[{"data":1,"prerenderedAt":456},["ShallowReactive",2],{"i-lucide:globe":3,"i-lucide:menu":8,"i-lucide:newspaper":10,"i-lucide:box":12,"i-lucide:chevron-down":14,"i-lucide:layout-grid":16,"i-lucide:pen-line":18,"i-lucide:book-open":20,"i-lucide:linkedin":22,"i-lucide:facebook":25,"i-lucide:youtube":27,"i-lucide:cookie":29,"i-lucide:arrow-up":31,"blog-tw-Secure-Remote-Access-for-Industrial":33,"i-lucide:link":450,"i-lucide:arrow-left":452,"i-lucide:twitter":454},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Ccircle cx=\"12\" cy=\"12\" r=\"10\"\u002F>\u003Cpath d=\"M12 2a14.5 14.5 0 0 0 0 20a14.5 14.5 0 0 0 0-20M2 12h20\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5h16M4 12h16M4 19h16\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M15 18h-5m8-4h-8m-6 8h16a2 2 0 0 0 2-2V4a2 2 0 0 0-2-2H8a2 2 0 0 0-2 2v16a2 2 0 0 1-4 0v-9a2 2 0 0 1 2-2h2\"\u002F>\u003Crect width=\"8\" height=\"4\" x=\"10\" y=\"6\" rx=\"1\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z\"\u002F>\u003Cpath d=\"m3.3 7l8.7 5l8.7-5M12 22V12\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m6 9l6 6l6-6\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Crect width=\"7\" height=\"7\" x=\"3\" y=\"3\" rx=\"1\"\u002F>\u003Crect width=\"7\" height=\"7\" x=\"14\" y=\"3\" rx=\"1\"\u002F>\u003Crect width=\"7\" height=\"7\" x=\"14\" y=\"14\" rx=\"1\"\u002F>\u003Crect width=\"7\" height=\"7\" x=\"3\" y=\"14\" rx=\"1\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M13 21h8m.174-14.188a1 1 0 0 0-3.986-3.987L3.842 16.174a2 2 0 0 0-.5.83l-1.321 4.352a.5.5 0 0 0 .623.622l4.353-1.32a2 2 0 0 0 .83-.497z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 7v14m-9-3a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1h5a4 4 0 0 1 4 4a4 4 0 0 1 4-4h5a1 1 0 0 1 1 1v13a1 1 0 0 1-1 1h-6a3 3 0 0 0-3 3a3 3 0 0 0-3-3z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":23,"hidden":24},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M16 8a6 6 0 0 1 6 6v7h-4v-7a2 2 0 0 0-2-2a2 2 0 0 0-2 2v7h-4v-7a6 6 0 0 1 6-6M2 9h4v12H2z\"\u002F>\u003Ccircle cx=\"4\" cy=\"4\" r=\"2\"\u002F>\u003C\u002Fg>",true,{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":26,"hidden":24},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 2h-3a5 5 0 0 0-5 5v3H7v4h3v8h4v-8h3l1-4h-4V7a1 1 0 0 1 1-1h3z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":28,"hidden":24},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M2.5 17a24.1 24.1 0 0 1 0-10a2 2 0 0 1 1.4-1.4a49.6 49.6 0 0 1 16.2 0A2 2 0 0 1 21.5 7a24.1 24.1 0 0 1 0 10a2 2 0 0 1-1.4 1.4a49.6 49.6 0 0 1-16.2 0A2 2 0 0 1 2.5 17\"\u002F>\u003Cpath d=\"m10 15l5-3l-5-3z\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":30},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 2a10 10 0 1 0 10 10a4 4 0 0 1-5-5a4 4 0 0 1-5-5M8.5 8.5v.01M16 15.5v.01M12 12v.01M11 17v.01M7 14v.01\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m5 12l7-7l7 7m-7 7V5\"\u002F>",{"id":34,"title":35,"body":36,"category":436,"cover":45,"data_key":437,"date":438,"description":439,"excerpt":425,"extension":440,"keywords":425,"locale":441,"meta":442,"navigation":24,"order":443,"path":444,"published":24,"seo":445,"slug":446,"stem":447,"subtitle":448,"__hash__":449},"blog\u002Fblog\u002Ftw\u002FSecure-Remote-Access-for-Industrial.md","設備與系統的安全遠端存取：為什麼 VPN、公開IP與開 Port，正在成為企業最常見的入侵破口？",{"type":37,"value":38,"toc":424},"minimark",[39,46,58,69,74,77,101,107,110,114,117,132,138,148,151,159,165,169,172,189,195,201,205,219,225,229,232,252,258,262,268,271,274,306,309,313,319,326,355,361,370,373],[40,41,42],"p",{},[43,44],"img",{"alt":35,"src":45},"\u002Fimages\u002Fblog\u002FSecure-Remote-Access-for-Industrial\u002FsecureRemoteAccess_1.webp",[40,47,48,49,53,54,57],{},"當企業的設備越來越分散：伺服器、工控設備（OT）、機台、IoT 裝置、遠端站點與跨據點系統，遠端維護從「加分項」變成「 ",[50,51,52],"strong",{},"營運必需"," 」。問題是，多數組織至今仍用公開IP、Port Forwarding、或VPN Gateway來做遠端存取，這些作法在實務上往往會把 ",[50,55,56],{},"設備變成可被長期掃描、可被鎖定的固定目標"," ：只要入口存在，攻擊者就會持續利用漏洞，將遠端連線變成整段內網風險的起點。",[40,59,60,61,64,65,68],{},"更麻煩的是，設備遠端存取的目的通常不是「讓人方便登入」，而是要在最短時間內排除故障、減少停機與出差；但傳統作法往往迫使企業在「 ",[50,62,63],{},"方便"," 」與「 ",[50,66,67],{},"暴露"," 」之間二選一，甚至明知有風險仍不得不維持入口常開。要理解為什麼這個問題正在擴大，我們可以先從攻擊者最常用的入侵手法與它帶來的真實成本開始看。",[70,71,73],"h2",{"id":72},"遠端存取已經是駭客最常利用的入侵入口","遠端存取，已經是駭客最常利用的入侵入口",[40,75,76],{},"根據對真實駭客入侵事件的統計，在能確認「第一步怎麼被打進來」的案件中，攻擊者最常用的是：",[78,79,80,86,91,96],"ul",{},[81,82,83],"li",{},[50,84,85],{},"漏洞利用（Exploits）",[81,87,88],{},[50,89,90],{},"釣魚（Phishing）和被竊取的帳號密碼（Stolen Credentials）",[81,92,93],{},[50,94,95],{},"既有或買來的存取權限（Prior Compromise \u002F Initial Access Brokers）",[81,97,98],{},[50,99,100],{},"暴力破解（Brute Force）",[40,102,103,104],{},"這些方式的共同點是：它們都需要一個 ",[50,105,106],{},"「可以從外面連進來的入口」。",[40,108,109],{},"無論那個入口是 VPN、遠端管理介面、還是你為了維修設備而開的某個Port，只要外部能連到，就會被掃描、被嘗試、被盯上。",[70,111,113],{"id":112},"這些數字說的是企業每天在承擔的風險","這些數字，說的是企業每天在承擔的風險",[40,115,116],{},"IBM在2024年的資安調查發現：",[78,118,119,125],{},[81,120,121,122],{},"一次資安事件，企業平均要賠 ",[50,123,124],{},"超過新台幣1.5億（約USD 4.88M）",[81,126,127,128,131],{},"而這種入侵，平均要將近 ",[50,129,130],{},"10個月"," 才會被發現",[40,133,134,135],{},"換成白話就是：如果你的設備是用 VPN 或帳號密碼從外面連進來，駭客可以慢慢試、慢慢等，只要有一組帳號被破解，你可能 ",[50,136,137],{},"半年到一年都不知道系統已經被入侵了。",[40,139,140,141,144,145],{},"Verizon在2024年的資安報告中也指出，駭客最常下手的目標之一，就是 ",[50,142,143],{},"沒有開雙重驗證（MFA）"," 的 ",[50,146,147],{},"VPN 與遠端存取系統。",[40,149,150],{},"報告中也列出真實案例：",[78,152,153,156],{},[81,154,155],{},"MGM（美國大型飯店集團）被入侵後，營運損失超過新台幣30億",[81,157,158],{},"Caesars（賭場集團）為了拿回系統，付了將近新台幣10億的勒索金",[40,160,161,162],{},"這些公司不是沒資安架構，而是因為 ",[50,163,164],{},"遠端入口被拿來當破口。",[70,166,168],{"id":167},"為什麼企業明知道危險卻還是關不掉遠端存取","為什麼企業明知道危險，卻還是關不掉遠端存取？",[40,170,171],{},"原因很簡單：",[78,173,174,180,183],{},[81,175,176,177],{},"設備壞了， ",[50,178,179],{},"不能等工程師飛過去",[81,181,182],{},"工程師分散在不同國家，出差又貴又慢",[81,184,185,186],{},"很多現場， ",[50,187,188],{},"沒有IT人員可以即時處理",[40,190,191,192],{},"所以大多數公司最後都選擇一個做法： ",[50,193,194],{},"讓VPN或遠端入口一直開著，需要時再連。",[40,196,197,198],{},"問題是，這個做法，跟駭客的工作方式完全重疊。駭客不在乎你現在有沒有在維修，只要入口存在，他就可以 ",[50,199,200],{},"每天掃、每天試，直到有一天進得去為止。",[70,202,204],{"id":203},"如果遠端存取做對了企業能省下多少錢","如果遠端存取做對了，企業能省下多少錢？",[40,206,207,208,211,212,215,216],{},"很多人以為安全只是「少被駭」，但對設備與工廠來說， ",[50,209,210],{},"真正的大錢在維運。"," 研究指出，做好遠端維護的企業，維護成本可降低 ",[50,213,214],{},"20–30%"," ，而維護本來就佔企業營運支出的 ",[50,217,218],{},"20–60%",[40,220,221,222],{},"換句話說：如果你一年花1億在維修設備，光是把遠端處理做對，就可能省下 ",[50,223,224],{},"2,000 到 3,000 萬。",[70,226,228],{"id":227},"正確的遠端存取可以同時做到三件事","正確的遠端存取，可以同時做到三件事",[40,230,231],{},"一個好的遠端存取架構，會直接帶來三個好處：",[78,233,234,240,246],{},[81,235,236,239],{},[50,237,238],{},"少出差"," ：很多問題不用派人到現場",[81,241,242,245],{},[50,243,244],{},"修更快"," ：從排飛機出差，到變成幾分鐘就能處理",[81,247,248,251],{},[50,249,250],{},"少賠錢"," ：入口不暴露，就不容易變成駭客的破口",[40,253,254,255],{},"這不只是IT成本，而是 ",[50,256,257],{},"營運效率與風險成本的差距。",[70,259,261],{"id":260},"什麼樣的遠端存取方式才真的適合設備與-iot","什麼樣的遠端存取方式，才真的適合設備與 IoT？",[40,263,264,265],{},"對設備、工廠與分散式站點來說，遠端存取不是「能不能連」這麼簡單，而是要同時做到三件事： ",[50,266,267],{},"連得上、連得順、又不暴露。",[40,269,270],{},"也就是：工程師能像在現場一樣操作設備，但外部網路卻看不到任何可以被攻擊的入口。",[40,272,273],{},"真正適合設備與 IoT 的遠端存取方式，應該具備：",[78,275,276,282,288,294,300],{},[81,277,278,281],{},[50,279,280],{},"設備本身沒有公開IP"," ，不會被網路掃描到",[81,283,284,287],{},[50,285,286],{},"不需要長期開放任何Port"," ，不留下固定入口",[81,289,290,293],{},[50,291,292],{},"外部無法探測到設備位置"," ，駭客不知道該打哪裡",[81,295,296,299],{},[50,297,298],{},"連線是即時建立的專用通道"," ，用完就自動關閉",[81,301,302,305],{},[50,303,304],{},"連線品質可支援即時操作"," （低延遲、穩定、不掉線）",[40,307,308],{},"這樣，工程師可以即時遠端維護、調校、排錯，但就算有人在網路上亂掃、亂試，也找不到你可以被攻擊的門。",[70,310,312],{"id":311},"orphelink如何解決這些問題","OrpheLink如何解決這些問題",[40,314,315,316],{},"這類「連得上、連得順、又不暴露」的遠端存取架構，在實務上通常被稱為 ",[50,317,318],{},"零信任隱形連線（Zero-Trust, Zero-Exposure Access）。",[40,320,321,322,325],{},"以 ",[50,323,324],{},"OrpheLink"," 為例，它不是把所有人接進同一個VPN網段，而是採用一種完全不同的做法：",[78,327,328,334,343,349],{},[81,329,330,333],{},[50,331,332],{},"沒有單一入口"," ：設備不對外公開 IP，也沒有任何固定的 VPN Gateway 可以被鎖定或攻擊。",[81,335,336,339,340],{},[50,337,338],{},"最小授權、連線彼此隔離"," ：每一次連線都是「只給這個人、只連這台設備、只為這個任務」，即使某一條連線被入侵，也 ",[50,341,342],{},"無法橫向移動到其他系統。",[81,344,345,348],{},[50,346,347],{},"零信任架構（ZTNA）"," ：每一條連線都需要即時驗證身分與權限，不存在「進了網段就什麼都能看」的情況。",[81,350,351,354],{},[50,352,353],{},"比 VPN 更快、更穩、更低延遲"," ：OrpheLink 採用P2P直連與 NAT 穿透，資料不必繞經集中式 VPN 閘道，因此在遠端操作設備、即時畫面與控制時，延遲與不穩定性都大幅降低。",[40,356,357,358],{},"這讓企業第一次能同時做到： ",[50,359,360],{},"工程師像在現場一樣連設備，但整個網路卻沒有任何可以被駭客掃描與鎖定的入口。",[40,362,363,364],{},"了解更多OrpheLink的內容：",[365,366,367],"a",{"href":367,"rel":368},"https:\u002F\u002Fwww.oprueba.com\u002F",[369],"nofollow",[70,371,372],{"id":372},"參考資料",[78,374,375,388,400,412],{},[81,376,377,378,382,383],{},"IBM Cost of a Data Breach Report 2024 ",[365,379,380],{"href":380,"rel":381},"https:\u002F\u002Fcdn.table.media\u002Fassets\u002Fwp-content\u002Fuploads\u002F2024\u002F07\u002F30132828\u002FCost-of-a-Data-Breach-Report-2024.pdf",[369],". ",[365,384,387],{"href":385,"rel":386},"https:\u002F\u002Fcdn.table.media\u002Fassets\u002Fwp-content\u002Fuploads\u002F2024\u002F07\u002F30132828\u002FCost-of-a-Data-Breach-Report-2024.pdf?utm_source=chatgpt.com",[369],"Table Media",[81,389,390,391,382,395],{},"IBM Cost of Data Breach 2024 ",[365,392,393],{"href":393,"rel":394},"https:\u002F\u002Fwww.ibm.com\u002Fthink\u002Finsights\u002Fcost-of-data-breaches-business-case-for-security-ai-automation",[369],[365,396,399],{"href":397,"rel":398},"https:\u002F\u002Fwww.ibm.com\u002Fthink\u002Finsights\u002Fcost-of-data-breaches-business-case-for-security-ai-automation?utm_source=chatgpt.com",[369],"IBM",[81,401,402,403,382,407],{},"2024 Data Breach Investigations Report | Verizon ",[365,404,405],{"href":405,"rel":406},"https:\u002F\u002Fwww.verizon.com\u002Fbusiness\u002Fresources\u002Freports\u002F2024-dbir-data-breach-investigations-report.pdf",[369],[365,408,411],{"href":409,"rel":410},"https:\u002F\u002Fwww.verizon.com\u002Fbusiness\u002Fresources\u002Freports\u002F2024-dbir-data-breach-investigations-report.pdf?utm_source=chatgpt.com",[369],"Verizon",[81,413,414,415,382,419],{},"M-Trends 2024: Mandiant Frontline Threat Analysis | Google Cloud Blog ",[365,416,417],{"href":417,"rel":418},"https:\u002F\u002Fcloud.google.com\u002Fblog\u002Ftopics\u002Fthreat-intelligence\u002Fm-trends-2024",[369],[365,420,423],{"href":421,"rel":422},"https:\u002F\u002Fcloud.google.com\u002Fblog\u002Ftopics\u002Fthreat-intelligence\u002Fm-trends-2024?utm_source=chatgpt.com",[369],"Google Cloud",{"title":425,"searchDepth":426,"depth":426,"links":427},"",2,[428,429,430,431,432,433,434,435],{"id":72,"depth":426,"text":73},{"id":112,"depth":426,"text":113},{"id":167,"depth":426,"text":168},{"id":203,"depth":426,"text":204},{"id":227,"depth":426,"text":228},{"id":260,"depth":426,"text":261},{"id":311,"depth":426,"text":312},{"id":372,"depth":426,"text":372},[],"Secure Remote Access for Industrial: Why VPNs, Public IPs, and Open Ports Are Now a Major Security Risk, 設備與系統的安全遠端存取：為什麼 VPN、公開IP與開 Port，正在成為企業最常見的入侵破口？","January 15, 2026","當企業的設備越來越分散 ...","md","tw",{},9,"\u002Fblog\u002Ftw\u002Fsecure-remote-access-for-industrial",{"title":35,"description":439},"Secure-Remote-Access-for-Industrial","blog\u002Ftw\u002FSecure-Remote-Access-for-Industrial","對分散的設備、工控與 IoT，遠端維護已是營運必需——但 VPN、公開 IP 與開 Port，正把設備變成可被長期鎖定的固定破口。","AyP0MXzBQdaJHn0q-vqJ8NWbiCe5gIwYPbAiiig9VMU",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":451},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71\"\u002F>\u003Cpath d=\"M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":453},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 19l-7-7l7-7m7 7H5\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":455,"hidden":24},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M22 4s-.7 2.1-2 3.4c1.6 10-9.4 17.3-18 11.6c2.2.1 4.4-.6 6-2C3 15.5.5 9.6 3 5c2.2 2.6 5.6 4.1 9 4c-.9-4.2 4-6.6 7-3.8c1.1 0 3-1.2 3-1.2\"\u002F>",1786002188249]