Cyber Security Essentials
Learn how to protect digital systems, applications, and networks from cyber attacks.
12
Modules3 Hours
ReadingBeginner
LevelWhat is Cyber Security?
Cyber Security merupakan disiplin ilmu yang berfokus pada perlindungan sistem komputer, jaringan, perangkat, dan data dari akses yang tidak sah, serangan, kerusakan, maupun pencurian informasi.
- Confidentiality
- Integrity
- Availability
CIA Triad
Confidentiality
Menjaga kerahasiaan data.
Integrity
Menjamin data tidak berubah.
Availability
Sistem selalu tersedia.
Cyber Threat
Malware
Virus, worm, trojan, spyware, ransomware.
Phishing
Social Engineering.
DDoS
Distributed Denial of Service.
SQL Injection
Manipulasi query database.
OWASP
OWASP Top 10 Web Security Risks
OWASP (Open Worldwide Application Security Project) merupakan standar keamanan aplikasi web yang paling banyak digunakan di dunia.
A01 - Broken Access Control
User dapat mengakses data yang bukan haknya.
A02 - Cryptographic Failures
Kesalahan enkripsi password maupun data sensitif.
A03 - Injection
SQL Injection, Command Injection, LDAP Injection.
A04 - Insecure Design
Kesalahan desain sistem sejak awal.
A05 - Security Misconfiguration
Default password, debug mode, port terbuka.
A06 - Vulnerable Components
Library lama yang memiliki CVE.
ZERO TRUST
Never Trust, Always Verify
Prinsip Zero Trust
- ✔ Verify Explicitly
- ✔ Least Privilege Access
- ✔ Assume Breach
- ✔ Continuous Monitoring
- ✔ Multi Factor Authentication
BEST PRACTICE
Cyber Security Checklist
- ✔ Strong Password
- ✔ Multi Factor Authentication
- ✔ Regular Patch Update
- ✔ Data Backup
- ✔ Firewall Enabled
- ✔ Endpoint Protection
- ✔ VPN for Remote Access
- ✔ Security Awareness Training
Remember
Human Error masih menjadi penyebab terbesar terjadinya insiden keamanan informasi.
Quiz
Cyber Security Challenge
REFERENCES
Learning Resources
- OWASP Top 10 (2021)
- NIST Cybersecurity Framework 2.0
- ISO/IEC 27001:2022
- CIS Controls Version 8
- MITRE ATT&CK Framework
- CompTIA Security+
- CEH v13
- Cisco CyberOps
- Google Cybersecurity Professional Certificate
- Microsoft Security Documentation