Handout infosec defense-mechanism-y3dips

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Information Security Defense Mechanism Ahmad Muammar Bali, 11 Nopember 2011

Agenda <ul><li>Introduction </li></ul><ul><li>Information Security </li></ul><ul><li>Information Security Defense Mechanis...

Agenda <ul><li>Information Security Defense Mechanism </li></ul><ul><ul><li>Attack Mechanism </li></ul></ul><ul><ul><ul><l...

Introduction <ul><li>Freelance IT Security Consultant </li></ul><ul><li>More than 9 years in IT Security </li></ul><ul><l...

Information Security <ul><ul><li>means protecting information and information systems from unauthorized access, use, discl...

Information Security <ul><li>Information </li></ul><ul><ul><li>Set or collection of data that has meaning </li></ul></ul><...

Information Security <ul><li>Electronic Information </li></ul><ul><ul><li>Information that is created, convert, duplicate,...

Information Security Defense Mechanism

Know Your Enemy <ul><li>“ Know your enemy and know yourself and you can fight a hundred battles without disaster. ” Sun...

Potential Enemy <ul><li>Yourself </li></ul><ul><ul><li>Human are the weakest link in security and a vulnerable target, as ...

Potential Enemy <ul><li>CyberSpies </li></ul><ul><ul><li>or Cyber espionage is the act or practice of obtaining secrets wi...

Potential Enemy <ul><li>CyberArmy </li></ul><ul><ul><li>is the Army service component regarding cyberspace and Information...

Motives <ul><li>Money </li></ul><ul><ul><li>This motives are mostly for cracker, cyberspies, cyberterrorist/gang, they see...

Motives <ul><li>War </li></ul><ul><ul><li>This motives are perfectly for cyber army, but sometimes cyber terrorist also do...

Motives <ul><li>Zone-h version [6] </li></ul>[6] http://www.zone-h.org/news/id/4737

Attack Vector [7] <ul><li>Password (Authentication) </li></ul><ul><li>Insecure Infrastructure </li></ul><ul><li>Insecure D...

Attack Vector <ul><li>SANS TOP Cyber Security Risk </li></ul><ul><ul><li>Client-Side software that remains unpatched </li>...

Defense Mechanism <ul><li>Mechanism, Strategy or technique that we are going to use to mitigate Information security Attac...

Education <ul><li>Improve Security Awareness </li></ul><ul><ul><li>Improve the knowledge and attitude members of an organi...

Education <ul><li>Improve Security Awareness </li></ul><ul><ul><li>Make them understand that there is the potential for so...

Security Updates <ul><li>Download and install the latest security updates </li></ul><ul><ul><li>Operating system such as M...

Security Updates <ul><li>Make sure your “in-house” Application development/vendor also support fix and compatibility. </li...

Security Hardening <ul><li>Security hardening is usually the process of securing a system and application by reducing its ...

Security Hardening <ul><li>Some company even create their own Hardening Guideline to match their Security Policy. </li></u...

Security Policy [10] <ul><li>Security policy is a definition of what it means to be secure for a system, organization or o...

Security Policy <ul><li>Well known standard is both ISO 27001 and 27002 and security policy is one of the main section (12...

Security Policy <ul><li>Example: </li></ul><ul><ul><li> </li></ul></ul><ul><ul><li>Defense against Virus Attacks </li></u...

Security Device/Tools <ul><li>Notice: Never ever trust your security information to a devices. </li></ul><ul><li>Security ...

Security Device/Tools <ul><li>Security tools </li></ul><ul><ul><li>Set of application/tools that will help to secure your ...

Backup <ul><li>Backup or the process of backing up is making copies of data which may be used to restore the original af...

Attack Mechanism <ul><li>Sometimes, to do a Defense, you need to attack </li></ul>

Attack Mechanism <ul><li>Hack (attack) your own infrastructure before someone does it. </li></ul><ul><li>Do the security A...

Security Assessment <ul><li>Is a way to Validate/check the level of security on every aspect of IT Infrastructure. </li></...

Security Assessment <ul><li>Vulnerability Assessment </li></ul><ul><ul><li>A vulnerability assessment is usually carried o...

Demo <ul><li>Maybe, this is how it all end </li></ul>

DEMO <ul><li>Showing some of Attacking Scenario </li></ul><ul><ul><li>We will see how an attacker make a way ini </li></ul...

Discussion <ul><li>Question and Answer </li></ul>

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 37 Ad

1 of 37 Ad