Please enable JavaScript.

Coggle requires JavaScript to display documents.

SKK - Coggle Diagram

- - - - Sebuah kunci yang dipakai bersama-sama oleh
        pengirim pesan dan penerima pesan
  - - - jika input 1 & 2 sama maka outputnya adalah 0 dan sebaliknya
    - - Jika kita memiliki input k-bit dengan kemungkinan 2k, kita harus menentukan pasangan setiap k-bit tersebut yang lebarnya juga k-bit.
    - - Untuk setiap bit dari input k-bit, tiap bit ditukar posisinya ke tempat lain. Misalnya bit ke-4 dari input menjadi bit ke-5. Lalu bit ke-7 dari input jadi bit ke 2, dst.
  - - - Diciptakan tahun 1977 oleh National Bureau of
        Standard, AS
    - - Electronic Code Book
      - Cipher Block Chaining
- - - - Contracts
      - Policy Statements
      - Operational Level
      - Service level agreement
      - Agreements
    - - Get Organized
      - Establised Management
      - Framewordk Alocate
      - Responsibilitas
    - - Learn
      - Improve
    - - External audits
      - self assesment
      - Internal audits
      - security incident
    - - personal security
      - physical sec
      - create awareness
      - control access right
      - security incident handling
  - - - Information that cannot be trusted is worse than useless—it costs money and time to create and store, but provides no benefit.
    - - Information which is not available when required is of no use, even if its confidentiality is secure and its integrity intact
    - - Pencegahan terhadap usaha yang disengaja atau tidak yang melanggar otorisasi untuk
        mengakses/menyerbarkan informasi.
- - - - Implementation
        
        Logical controls
        
        Physical controls
        
        Administrative controls
      - protection
        
        Data - Unauthorized viewing, modification or copying
        
        System - Unauthorized use, modification or denial of service
        
        It should be noted that nearly every network operating system (NT, Unix, Vines, NetWare) is based on a secure physical infrastructure
  - - - To increase the level of security, many systems will require a user to provide 2 of the 3 types of authentication.
      - password
        
        Problems with passwords
        
        Insecure
        
        Easly Broken
        
        Inconvinient
        
        Repudible
        
        Kerugian Password
        
        Eavesdropper mencuri password saat sedang
        diucapkan
        
        Classic password rules
        
        The best passwords are those that are both easy to remember and hard to crack using a dictionary attack.
        
        On-Line password guessing & prevensinya
        
        Ada komputer yang memaksa pemasukkan password hanya oleh manusia (bukan program). Manusia relatif tidak cepat.
        
        Off-line Password Guessing
        
        Menebak password melalui hashnya, karena hash dari password yang umum pasti sama
        
        Password distribution
        
        Pakai KTP/SIM/KTM yang ada fotonya
      - Authentication Token
        
        Smart Card
        
        Biometrics
        
        Definition
        
        Authenticating a user via human characteristics
        
        via
        
        fingerprint scan
        
        hand geometry
        
        hand signature
        
        disanventage
        
        No common API or other standard
        
        Companies & products are often new & immature
        
        Still relatively expensive per user
        
        Some hesitancy for user acceptance
        
        Adventages
        
        Can‟t be lent like a physical key or token and can‟t be forgotten like a password
        
        Good compromise between ease of use, template size, cost and accuracy
        
        Fingerprint contains enough inherent variability to enable unique identification even in very large (millions of records) databases
        
        Basically lasts forever -- or at least until amputation or
        dismemberment
  - - - SSO is the process for the consolidating all organization platform-based administration, authentication and authorization functions into a single centralized administrative function.
    - - It improves an administrator‟s ability to manage users‟ accounts and authorizations to all associates systems
      - It reduces administrative overhead in resetting forgotten passwords over multiple platforms and applications
      - Multiple passwords are no longer required, therefore, whereby a user may be more inclined and motivated to select a stronger password
    - - Support for all major operating system environments is difficult
      - The costs associated with SSO development can be significant when considering the nature and extent of interface development and maintenance that may be necessary
- - - - Quantitatif
      - Semi-quantitatif
      - Qualitatif