Peran serta masyarakat mendukung keamanan dan ketahanan nasional ranah siber menuju masyarakat 5.0. Disampaikan pada pertemuan Voluntary Vulnerability Discourse Program (VVDP), Malang

1. PERAN SERTA MASYARAKAT MENDUKUNG
KEAMANAN DAN KETAHANAN NASIONAL
RANAH SIBER MENUJU MASYARAKAT 5.0
ARIES SYAMSUDDIN, SKom,MT
Javanine,Malang - 12 Oktober 2019

2. KEAMANAN INFORMASI
Keamanan
Informasi
•Kerahasiaan
•Ketersediaan
•Integritas
Tujuan
Organisasi Organisasi
https://twitter.com/ariessyamsuddin

3. Tujuan NKRI
• melindungi segenap bangsa Indonesia
dan seluruh tumpah darah Indonesia;
• memajukan kesejahteraan umum;
• mencerdaskan kehidupan bangsa; serta
• ikut melaksanakan ketertiban dunia
yang berdasarkan kemerdekaan,
perdamaian abadi, dan keadilan sosial.
Dari Pembukaan
UUD Negara
Republik Indonesia
Tahun 1945
alinea keempat,
dinyatakan tujuan
Negara Kesatuan
Republik Indonesia
adalah untuk:

4. Pendekatan Holistik
Risiko & Ancaman menuntut pendekatan holistik untuk Keamanan siber:
• Pendekatan Holistik: Keamanan siber "online“ dan "offline“, Keamanan
harus terintegrasi secara baik di tingkat organisasi
• Budaya Keamanan: Kesadaran keamanan & pendidikan harus fokus
pada pendekatan holistik, dan melibatkan serta memberdayakan
individu, komunitas dan masyarakat
• Pendekatan Cerdas: Analisis Kecerdasan dan Risiko harus melihat
keamanan siber dari luar ke dalam, serta dari dalam ke luar.

5. Presidential
Policy
Directive 21
(PPD-21)

6. CYBER THREAT FRAMEWORK
www.dni.gov

7. REVOLUSI INDUSTRI

8. Society 5.0 Transformasi Kehidupan

9. AI dan IoT

10. 5 Prioritas

11. CYBER SECURITY STRATEGY
https://desc.dubai.ae

12. CYBER SECURITY STRATEGY
https://desc.dubai.ae

13. Strategy Principles
https://desc.dubai.ae

14. Architecture Cyber Security Policy
https://desc.dubai.ae

15. CYBER SMART SOCIETY

16. TECH BACKBONE SOCIETY 5.0

17. Pusat Operasi dan Riset
BSSN
Pusat Operasi dan Riset
Keamanan Siber
Akademis
Komunitas TI
Praktisi TI
BIN TNI/POLRI
SatsiberPusat Operasi dan
Riset Siber Kontra
Intelijen

18. Sekilas IoT Pentest

19. Security Assessments

20. https://blog.attify.com

22. IoT Framework Assessment (OWASP)
Edge Gateway
Cloud
Platform
Mobile

23. Search Engines for IoT Devices
1.Shodan (https://www.shodan.io)
2.FOFA (https://fofa.so/?locale=en)
3.Censys (https://censys.io)
4.Zoomeye (https://www.zoomeye.org)
5.ONYPHE (https://www.onyphe.io)

24. THE INTERNET OF THINGS FOR DEFENSE

25. AttifyOS

26. Deauth WIFI (ESP 8266) - Jammer
WEMOS
NodeMCU esp8266

27. Modulasi RTLSDR

29. Transmit dengan usb2vga
https://osmocom.org/projects/osmo-fl2k/wiki
https://github.com/steve-m/fl2k-examples

30. FT232RL FTDI USB to TTL Serial Adapter
https://hackaday.io/project/162477-serial-port-sdr

31. KerberosSDR
• Radio Direction Finding
• Passive Radar

32. Jammer HP sederhana
https://electronicsprojectshub.com/make-cell-phone-signal-jammer/

33. RAJAWALI (DRONE HUNTER)

34. TorPCAP - Tor Network Forensics
https://www.netresec.com/?page=Blog&month=2018-12&post=TorPCAP---Tor-Network-Forensics

35. AI Is The Future Of Cybersecurity
• 69% of enterprises believe AI will be necessary to respond
to cyberattacks
• 73% of enterprises are testing use cases for AI for
cybersecurity across their organizations today with
network security leading all categories
• 51% of executives are making extensive AI for cyber threat
detection, outpacing prediction, and response by a wide
margin
• 64% say that AI lowers the cost to detect and respond to
breaches and reduces the overall time taken to detect
threats and breaches up to 12%
• Fraud detection, malware detection, intrusion detection,
scoring risk in a network, and user/machine behavioral
analysis are the five highest AI use cases for improving
cybersecurity
• 56% of senior execs say their cybersecurity analysts are
overwhelmed and close to a quarter (23%) are not able to
successfully investigate all identified incidents.
Capgemini’s Reinventing
Cybersecurity with Artificial
Intelligence Report

36. Cyber Defense and AI
Automating Penetration Testing
Reconnaissance. Threat Intelligence.Perimeter Monitoring.
SpiderFoot automates OSINT to find out everything possible about your target
Deep Exploit
fully automated penetration test tool
with Metasploit.

37. GyoiThon Next generation penetration test tool
SAIVS Spider Artificial Intelligence Vulnerability Scanner
Pentoma, Wallarm, ImmuniWeb, Pcysys
Eyeballer
Membantu mencari website yang berpeluang memiliki kerentanan

38. DEVICE AI IOT

39. Ditjen Kependudukan dan Pencatatatn Sipil
Kementerian Dalam Negeri
Terima Kasih
SUMATERA
KALIMANTAN
JAVA
IRIAN JAYA