Resources
These links point to public material from government agencies, standards bodies and non-profit organisations. They are not owned by Kunan Technology; the publishing body is authoritative.
10 references
NCCoE’s full record of building several zero trust architectures in a lab, including real configurations and the problems encountered — the closest thing to a public implementation log.
csrc.nist.gov
A matrix of tactics and techniques drawn from observed intrusions. The lateral movement entries map directly onto what a segmentation policy needs to cover.
attack.mitre.org
Vulnerabilities with evidence of active exploitation. For prioritising a patch schedule, this tracks real risk more closely than a CVSS score does.
cisa.gov
The authoritative source of vulnerability identifiers, and the shared index across every intelligence feed and scanning tool.
cve.org
Annual threat trend analysis from a European perspective, with attack technique statistics by sector — a citable source for a risk briefing.
enisa.europa.eu
The ten most significant application security risks, derived from real data — the usual starting point for security training with a development team.
owasp.org
A control list grouped into three implementation tiers — a way to decide what to do first when resources are limited.
cisecurity.org
Taiwan’s local vulnerability disclosure platform, covering products from domestic vendors — particularly useful for assessing local supply chain risk.
twcert.org.tw
Taiwan’s national body for security policy research and technical services, publishing technical specifications and intelligence commonly cited in public sector projects.
nics.nat.gov.tw
The competent authority’s source for announcements and regulatory interpretation, including the subordinate rules under the Cyber Security Management Act.
moda.gov.tw
