) to promote closer collaboration among local information security stakeholders of different sectors to share cyber security information and jointly defend against cyber-attacks. Please visit “Cybersechub.hk” for details about the programme. Cybersec Infohub Leaflet   Objectives of the Programme Establish a cross-sector, trusted collaborative network to share cyber security information; Provide a collaborative platform for sharing information to give a better visibility of cyber security situational awareness; Cultivate local collaborative culture among the industry for effective cyber security information sharing; and Enhance the overall cyber resilience of Hong Kong against territory-wide cyber attacks.   Membership Criteria Any local organisation with its business address in Hong Kong and owns a “.hk” Internet domain name Manage an electronic communications network and have operational needs for cyber security information   How to Join: Register for FREE at: www.cybersechub.hk/en/register   Case Sharing   Karin Founded in 1977, Karin Group started its business as an electronic parts distributor. As the market changed, the group started to transform aggressively in the millennium, expanding its business scope to include corporate IT brands and consumer electronic products distribution. As one of the leading IT resellers in Hong Kong, the Group joined Cybersec Infohub to communicate with the industry and understand the needs of SMEs for network security. >> Karin   Cybersec Infohub The Cybersec Infohub Launching Ceremony cum Members Professional Workshop was held last year on 29 September, marking the collaboration between the Office of the Government Chief Information Officer (OGCIO) and the Hong Kong Internet Registration Corporation Limited (HKIRC) in running the formalised Partnership Programme for Cybersec Infohub. Representative of PwC comment that organizations in different industries can obtain the latest cyber security information shared by participating organizations of Cybersechub.hk to respond to various cyber attacks. >> Cybersec Infohub   Enquiry: admin@cybersechub.hk
2 January 2020
Free In-depth Website Security Scan Services
Protect Your Website: Prevention is the best action   Introduction: With the aim of assisting local SMEs to identify and mitigate cyber security issues, HKIRC is now offering a free in-depth website security scan service to all .hk users. A detailed report and a phone consultation will be offered to all participant.   Potential Cyber Security Risk from Website: Injection Broken Authentication Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging & Monitoring   Why Do You Need It: To get the picture of your website security condition To protect against cyber-attack To prevent leakage of sensitive information To keep systems robust   Scanning Process: The scanning process will not affect your website operations, no change of technical settings or passwords is necessary.   Eligibility: All .hk domain user   How to Join: Fill in the application form with signature and company chop Attach one scanned copy of the following supporting documents Business Registration Certificate (BR) issued by the Inland Revenue Department (IRD) of HKSARG, or Tax exemption letter issued by Inland Revenue Department (IRD), or Certificate of a Society issued by the Hong Kong Police, or Certificate of a school issued by Education Bureau of HKSARG Submit to sme-security-scan@hkirc.hk   Success Stories: Website security scanning tools helped clients locate problems hidden in their system We helped customers who have technical difficulties in liaising with their hosting providers and vendors Consultants provided professional advices and solutions to customers who have email phishing Customers gained industry knowledge in cyber security   Case Sharing iEnterprise Since its establishment seven years ago, iEnterprise has been actively helping to match people with different disabilities with jobs. In order to provide a safe and inclusive Internet environment for the minority to work from home, it joined HKIRC Website Scanning Programme. >> iEnterprise   PixelByte Technology PixelByte Technology is a typical local SME that regularly publishes product information and company events on its website. In order to understand the risks and weaknesses of the company's website, PixelByte Technology was one of the first companies to participate in HKIRC Website Scanning Programme. >> PixelByte Technology   Enquiry: Email: sme-security-scan@hkirc.hkPhone: 2319 2303FAX: 2319 2626Address: Unit 501, Level 5, Core C, Cyberport 3, 100 Cyberport Road, Hong Kong