copyright © 2016 cybersecurity...

41
Copyright © 2016 CyberSecurity Malaysia

Upload: others

Post on 02-Sep-2019

14 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Page 2: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2016 CyberSecurity Malaysia

Awareness Program

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 3: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Jazannul Azriq Aripin Senior Executive, Outreach & Corporate Communication Dept., CyberSecurity Malaysia Mr. Jazannul Azriq B. Aripin; Senior Executive of Outreach Department, CyberSecurity Malaysia. He has a degree in Computer Science from Universiti Malaysia Sabah. A Microsoft Certified System Engineer (MCSE), Certified Information Security Awareness Manager (CISAM) and ISMS Lead Auditor. Ten years with CyberSecurity Malaysia doing Facebook Security, Facebook Forensic, Information Security Audit (ISMS/ISO27001-2005) and Social Engineering

Page 4: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

CyberSecurity Malaysia (CSM) adalah pusat rujukan teknikal dan khusus dalam bidang keselamatan siber di Malaysia. CSM juga diperlukan bagi menyokong dan menyediakan bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis siber negara.

Cyber999 Incident Handling (MyCERT)

Digital Forensic & Data Recovery

Common Criteria Evaluation & Certification

Vulnerability Assessment Security Evaluation Facility

Security Management & Best Practices

Malware Research Center

ISMS Audit and Certifications

Training and Professional Certification

CyberSAFE – Outreach Awareness Program Industry Development Programs

Strategic Research and Advisory

Government & International Engagement

Cryptography Research

Technology Process People Legend :

CYBERSECURITY MALAYSIA (CSM) –

AGENSI PAKAR KESELAMATAN SIBER NEGARA

4 Copyright © 2018 CyberSecurity Malaysia

Page 5: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

CYBERSECURITY MALAYSIA SERVICES

Strategic Engagement

40 CYBER SECURITY PRODUCT AND SERVICES

Research

5,277 PROFESSIONAL CERTIFICATION IN

INFORMATION SECURITY

Info Security Professional Development

Outreach

170,057 PARTICIPATION FROM SCHOOL,

UNIVERSITIES AND ORGANIZATION

80,000 CYBER SECURITY INCIDENTS

Cyber999 Help Centre

5,000 DIGITAL FORENSICS CASES / INCIDENTS

Forensics Digital

INTERNATIONAL STRATEGY AFFAIRS 12

LOCAL ENGAGEMENT STRATEGY 8

Security Management &

Best Practices INFORMATION SECURITY GUIDELINES 8

11 BEST PRACTICES GUIDELINE

Security Assurance

67 VULNERABILITY ASSESSMENT AND INFORMATION SYSTEM TECHNOLOGY SERVICES

54 ICT SECURITY PRODUCT

Cyber Security Certification

More than

More than

33

COMPANIES REGISTERED UNDER COLLABORATION

PROGRAM WITH INDUSTRY

18 Copyright © 2018 CyberSecurity Malaysia

Page 6: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 6

CYBER THREATS COME IN VARIOUS FORMS

6

TECHNOLOGY RELATED

THREATS

CYBER CONTENT

RELATED THREATS

HACK THREAT

FRAUD

MALICIOUS CODE DENIAL OF SERVICE ATACK

SPAM

INTRUSION THREATS TO NATIONAL SECURITY

SEDITIOUS / HATE SPEECH

CHILD PORN

FAKE NEWS / DEFAMATION

Jenis-jenis Ancaman Siber

Page 7: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Page 8: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

+603-8945 3992

cyber999 [at]cybersecurity.my

Format: Cyber999 Report send

to 15888

1300-88-2999 24x7 Emergency: +6019-266 5850

Copyright © 2018 CyberSecurity Malaysia

Page 9: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 10: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

What You Keep Inside Your Computer

Work-Related Information

company information

(structure, process, systems)

corporate email

business applications access

business servers access

business documents

customer information

vendor information

Personal-Related Information

personal information

personal emails

online banking

social networking

personal documents

personal photos

your dirty little secrets

Copyright © 2018 CyberSecurity Malaysia

Page 11: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 11

Security Scenarios I

“If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology” - Bruce Scheneir

Bad Guys’ Perspective Bad guys are constantly finding for the weakness of each components to ensure the success of malicious attack

Users’ Perspective Most users are more focused on how to use computer to do their daily tasks but no so much about their security

Copyright © 2018 CyberSecurity Malaysia

Page 12: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #1 – Password

Copyright © 2018 CyberSecurity Malaysia

Page 13: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #1 – Password

Copyright © 2018 CyberSecurity Malaysia

Page 14: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Test Your Password – “The Password Meter”

Copyright © 2018 CyberSecurity Malaysia

Page 15: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Test Your Password – “Passfault”

Copyright © 2018 CyberSecurity Malaysia

Page 16: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #2 – Media Sosial

Copyright © 2018 CyberSecurity Malaysia

Page 17: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Media Sosial

Copyright © 2018 CyberSecurity Malaysia

Page 18: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 18

THE GLOBAL SOCIAL MEDIA USE

18

ACTIVE SOCIAL MEDIA USERS

IN MALAYSIA (As of 2017)

20 MILLION

ACTIVE SOCIAL MEDIA USERS

WORLDWIDE (As of January 2017)

2.9 BILLION

UNIQUE MONTHLY FACEBOOK USERS

WORLDWIDE

1.9 BILLION

UNIQUE MONTHLY INSTAGRAM USERS

WORLDWIDE (Malaysians are the most

active Instagram user in the Asia-Pacific region – 73%)

600 MILLION UNIQUE MONTHLY

TWITTER USERS WORLDWIDE

317 MILLION UNIQUE MONTHLY YOUTUBE USERS

WORLDWIDE

1 BILLION

Copyright © 2018 CyberSecurity Malaysia

Pengguna Media Sosial Global

Page 19: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 20: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Facebook Statistics

20

55%

45%

34.3%

28%

(MY) 18,890,850

Page 21: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 22: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Think First!!!

Copyright © 2018 CyberSecurity Malaysia

Page 23: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Page 24: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 24

Social Media - Whatsapp

Copyright © 2018 CyberSecurity Malaysia

Page 25: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 25

Social Media - Whatsapp

Copyright © 2018 CyberSecurity Malaysia

Page 26: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 26

Social Media - Whatsapp

Copyright © 2018 CyberSecurity Malaysia

Page 27: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 27

Social Media Security

Copyright © 2018 CyberSecurity Malaysia

Page 28: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 28

Social Media Security

Copyright © 2018 CyberSecurity Malaysia

Page 29: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 29

Social Media Security

Copyright © 2018 CyberSecurity Malaysia

Page 30: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia 30

Social Media – Apps Lock

Copyright © 2018 CyberSecurity Malaysia

Page 31: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #3 – Mobile Security

Copyright © 2018 CyberSecurity Malaysia

Page 32: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 33: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 34: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #4 – Phishing

Page 35: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2018 CyberSecurity Malaysia

Page 36: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #5 – Vshing & SMShing

Copyright © 2018 CyberSecurity Malaysia

Page 37: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #6 – Ransomware

What is RANSOMWARE??? A type of malware that can stop you from using your PC, rename or encrypt

your files so you can’t use them. You may warned that you need to pay money, Bit

Coins, complete surveys or perform other actions before you can use your PC Copyright © 2018 CyberSecurity Malaysia

Page 38: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #6 – Ransomware

Copyright © 2018 CyberSecurity Malaysia

Page 39: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

Security Awareness #6 – Ransomware

Copyright © 2018 CyberSecurity Malaysia

Page 40: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia

End Message

Page 41: Copyright © 2016 CyberSecurity Malaysiapahang.jksm.gov.my/images/penerbitan/notakursus/keselamatict/Awareness... · bantuan teknikal serta perkhidmatan latihan untuk pengurusan krisis

Copyright © 2016 CyberSecurity Malaysia Copyright © 2016 CyberSecurity Malaysia 41 Copyright © 2018 CyberSecurity Malaysia