RL-Internet protection and safety

INTERNET PROTECTION & SAFETY

Rudi LumantoID-SIRTII/CC

APJII Open Policy Meeting 30/5/2016 - Swiss Belhotel , Batam

CONTENTS

• About ID-SIRTII/CC

• Understanding Threat Landscape

• Protecting National Network

2 Rudi Lumanto - APJII-OPM May 2016

ABOUT ID-SIRTII/CC

www.idsirtii.or.id3 Rudi Lumanto - APJII-OPM May 2016

ABOUT ID-SIRTII/CC

ID-SIRTII/CC PROFILE

DataCenterand

Applica1on

Monitoringand

Opera1on

ExternalCollabora1on

Educa1onand

Socializa1on

CYBER SIX OF INTERNET

Vulnerability

Threat

Cyberspace

Cyberthreat

Cybera.ackCyberSecurity

CyberCrime

CyberLaw

Cyberespionage

CyberDefence

CyberWar

SosmedOpini

SosmedSecurity

SosmedWar

Cyber Six Principle

Threat❖ Anything that can disrupt the operation, functioning, integrity or

availability of information system

❖ Stand alone threats

❖ Threat arise without any connection to other system, ex: virus, password cracker

❖ Human threat

❖ Connection/Network threats

❖ Threat arise because of connection to other system

Malware threats

40 thousands to 140 thousands of infected machines in just two month (7-9/2013)

Top Countries infected worldwide (2015-1-6)

Threat EvolutionAttack Sophistication vs Intruder Technical Knowledge

Seven year old

11minutestohackwifi

University student❖ Harvard University student who

emailed a bomb threat around campus

❖ he was using anonymous web browser Tor to hide his identity

❖ he also reportedly used a service called Guerrilla Mail that creates temporary and anonymous email addresses for free.

Threat location

from threat to attack

From threat to attack

HANYA MASALAH WAKTU

ANCAMAN SERANGANLubang Penghubung

Vulnerabilities14 Rudi Lumanto - APJII-OPM May 2016

Vulnerability❖ Weakness in the design, configuration or implementation and

management of a computer system that renders it susceptible to a threat

❖ ISO 27005 definition

❖ A weakness of an asset or group of assets that can be exploited by one or more threats

❖ IETF RFC 2828 definition

❖ A flaw or weakness in a system's design, implementation, or operation and management that could be exploited to violate the system's security policy

Vulnerability❖ What is the current threat environment?

❖ Organizations are realizing that traditional vulnerability-based risk management strategies are failing due to the massive number of zero-day vulnerabilities in an ever evolving and expanding technology industry.

❖ CVE and OSVDB presented their vulnerability statistics

❖ percentage (5%) of vulnerabilities in any piece of software. They only know about a very small .This means that we are running systems with 95% zero-day vulnerabilities.

Total protection ?

Theonlytrulysecuresystemisonethatispoweredoff,castinablockofconcreteandsealedinalead-linedroomwitharmedguards-andeventhenIhavemydoubts(EugeneH.Spafford)

Indonesia 2015

INTERNET PROTECTIONany countermeasure taken to protect asset from threats and attacks

Assets is anything that have a value in the organization. Ex: data and information, user or people, infrastructure or media (hardware/software)

19Rudi Lumanto - APJII-OPM May 2016

OBJECT OF PROTECTION

COUNTERMEASURE

Meningkatkan kesadaran akan ancaman (security mindset)

Memperbaiki perlindungan terhadap aset nasional

Membangun daya resiliensi dan Strateginya

Comprehensive Security Management Process : Plan-Protect-Respond

Risk Management Disaster Recovery

SCOPE OF PROTECTION

Cyber Security

Global Scope Economic value

Cyber Crime

Cyber Defense

Strategic Scope State Sovereignty value

Cyber War

Kemenko polhukam Kemenhan

Kemenkominfo Kepolisian

Both have same function, like brakes in the car cyber space will slow down or go fast.

But different object of protection

PROTECTING ZONE

CapacityBuilding

Policy&LegalFramework

Organiza;onalstructure

Technical&opera;onalmeasures

Interna;onalcoopera;on Building

Safe&SecureCyber

Environment

State sovereignty zone

Economic zone

PROTECTING LEVEL

Law/Regula*on

StrategicLevelorganiza*on

Tac*callevelorganiza*on

Opera*onallevelorganiza*on

DomainClassifica*on(Cri*calInfrastructure)

Melakukan monitoring, analisa, report : NATIONAL CERT, SECTORAL CERTs, SOC, National Cyber Capacity Building Committee, Security Awareness Promotion Committee etc

Menyusun dan menjalankan strategi, program dan rencana aksi : National Cyber Defense Coordination Team, Cyber Intelligent

Merumuskan kebijakan dan strategi, prioritas dan kordinasi nasional: National Cyber Defense Council, Cyber Security Office etc

Capacity Building through Empowering people

§ APCERTDrillTest§ OICCERTDrillTest§ ACIDDrillTrace

Interna'onalDrillTest:

§ CyberJawara§ CyberSeaGames

Compe''on:

Na'onalDrillTest:§ Id-SIRTII/CCDrillTest§ AmazingTrace

HostCyberSEAGames2015

ItisASEANcyber-securityteamcompe66on.ItpitsteamsfromalloverASEANMemberStates(AMS)tocompeteinaseriesCapturetheFlagcompe66ons.

§  SecurityAssessment§  DataProtec2on§  Monitoring&Incident

Handling§  NetworkForensic§  DataProtec2on§  PerimeterSecurity§  WirelessSecurity§  WorkshopDataCenter

SecuritywithOSSoCware

PublicTrainingTopics:

TrainingPar1cipant:

§  DigitalForensic§  DNSSecurity§  AndroidMalwareAnalyzing§  SecureProgramming§  Server&WebSecurity§  NetworkRou2ngMul2plaHorm

RL-Internet protection and safety

Documents

Transcript of RL-Internet protection and safety

New Media Internet Expression and European Data Protection

NOMINATED RL LIST2201528586GUNPAL RL\827 2406502093RIYASAT ALI RL\828 2405010222JITENDRA KUMAR SHARMA RL\831 2405519571TILAK CHOUDHARY RL\832 2201007005BALWAN SINGH RL\834 2405500408TARACHAND

FOR ISSUED - @NSWDepartmentofEducation · 2019-10-10 · learning learning assembly / courtyard street play pedestrian entry rl 50,150 rl 50,150 rl 50,500 rl 50,500 rl 50,500 rl 51,000

Acceptable Use and Copyright. AUPs Children's Internet Protection Act (CIPA) Technology Protection Measure Internet Safety Policy Access by minors to.

NOMINATED RL LIST2201016983 vinod kumar rl\1837 2402501072 kishan lal yogi rl\1839 2405001154 suresh kumar mitharwal rl\1843 2402502879 saunu ram rl\1847 2201560722 hawa singh rl\1854

Legal protection of personal data on the internet

Indonesia Internet Sehat on Child Online Protection

RL 22-32 BLU BUrners TRAining CEntre. RL 22-32 BLU BUrners TRAining CEntre CONTROL BOX LOA 24.171 B27 FEATURES: #Electrical protection IP 40 #Electrical.

719 CITY PLANNING COMMITTEE MEETING 20 JULY 2016 … · 2019. 6. 23. · line basement line of basement rl 3.500 rl 3.650 rl 3.400 rl 3050 rl 2.800 rl 2.740 rl 2.720 rl 2.700 rl 2.460

RL 55.950 SITE BOUNDARY...RL RL GROUND 9.850 RL LEVEL 01 14.350 RL LEVEL 02 18.150 RL LEVEL 03 21.950 RL LEVEL 04 25.750 RL LEVEL 05 29.550 RL LEVEL 06 33.350 RL LEVEL 07 37.150 RL

Anti-Spam - Kaspersky Lab | Antivirus Protection | Internet Security

Taxation and Privacy Protection on Internet Platforms

Data Protection and Search Engines on the Internet

FINAL REPORT Internet Service Provider (ISP) Network Protection

Tools - Kaspersky Lab | Antivirus Protection | Internet Security

Consumer Protection Insurance - World Bank Internet Error Page

written permission of Rupert G.H. Milne Home, Keith Dunn ... · 7.1 RL 7.9 RL 7.5 RL 10.8 RL 9.9 RL 11.8 RL 10.9 RL 9.6 RL 8.4 RL 3.0 3.0 3.5 3.5 4.0 4.0 4.0 3.5 4.5 4.5 4.5 5.0 5.0

20120824 RL BR HP Integrated Data Protection VMware Web

Parental Control - Kaspersky Lab | Antivirus Protection | Internet

internet purchase protection Policy Wordings