臺灣博碩士論文加值系統

在 2020 年因為 COVID-19 疫情讓全球不論是在經濟成長或個人生活都帶來了巨大的刺激與變革，而其中對企業與員工帶來最大的變動則是不同的工作型態-遠距辦公(Work Remotely / Working From Home, WFH)，此變動無非迫使企業加速思考如何規劃開放員工透過外部連線存取企業內部資源。
隨著雲端服務概念逐漸融入日常生活，行動網路已不再對終端設備造成連線瓶頸，行動裝置應用也隨之急遽的蓬勃發展;現今的行動裝置應用，已不再如過往單純的僅具備傳統通訊功能，已可內含或整合諸多的附加功能，目前也已進入了成熟的行動裝置時代，行動裝置已經徹底融入了現今使用者日常生活的一部分。
隨著疫情逐漸趨緩之際，遠距辦公逐步成為常態性工作模式，企業更需要縝密規劃相關安全控管探討，也需要合乎企業內部的資訊安全管理系統，員工可能透過自己的一般設備或是行動設備，經過網際網路存取企業內部資源，因此無論企業或員工，想要充分享有遠距辦公帶來的便利，在導入前需要綜合更多面向的評估，以及準備充足的配套措施，才能發揮最大的效益。
本研究整理出企業打造遠距辦公平台時，需在連線方式、身份驗證、資源控管、策略控管、端點管理、內部防護、行為監控七個面向進行細部規劃與策略制定，透過七個面向逐一進行安全控管，需要在意的不僅是連線的安全與否，也須考量員工所存取的資源及對應的策略是否適合，同時也須加強員工端點設備安全性及連線至企業後的內部防護策略及存取稽核記錄，始能為IT管理員在企業安全性與員工便利性間達成平衡，共同為企業帶來更大的效益。

In 2020, due to the COVID-19 epidemic, the world has brought tremendous stimulus and changes in both economic growth and personal life. Among them, the biggest change to enterprises and employees is the different work style-Work Remotely, also known as Working From Home (WFH). This change accelerates the company’s actions on how to plan and open employees to access internal resources through external connections.
As the concept of cloud services has been integrated into daily life, mobile networks no longer cause connection bottlenecks to terminal devices, and mobile device applications have also been developed rapidly. These applications integrate many additional functions on top of the traditional communication functions. It has also entered the era of ubiquitous mobile devices where mobile devices have been completely integrated into the daily life of today's users.
Even after the epidemic slows down, work remotely has become a normal work mode for many companies. Companies need to plan carefully for related security control and management, and they also need to comply with the company's internal information security management system, in particular, employees may use their own general equipment or mobile devices that access the internal resources of the enterprise through the Internet. Therefore, whether companies or employees want to fully enjoy the convenience of work remotely, they need to comprehensively evaluate more aspects and prepare adequate supporting facilities before introducing them. Measures can bring the greatest benefit.
This research has sorted out that when companies build remote office platforms, they need to conduct detailed planning and strategy formulation in seven aspects: connection mode, identity verification, resource control, policy control, endpoint management, internal protection, and behavior monitoring. For each aspect of security control, what needs to be concerned is not only the security of the connection, but also the suitability of the resources accessed by employees and the corresponding strategies. At the same time, the enterprise also needs to enforce the security of employees’ endpoints and fulfillment of the internal protection strategy and audit records such that the enterprise can strike a balance between enterprise security and employee convenience, and jointly bring greater benefits to the enterprise.

摘 要
ABSTRACT
目 錄
圖 次
表 次
第一章、緒論
第一節、研究背景與動機
第二節、研究目的
第三節、研究問題與假設
第四節、名詞釋義
第二章、文獻探討
第一節、遠距辦公
第二節、桌面虛擬化及應用程式虛擬化
第三節、行動裝置管理
第四節、資訊安全管理系統
第三章、 研究方法
第一節、系統工作流程
第二節、系統平台工具
第三節、系統架構設計
第四節、系統功能規劃
第五節、系統策略設定
第六節、系統安全控管對應
第四章、 系統測試與分析
第一節、桌面虛擬化平台-連線存取控管
第二節、桌面虛擬化平台-存取策略控管
第三節、桌面虛擬化平台-安全防護及行為監控
第四節、行動裝置管理平台-連線存取控管
第五節、行動裝置管理平台-存取策略控管
第六節、行動裝置管理平台-安全防護及行為監控
第五章、 結論與建議
第一節、研究結果討論
第二節、研究結果建議
第三節、未來研究建議
參考文獻

壹、中文部分
周尚勤 (2020)。回不去了遠距辦公。能力雜誌第498期。取自https://paper.udn.com/udnpaper/POE0039/357786/web/
行政院研考會 (2012)。桌面虛擬化之可行性探討。政府機關資訊通報298期。取自http://ws.ndc.gov.tw/001/administrator/10/relfile/0/6356/b577616f-fe82-42a8-8998-e012f10a0b6e.pdf
饒康立 (2016)。新型雲資料中心安全防護，淺談「微切分」架構。網管人雜誌。取自https://www.netadmin.com.tw/netadmin/zh-tw/technology/02CA90B93417420EA0FA228F1CFFCD14
何宗憲 (2017)。Bank 3.0 下之行動化應用管理。財金資訊季刊第87期。取自https://www.fisc.com.tw/Upload/a130eef0-20ff-46b5-9bce-15cbf010d0cc/TC/8703.pdf
李宗翰 (2013)。DLP產品的崛起。iThome。取自https://www.ithome.com.tw/tech/86401
朱永健 (2003)。企業推動行動辦公室之研究---以台灣惠普公司及台灣微軟公司為例。中原大學企業管理研究所碩士論文。取自https://hdl.handle.net/11296/6f7h67
藍家文 (2018)。企業導入智慧工作場所之關鍵因素探討 - 以K公司為例。國立臺灣科技大學資訊管理系碩士論文。取自https://hdl.handle.net/11296/mf8z7n
黃政源 (2014)。台灣企業對導入員工自帶裝置政策採用意圖探討。世新大學資訊傳播學研究所(含碩專班)碩士論文。取自https://hdl.handle.net/11296/ke23g5
李宜唐 (2015)。企業BYOD資訊安全風險模式之建構與探討。國立中正大學資訊管理系研究所碩士論文。取自https://hdl.handle.net/11296/6rv9d8
林琦翔 (2013)。IT消費化之企業管理策略研究。輔仁大學資訊管理學系碩士論文。取自https://hdl.handle.net/11296/5twmt3
鄭鉅瑋 (2016)。企業導入桌面虛擬化關鍵影響因素之研究。實踐大學資訊科技與管理學系碩士在職專班碩士論文。取自https://hdl.handle.net/11296/7j67j7
郭丁仁 (2016)。企業導入桌面虛擬化成功因素分析。實踐大學資訊科技與管理學系碩士在職專班碩士論文。取自https://hdl.handle.net/11296/gme2q9
莊復貴 (2009)。企業運用應用程式虛擬化之研究。中原大學資訊管理研究所碩士論文。取自https://hdl.handle.net/11296/r849et
鄭逸寧 (2012)。實現桌面虛擬化的4大作法。iThome。取自https://www.ithome.com.tw/news/89577
張世奇 (2016)。Android平台行動裝置管理系統設計與實現。國立高雄師範大學軟體工程與管理學系碩士論文。取自https://hdl.handle.net/11296/8w8kzg
蔡育勝 (2020)。電腦機房資產風險評鑑中導入資訊安全管理系統之研究。國立中正大學雲端計算與物聯網數位學習碩士在職專班碩士論文。取自https://hdl.handle.net/11296/tfvg6p
楊秀瑟 (2005)。影響臺灣資訊安全管理系統之關鍵因素研究。華梵大學工業工程與經營資訊學系碩士班碩士論文。取自https://hdl.handle.net/11296/52grnw
卓明怡 (2017)。探討證券業導入資訊安全管理系統必要性之研究。中國文化大學國際企業管理學系碩士在職專班碩士論文。取自https://hdl.handle.net/11296/g6c7m8
黃鎮屏 (2009)。ISO與CMMI兩驗證機制於組織資訊安全建構之關聯性研究。國立臺東大學資訊管理學系碩士班碩士論文。取自https://hdl.handle.net/11296/84r9jh
林欣煜 (2001)。企業行動辦公室之資訊安全政策風險評估研究。華梵大學資訊管理學系碩士班碩士論文。取自https://hdl.handle.net/11296/65944j
饒康立 (2016)。FinTech 世代之新虛擬網路架構。財金資訊季刊第86期。取自https://www.fisc.com.tw/Upload/d63b1132-d0a8-4a5b-bac6-b85053a23382/TC/8604.pdf
VMware, Inc. (2020)。VMware Horizon 2006說明文件。取自https://docs.vmware.com/tw/VMware-Horizon/index.html
VMware, Inc. (2020)。VMware Workspace ONE UEM 說明文件。取自https://docs.vmware.com/tw/VMware-Workspace-ONE-UEM/index.html
VMware, Inc. (2020)。VMware NSX-T Data Center 說明文件。取自https://docs.vmware.com/tw/VMware-NSX-T-Data-Center/index.html

 
貳、英文部分
Gartner (2020)。Gartner Survey Reveals 82% of Company Leaders Plan to Allow Employees to Work Remotely Some of the Time。Retrieved from https://www.gartner.com/en/newsroom/press-releases/2020-07-14-gartner-survey-reveals-82-percent-of-company-leaders-plan-to-allow-employees-to-work-remotely-some-of-the-time
Fujizsu (2020)。Fujitsu Embarks towards 'New Normal', Redefining Working Styles for its Japan Offices。Retrieved from https://www.fujitsu.com/global/about/resources/news/press-releases/2020/0706-01.html
Quartz (2020)。Slowly but surely, working at home is becoming more common。Retrieved from https://qz.com/work/1392302/more-than-5-of-americans-now-work-from-home-new-statistics-show
Forbes (2020)。Working From Home: It’s Now A Thing。Retrieved from https://www.forbes.com/sites/enriquedans/2020/06/06/working-from-home-its-now-athing
Gallup (2020)。COVID-19 and Remote Work。Retrieved from https://news.gallup.com/poll/321800/covid-remote-work-update.aspx
Harvard Business Review Home (2020)。Our Work-from-Anywhere Future。Retrieved from https://hbr.org/2020/11/our-work-from-anywhere-future
Cisco, Inc (2020)。Future of Secure Remote Work Report。Retrieved from https://www.cisco.com/c/en/us/products/security/future-secure-remote-work-report.html
IDC, Inc (2020)。Mobile Workers Will Be 60% of the Total U.S. Workforce by 2024。Retrieved from https://www.idc.com/getdoc.jsp?containerId=prUS46809920
VMware, Inc (2019)。The Value of Digital Employee Experience。Retrieved from https://www.vmware.com/radius/digital-employee-experience-infographic
Enrique Dans (2020)。Working From Home: It’s Now A Thing。Retrieved from https://www.forbes.com/sites/enriquedans/2020/06/06/working-from-home-its-now-athing/
Mokhtarian, P.L. and Salomon, I. (1994)。Modeling the choice of telecommuting: setting the context. Environment and Planning, 26(5), 749-766.
A. Scarfo (2012)。“New Security Perspectives around BYOD,”。International Conference on Broadband, Wireless Computing, Communication and Applications (BWCCA), pp. 446-451.
Keunwoo Rhee, Woongryul Jeon, & Dongho Won (2012). Security Requirements of a Mobile Device Management System. International Journal of Security & Its Applications, 6(2), 353-358.
Keunwoo Rhee, Woongryul Jeon, & Dongho Won (2012). Security Requirements of a Mobile Device Management System. International Journal of Security & Its Applications, 6(2), 353-358.
ISO/IEC 27001: Specification for information security management systems, British Standards Institute, 2005