sharing di lustrum FTI unand 19 mei 2022

1. Cybersecurity & Privacy
di era Society 5.0
Setia Juli Irzal Ismail
Lustrum FTI Unand – 19 Mei 2022

2. ID-CERT
• Indonesia Computer Emergency Response
Team
• 1998
• Budi Rahardjo & Andika Triwidodo
• https://cert.or.id
• Komunitas
• Riset
2

3. Society 5.0 ?
People-centric Super-smart society
a human-centered society
merging cyberspace with physical space
a knowledge- intensive society
a data-driven society

4. Transformasi Digital
4

5. Kondisi Jepang
• Populasi usia produktif
menurun
• Usia rata-rata
penduduk semakin tua
• Keterbatasan resource
energi
• Isu Lingkungan
5

6. Dampak Industri 4.0 6
• Pengangguran
meningkat?
• Isu sosial?

7. Society 5.0
January 2016 Kabinet Jepang
5th Science
and
Technology
Basic Plan
7

8. 8

9. 9

10. Tujuan Society 5.0
• Human-centric society
• keseimbangan pembangunan ekonomi
dan sosial
• High quality of life
• Fusion
• cyber space dan the real world (physical
space)
10

11. 5 strategi
Extension of healthy lifespan
Realization of mobility revolution
Creation of next- generation supply chains
Building and development of pleasant infrastructure and towns
FinTech
11

12. Pilar Teknologi
12
Internet of Things
Big data
Robot
Artificial Intelligence

13. Skema
• Data dikumpulkan dari real world
• Diproses oleh komputer
• Hasilnya diterapkan di real world
• AC; otomatis temperatur room
• Ukur suhuà microkomputer dibandingkanà regulator
13

14. Security &
Privacy ?
14

15. Data
Data pribadi dikelola oleh
perusahaan besar
•Alamat, bangun jam berapa, kerja dimana, kapan waktu
tidur, dst.
Transportasi
•Apa yang kita beli dan apa yang kita gunakan
Supermarket
•Riwayat kesehatan
Apotek dan Rumah sakit
Privacy?
15

16. Isu Keamanan
1. Keamanan IoT
2. Default Password & credentials
3. Malware dan Ransomware
4. Privasi data
5. Perangkat IoT untuk bypass security
6. Keamanan AI?
7. Smart Home, Smart Car
8. Komunikasi data yang tidak aman
16

17. 1. Keamanan IoT
• 46 juta perangkat IoT
• Fokus pada produksi vs Security
• Pengujian keamanan
• Update
• Hanya dalam waktu terbatas
• Tidak menyediakan
• Hardware & Software jadul
• Kernel Linux yang tidak sudah tidak disupport
17

18. 2. Default Password & Credentials
• Password default
• Mirai Botnet
• Agustus 2016
• 145 ribu IP Cam , router
• 164 negara
• 60 factory default username & passwords
• DDoS 620 Gbit/s
• Krebs on Security, OVH, Github, Twitter, Reddit, Netflix, AirBnB
18

19. 3. Malware & Ransomware
• Malicious Software
• 450 ribu malware baru/hari
• Melumpuhkan perangkat
• Mengambil alih perangkat
• Mencuri Data
• Serangan Ransomware/ 11 detik
• Kerugian $20 milliar (2021)
19

20. 4. Privasi
• Data sharing antar perusahaan
• Anonim?
• Facebook – Cambridge analytica
• App: thisisyourdigitallife
• Kuis: prediksi kepribadian
• 50 juta pengguna FB
• Profil
• Pemilu US
20

21. 5. Bypass Security
dgn IoT
• Pintu masuk serangan
• Jeep Hack
• Digunakan untuk
menyerang
• Mr.Robot
21

22. 6. AI
• System Manipulatian:
• false predictions
• Dataset poisoning
• AI-based hacking:
• Malware generation
• Fuzzing
• Tesla speed limit – McAfee;
• sticker
22

23. 7. Smart Home, Smart Car
• Smart Home
• IoT
• The TRENDnet Webcam
Hack
• Jeep Hack- IBM
23

24. 8. Komunikasi Data
• Data yang dikirim tidak dienkripsi
• Data di cloud
• Keterbatasan resource (sumber daya)
• Real time
• Encryption dan TLS
24

25. Panik?
Apa yang harus kita lakukan?
25

26. Security tips
• Security awareness
• Password
• Ganti berkala
• Jangan dishare pada berbagai layanan
• Kompleksitas
• Cek di Have I been pwned?
• Password management tools
• Two step authentication
• Antivirus
• Update
• Software/Apps resmi
26

27. Privacy tips
• Batasi sharing sosmed
• Setting privacy
• Privacy tools
• Duckduckgo
• Adblock
• Https
• VPN
• Matikan layanan (Wifi, Bluetooth, GPS)
27

28. Belajar Security
• Gabung Komunitas:
• Echo, rndc, honeynet,
ctf
• Sertifikasi
• CEH, CISSP, CISA
• Materi Kuliah Kampus
• ITB, Tel-U, SGU
28

29. 29
Terima Kasih
Julismail.staff.telkomuniversity.ac.id
@Jul_Ismail jul.ismail

30. Referensi
1. Sharma, Bhanu, Krishan Dutt Sharma, and Archana Mantri. "Internet of Things: An Emerging Paradigm for Social
Safety and Security." In Artificial Intelligence, Machine Learning, and Data Science Technologies, pp. 131-153. CRC Press,
2021.
2. Fukuyama, Mayumi. "Society 5.0: Aiming for a new human-centered society." Japan Spotlight 27, no. Society 5.0
(2018): 47-50.
3. Deguchi, Atsushi, Chiaki Hirai, Hideyuki Matsuoka, Taku Nakano, Kohei Oshima, Mitsuharu Tai, and Shigeyuki Tani.
"What is society 5.0." Society 5 (2020): 1-23.
4. Toward realization of the new economy and society, Kedairen, April 2016
5. Future Investment Strategy, Japan Cabinett Office, February 2017
6. Pereira, T., L. Barreto, and A. Amaral. "Network and information security challenges within Industry 4.0
paradigm." Procedia manufacturing 13 (2017): 1253-1260
7. Deguchi, Atsushi, Chiaki Hirai, Hideyuki Matsuoka, Taku Nakano, Kohei Oshima, Mitsuharu Tai, and S. Tani. "Society
5.0 A People-centric Super-smart Society." Hitachi-UTokyo Laboratory (H-UTokyo Lab.) The University of Tokyo Bunkyo-
ku, Tokyo, Japan. Springer open (2020).
8. Shiroishi, Yoshihiro, Kunio Uchiyama, and Norihiro Suzuki. "Society 5.0: For human security and well-
being." Computer51, no. 7 (2018): 91-95.
9. Antonakakis, Manos, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric et al.
"Understanding the mirai botnet." In 26th USENIX security symposium (USENIX Security 17), pp. 1093-1110. 2017.
30