Scribd
Upload
80 views

Pengantar Security Sangat Singkat: Budi Rahardjo

The document discusses security as a non-functional requirement that is often overlooked or deprioritized compared to business needs, leaving systems vulnerable. It outlines the elements of network, computer, and application security and visualizes potential security holes. The document also lists the main aspects of security as confidentiality, integrity, and availability along with additional controls of non-repudiation, authentication, and access control.

Uploaded by

budi rahardjo
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
80 views

Pengantar Security Sangat Singkat: Budi Rahardjo

The document discusses security as a non-functional requirement that is often overlooked or deprioritized compared to business needs, leaving systems vulnerable. It outlines the elements of network, computer, and application security and visualizes potential security holes. The document also lists the main aspects of security as confidentiality, integrity, and availability along with additional controls of non-repudiation, authentication, and access control.

Uploaded by

budi rahardjo
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 7

Pengantar Security Sangat Singkat

Budi Rahardjo
[email protected] blog: http://rahard.wordpress.com twitter: @rahard

7/15/12

Security Sangat Singkat - BR

Security
... merupakan non-functional requirement ... dikalahkan oleh business requirement ... pengganjal penerimaan layanan

=>trust

7/15/12

Security Sangat Singkat - BR

security sering dilupakan | dinomorduakan| diremehkan | Tinggal tunggu akibatnya saja!

7/15/12

Security Sangat Singkat - BR

Berdasarkan Elemen Sistem


Network security
fokus kepada saluran (media) pembawa informasi

Computer security
fokus kepada keamanan dari komputer (end system), termasuk operating system (OS)

Application security
fokus kepada aplikasinya sendiri, termasuk di dalamnya adalah database
7/15/12 Security Sangat Singkat - BR 5

Visualisasi Potensi Security Holes


ISP
Network sniffed, attacked

Internet
Network sniffed, attacked Network sniffed, attacked

HOLES System (OS) Network Applications (db)

Users
Trojan horse

Web Site
- Applications (database, Web server) hacked -OS hacked

Userid, Password, PIN, credit card #

www.bank.co.id
Security Sangat Singkat - BR

7/15/12

Security Aspects | Controls


Utama Tambahan

Confidentiality Integrity Availability

Non-repudiation Authentication Access Control

7/15/12

Security Sangat Singkat - BR

You might also like