Dukutek.com - Hacker
attacks "Anonymous Indonesia" last week to show that the
government-owned sites even security vulnerabilities in the case.
To improve safety, security sites, a kind of routine checks needed to examine the gaps or potential threat.
What is to be done by I Made Wiryana, IT practitioners who also runs the website president. How, through an agent or a program that automatically checks the deficiencies that exist on the site.
"So the term penetration tests. Available 'tiger team' is to test the security of online sites. If agents to find anomalies, for example, change the view of the site, without exploits, or access speed slows down, will be immediately reported to the team, "said Made in conversation Kompas Tekno phone, Monday (02/04/2012).
Tiger team or a "tiger team" is a term for a number of experts who have the task of looking for possible security vulnerabilities that exist in a system.
According to the man who is also active as a teacher and Linux activists in Indonesia, the operator of the online site is like the owner of the building that must be carried out routine checks of the building.
"For example, I as the owner, of course I'd like to know, for example, as the guard situation at night, if the guard active guard or asleep, and if the fire alarm went well or not," Made gave parables.
Of course, the security checks must be made with the permission of the owner of "building" is concerned about the method of penetration testing performed by hackers or crackers who only seek to enter the site.
"Between safety talker and a thief, do the same thing, just on different grounds. Thief if it is not allowed, ha-ha-ha," joked Made.
So that no one suspected attackers, Made said the program will be automatically assigned a unique ID that were previously known to the site manager. In relation to the question of etiquette, safety checks priority government websites, especially those who have given permission to examine.
For now, the new method of security checks try to apply in sites managed Made participating governments, the president of the site, Vice President, Kemenpora, and a new site under the Ministry of Education and Culture.
About the program would, in the hope of keeping stakeholders such as the Ministry of Communications and Information Technology and Computer Emergency Team Indonesia (ID-CERT).
Made expect all government sites can participate in security controls automatic program. "See, the security aspects should be monitored continuously. Gaps security two years ago, but there can be up to date."
Local easier
To improve the security of online sites in Indonesia, Made suggested that the organizers of electronic systems, including government sites and businesses move data center or data center in Indonesia and the use of domain. "Id".
This is in line with the number of Government Regulation 82 Year 2012 (PP 82/2012) on the implementation system and electronic transactions, which requires every operator of electronic systems for the public employment service center and data recovery emergency center in Indonesia.
"I very much support (PP 82/2012) for secure easy to trace. We could have asked for anyone to access data PANDI (Indonesian Internet Name Domain Management.) If the domain. 'Info', for example, the process was too long, "said Made.
He continued, most government sites in this area have used locally with the suffix ". Go.id." "Although there are some who have not, because it is below a certain department."
With regard to the security of online sites owned by a number of ministries in Indonesia, Done said that many of these sites are business projects in collaboration with third parties. "Once you are finished, it was not continuous control. Safeguards here is the importance of a continuous," he said.
To improve safety, security sites, a kind of routine checks needed to examine the gaps or potential threat.
What is to be done by I Made Wiryana, IT practitioners who also runs the website president. How, through an agent or a program that automatically checks the deficiencies that exist on the site.
"So the term penetration tests. Available 'tiger team' is to test the security of online sites. If agents to find anomalies, for example, change the view of the site, without exploits, or access speed slows down, will be immediately reported to the team, "said Made in conversation Kompas Tekno phone, Monday (02/04/2012).
Tiger team or a "tiger team" is a term for a number of experts who have the task of looking for possible security vulnerabilities that exist in a system.
According to the man who is also active as a teacher and Linux activists in Indonesia, the operator of the online site is like the owner of the building that must be carried out routine checks of the building.
"For example, I as the owner, of course I'd like to know, for example, as the guard situation at night, if the guard active guard or asleep, and if the fire alarm went well or not," Made gave parables.
Of course, the security checks must be made with the permission of the owner of "building" is concerned about the method of penetration testing performed by hackers or crackers who only seek to enter the site.
"Between safety talker and a thief, do the same thing, just on different grounds. Thief if it is not allowed, ha-ha-ha," joked Made.
So that no one suspected attackers, Made said the program will be automatically assigned a unique ID that were previously known to the site manager. In relation to the question of etiquette, safety checks priority government websites, especially those who have given permission to examine.
For now, the new method of security checks try to apply in sites managed Made participating governments, the president of the site, Vice President, Kemenpora, and a new site under the Ministry of Education and Culture.
About the program would, in the hope of keeping stakeholders such as the Ministry of Communications and Information Technology and Computer Emergency Team Indonesia (ID-CERT).
Made expect all government sites can participate in security controls automatic program. "See, the security aspects should be monitored continuously. Gaps security two years ago, but there can be up to date."
Local easier
To improve the security of online sites in Indonesia, Made suggested that the organizers of electronic systems, including government sites and businesses move data center or data center in Indonesia and the use of domain. "Id".
This is in line with the number of Government Regulation 82 Year 2012 (PP 82/2012) on the implementation system and electronic transactions, which requires every operator of electronic systems for the public employment service center and data recovery emergency center in Indonesia.
"I very much support (PP 82/2012) for secure easy to trace. We could have asked for anyone to access data PANDI (Indonesian Internet Name Domain Management.) If the domain. 'Info', for example, the process was too long, "said Made.
He continued, most government sites in this area have used locally with the suffix ". Go.id." "Although there are some who have not, because it is below a certain department."
With regard to the security of online sites owned by a number of ministries in Indonesia, Done said that many of these sites are business projects in collaboration with third parties. "Once you are finished, it was not continuous control. Safeguards here is the importance of a continuous," he said.
0 comments:
Post a Comment