Protecting Digital Economy through Vulnerability Coordination Center

1. Public Slide
Protecting Digital Economy through
Vulnerability Coordination Center
Girindro Pringgo Digdo
girindigdo@pm.me
State Cyber and Cryptography Agency
Meetup and Information Sharing on Cyber Security
Jakarta, July 18th 2018

2. About
• Security Consultant @ Sg Company
• Holds: CSX-F, OSCP
• Focused on Application Security
• Founder of CyberArmy.ID
• Books Author

3. Introduction

4. The Challenges
Technology focused on ease of use

5. The Challenges
Increased network environment

6. The Challenges
Decreasing skill level needed for exploits

7. The Challenges
Stick to deadlines

8. The Challenges
Cybersecurity skills gap

9. The Challenges
Security Awareness
Cool. Useless. Security Theatre

10. The Challenges
Fraud

11. The Challenges
APT

12. Case(s)
• National Insurance Company
• An Airline Company

13. Vulnerability Coordination
(1)

14. Vulnerability Coordination
(2)

15. Vulnerability Coordination
(3)

16. Vulnerability Coordination

17. Bounty

18. Available on Live Version Only

19. Available on Live Version Only

20. Available on Live Version Only

21. Others

22. Hack The Pentagon Turns One on HackerOne
Source:
https://www.hackerone.com/blog/hack-the-pentagon-turns-one

23. Singapore Mindef Invite Hackers
Source:
https://www.straitstimes.com/singapore/defence-ministry-to-invite-300-hackers-to-hack-its-
internet-connected-systems

24. Cybersecurity Framework Core
Source: https://blacknightcyber.com/index.php/cyber-services-2/

25. Incident Response Lifecycle
Source: NIST SP 800-61 r2

26. Steps (1)
• Preparation (Before Incident)
✓ Establishing policy and warning banners
✓ Identify which business are important
✓ Backup Server
✓ Security awareness to all parties in Organization
✓ Rules fine tuning
✓ Up to date
✓ Using strong passphrase
✓ P&P (Patch & Pray)
✓ …

27. Steps (2)
• Incident / Disaster Strikes
✓ Isolation
✓ Using 2nd server with the most recent version of backups
✓ Monitor all activities
✓ Block all incoming suspicious requests
✓ …

28. Steps (3)
• Post Incident
✓ Lesson learned
✓ Restoring operations to normal
✓ Better wipe out all files, change with a new fresh apps
✓ Ensuring that no vulnerabilities remain
✓ Improving defences
✓ Performing vulnerability analysis
✓ Standardized
✓ …

29. End of Slide.