Passed at the Computer and Communication Committee Meeting held on June 23, 2009
Approved by the Protection of Intellectual Property Task Group on July 3, 2009
Revised at the Computer and Communication Committee Meeting held on June 22, 2010
Approved at the 9th University Administration Meeting of the 2009 academic year held on June 29, 2010
(Added Article 6; revised the original Article 6 and renumbered it as Article 7)
Revised at the Computer and Communication Committee Meeting held on June 21, 2015
I. This policy was drafted to improve the network service quality and information security of the University's campus servers.
II. This policy is applicable to Internet service servers provided by administrative and teaching units of the University.
III. All units which have installed Internet service servers shall note the following:
（I） Intellectual Property Rights: Only legal and authorized software shall be used. Attention must be given
to the legality of information made public.
（II）Dedicated Personnel: An Internet service server manager must be assigned to take full responsibility of
the management and maintenance of the servers.
（III）Maintain Information Security: Perform information security checks and system vulnerability fixes of the
managed Internet service servers on a regular basis. If assistance from the Computer and Communication
Center (the Center) is required, please apply and register relevant server information. The Center can
provide services such as penetration tests, vulnerability scans, and source code analyses.
（IV）Information Security Seminar: The server manager shall attend the information security seminar held by
the Center. The manager shall also pay attention to the server management regulations and information
security measures announced by the Center.
IV. The Center performs periodic security scans on the Internet service servers of the entire school and publishes
reports on the results of those scans. The server manager shall fix vulnerabilities based on the reports provided
by the Center.
V. Users of any unit's Internet service server shall adhere to the regulations set forth by the policy as well as the
following items. Violators thereof may have their network service suspended and be reported to the relevant office,
depending on the severity of the violation.
（I）Comply with the National Tsing Hua University Campus Network Terms of Use.
（II）Comply with the National Tsing Hua University Unauthorized Network Information Policy.
（III）Respect intellectual property rights; behaviors which violate intellectual property rights are not allowed.
VI. To improve the effectiveness of the University's computer resources and comply with energy conservation and carbon
footprint reduction policy, each unit shall implement virtualization in their server or use the virtual hosting
service offered by the Center.
VII. The Policy shall take effect after being passed at the Computer and Communication Committee Meeting and approved
by the University Administration Meeting. The same applies for amendments made thereto.
