隨著工業3.5和智慧工廠的快速發展，資訊安全已經成為企業發展的一大挑戰。本研究旨在探討如何運用紫式決策分析方法，制定通用於不同類型智慧工廠的資訊安全性原則。
本研究資訊安全規範依據各國家所訂立標準，本研究為未來預計導入智慧工廠或現有傳統工廠轉型為智慧工廠提出資訊安全方案之評估，屬於多變量決策分析問題。以紫式決策分析架構為骨幹，結合ISA/IEC 62443 Series of Standards與分析層級程序法(AHP)，歸納出智慧工廠的資訊安全方案之UNISON決策分析架構，決策者可視自身需求與未來公司資安策略對整體公司做有利規劃考量。未來不同產業領域可以以此作為全球化企業在當地設立智慧製造工廠時，而採取最適合的資訊安全性原則。

本研究實證透過論文所提出之通用型資訊安全模型架構，快速的依不同智慧工廠的需求，定義問題，找到需要的資訊安全規範，並透過參考模型應用架構，歸納出資訊安全技術矩陣，並提出具體可執行規劃建議，驗證本研究之有效性及可行性。
關鍵字： 網路安全、智慧工廠、紫式決策架構、應用分析層級程序法

With the rapid development of Industry 3.5 and smart factories, information security has become a significant challenge for enterprise growth. This study aims to explore how to utilize the Purple Decision Analysis Method to establish information security principles applicable to various types of smart factories.

The information security standards in this study are based on standards established by various countries. This research proposes an evaluation of information security solutions for future smart factories or the transformation of existing traditional factories into smart factories, which falls under the category of multivariate decision analysis problems. By using the Purple Decision Analysis Framework as the backbone, combined with the ISA/IEC 62443 Series of Standards and the Analytic Hierarchy Process (AHP), this study synthesizes the UNISON decision analysis framework for information security solutions in smart factories. Decision-makers can consider their own needs and future company information security strategies to make beneficial planning considerations for the overall company. In the future, different industry fields can use this as the most suitable information security principles when establishing smart manufacturing factories in local areas for globalized enterprises.

The empirical study quickly defines problems according to the proposed universal information security model framework, identifies the necessary information security standards according to the needs of different smart factories, and synthesizes the information security technology matrix through the reference model application framework. It also proposes specific executable planning recommendations, verifying the effectiveness and feasibility of this study.

Keywords： Cybersecurity, Industrial 3.5, Smart factory, UNISON, AHP.

簡禎富（2005），決策分析與管理：全面提升決策品質，雙葉書廊，台北。
簡禎富（2015），決策分析與管理：紫式決策分析以全面提升決策品質（二版），雙葉書廊，台北。
簡禎富（2016），大數據與工業3.5:台灣製造的機遇和戰略，哈佛商業評論全球繁體中文版，2016年清華大數據專刊，頁2-4。
簡禎富（2019），工業3.5，天下雜誌出版社，台北。
簡禎富（2019），紫式決策工具全書，雙葉書廊，台北。

A. Rani, V. K. Mishra, A. K. Mishra, V. Kumar and N. K. Pandey.(2024), "Role and Significance of Internet of Things (IoT) in Industry 4.0," 2024 3rd International conference on Power Electronics and IoT Applications in Renewable Energy and its Control (PARC), 23-24 February, Mathura, India.
Fu, W. and Chien, Chen-Fu (2019), “UNISON Data-Driven Intermittent Demand Forecast Framework to Empower Supply Chain Resilience and An Empirical Study in Electronics Distribution,” Computers and Industrial Engineering, 135, 940-949.
K. Kolhe, A. A. Somatkar, M. S. Bhandarkar, K. B. Kotangale, S. S. Ayane and S. I. Shirke.(2023), "Applications and Challenges of Machine Learning Techniques for Smart Manufacturing in Industry 4.0," 2023 7th International Conference On Computing, Communication, Control And Automation (ICCUBEA), 18-19 August, Pune, India.
Klaus-Dieter Thoben, Stefan Alexander Wiesner, Thorsten Wuest.(2017),” "Industrie 4.0" and Smart Manufacturing – A Review of Research Issues and Application Examples” International Journal of Automation Technology 11(1),4-19, December 1, 2016
Lin, Y.-S., Chien, Chen-Fu, and Chou, D. (2022), “UNISON Decision Framework for Hybrid Optimization of Wastewater Treatment and Recycle for Industry 3.5 and Cleaner Semiconductor Manufacturing,” Resources, Conservation and Recycling, 182, 106282.
Lin, K.-Y., Chien, Chen-Fu, and Kerh, R. (2016), “UNISON Framework of Data-Driven Innovation for Extracting User Experience of Product Design of Wearable Devices,” Computers & Industrial Engineering, 99, 487-502.
Saaty, T. L. (1986), “Axiomatic foundation of the analytic hierarchy process,” Management Science, Vol. 32, No. 7, pp. 841-855.
T. Kalsoom, N. Ramzan and S. Ahmed. (2020), "Societal Impact of IoT-Lead Smart Factory in the Context of Industry 4.0," 2020 International Conference on UK-China Emerging Technologies (UCET), 20-21 August, Glasgow, UK.
Lin, W.D., and Low, M.Y.H., (2023), "A Digital Twin Simulation Framework for Smart Warehousing," 2023 IEEE International Conference on Industrial Engineering and Engineering Management (IEEM), 18-21 December 2, Singapore, Singapore.

盟立自動化.(2022),盟立自動化2022年盟立永續報告書。
Retrieved from https://www.mirle.com.tw/esg/document-download/0/15/,
(Accessed on 2024.06.14).
BBC中文網.(2010), 超級蠕蟲來襲「伊朗遭遇電子戰」。
Retrieved from
https://www.bbc.com/zhongwen/trad/lg/world/2010/09/100926_iran_stuxnet,
(Accessed on 2024.06.14).
Bleepingcomputer.(2020), SolarWinds supply chain attack
Retrieved from
https://www.bleepingcomputer.com/news/security/the-solarwinds-cyberattack-the-hack-the-victims-and-what-we-know/,
(Accessed on 2024.06.14).
 
Cpomagazine.(2022), 豐田供應鏈網路攻擊導致生產停止
Retrieved from
https://www.cpomagazine.com/cyber-security/toyotas-supply-chain-cyber-attack-stopped-production-cutting-down-a-third-of-its-global-output/,
(Accessed on 2024.06.14).
Cybersecuritynews.(2024),Ransomhub Attacking Industrial Control Systems
Retrieved from
https://cybersecuritynews.com/ransomhub-ics-attack/,
(Accessed on 2024.06.14).
Cybersecuritynews.(2024/01), 駭客使用網路釣魚電子郵件破壞網絡
Retrieved from
https://cybersecuritynews.com/frame-work-hacked/,
(Accessed on 2024.06.14).
IThome.(2020), 知名自動化設備廠遭勒索軟體攻擊。
Retrieved from https://www.ithome.com.tw/news/138118
(Accessed on 2024.06.14).
ISA.(2007),ISA/IEC 62443 快速入門指南。
Retrieved from
https://21577316.fs1.hubspotusercontent-na1.net/hubfs/21577316/2023%20ISA%20Website%20Redesigns/ISAGCA/PDFs/ISAGCA%20Quick%20Start%20Guide%20FINAL.pdf
(Accessed on 2024.06.14).
ISO.(2022), ISO/IEC 27001:2022。
Retrieved from
https://www.iso.org/standard/27001
(Accessed on 2024.06.14).
National Institute of Standards and Technology SP800 (1998)
Retrieved from https://csrc.nist.gov/publications/sp800
(Accessed on 2024.06.14).
Netsentrysecurity (2023), Clorox Cyberattack
Retrieved from https://netsentrysecurity.com/2023/10/10/clorox-cyberattack-cost-356-million/,
(Accessed on 2024.06.14).
TSMC.(2018), 台積電詳述電腦病毒事件影響.
Retrieved from https://pr.tsmc.com/english/news/1969,
(Accessed on 2024.06.14).