Difference between revisions of "Keamanan Jaringan"
		
		
		
		
		
		Jump to navigation
		Jump to search
		
				
		
		
	
Onnowpurbo (talk | contribs)  | 
				Onnowpurbo (talk | contribs)   | 
				||
| (41 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
* [[Peta Teknologi Network Security]]  | * [[Peta Teknologi Network Security]]  | ||
| + | * [[Cyber Defence]]  | ||
* http://www.owasp.org/index.php/Category:Principle - Prinsip Keamanan Aplikasi  | * http://www.owasp.org/index.php/Category:Principle - Prinsip Keamanan Aplikasi  | ||
* [[Trend Keamanan Internet Indonesia 2010]]  | * [[Trend Keamanan Internet Indonesia 2010]]  | ||
| + | * [[20 Linux Server Hardening Security Tips]]  | ||
| + | * http://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html  | ||
| + | * [[Linux Security Howto]]  | ||
| + | * [[Security: Basic OS Security]]  | ||
| + | |||
| + | ==Manajemen==  | ||
| + | |||
| + | * [[Framework Cybersecurity]]  | ||
==Network Security Appliance==  | ==Network Security Appliance==  | ||
| − | Untuk yang tidak mau pusing menginstalasi berbagai [[software]] / aplikasi network security, dapat menggunakan appliance yang sudah jadi.  | + | Untuk yang tidak mau pusing menginstalasi berbagai [[software]] / aplikasi [[network security]], dapat menggunakan appliance yang sudah jadi.  | 
* [[Cyberoam]]  | * [[Cyberoam]]  | ||
| + | |||
| + | * [[ipcop]]  | ||
| + | * [[smoothwall]]  | ||
| + | * [[ebox]]  | ||
==Evaluasi Jaringan==  | ==Evaluasi Jaringan==  | ||
| Line 22: | Line 35: | ||
* http://www.cirt.net/nikto2  | * http://www.cirt.net/nikto2  | ||
* http://www.parosproxy.org/  | * http://www.parosproxy.org/  | ||
| + | * http://sectools.org/web-scanners.html  | ||
| + | * http://sectools.org/vuln-scanners.html  | ||
| + | |||
| + | Acunetix, Retina Network Security Scanner,  Network Security Auditor, dll dapat menganalisa dan memberikan report /  | ||
| + | generate report secara akurat dan profesional.  | ||
==Network Security==  | ==Network Security==  | ||
| Line 29: | Line 47: | ||
* [[Memblok Situs Porno Menggunakan Content Filter di Firefox Windows]]  | * [[Memblok Situs Porno Menggunakan Content Filter di Firefox Windows]]  | ||
* [[11 Kelemahan Yang Kerap Tidak Disadari Admin Jaringan]]  | * [[11 Kelemahan Yang Kerap Tidak Disadari Admin Jaringan]]  | ||
| + | * [[DDos: Langkah Mengatasi Serangan DDoS]]  | ||
| + | * [[Cloud: Tujuh Resiko Keamanan pada Cloud-Computing]]  | ||
| + | |||
| + | ===HoneyPot / HoneyNet===  | ||
| + | |||
| + | * [[Honeypot]]  | ||
===Mail Security===  | ===Mail Security===  | ||
| Line 47: | Line 71: | ||
* [[Edit Konfigurasi Pemblokiran Dansguardian]]  | * [[Edit Konfigurasi Pemblokiran Dansguardian]]  | ||
* [[Instalasi phpSHIELD]]  | * [[Instalasi phpSHIELD]]  | ||
| + | * http://www.fail2ban.org/wiki/index.php/Main_Page - Deteksi Serangan & Ban automatis  | ||
| + | * [[Zero Trust Network Access (ZTNA)]]  | ||
===Network Monitoring & Intrution Detection===  | ===Network Monitoring & Intrution Detection===  | ||
| + | * [[Suricata]]  | ||
* [[Instalasi Nessus]]  | * [[Instalasi Nessus]]  | ||
* [[Instalasi Nessus Client]]  | * [[Instalasi Nessus Client]]  | ||
| Line 58: | Line 85: | ||
* http://www.endace.com/cyber-security-monitoring.html  | * http://www.endace.com/cyber-security-monitoring.html  | ||
* [[Snorby Preconfigured Security Application]]  | * [[Snorby Preconfigured Security Application]]  | ||
| + | * http://www.linux-sec.net/IDS/ ([[IDS]])  | ||
| + | * http://www.monkey.org/~dugsong/talks/ids/ ([[IDS]]).  | ||
| + | * http://www.cert.org/tech_tips/intruder_detection_checklist.html ([[IDS]])  | ||
| + | * http://www.robertgraham.com/pubs/network-intrusion-detection.html ([[IDS]])  | ||
| + | * http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm ([[IDS]])  | ||
| + | * [[Linux Monitoring Tool]]  | ||
====Pertahanan untuk NetCut====  | ====Pertahanan untuk NetCut====  | ||
| + | * [[Pertahanan Melawan ARP spoofing di Linux]]  | ||
* [[Membuat Linux Kebal ARP Poisoning ARP Spoofing]]  | * [[Membuat Linux Kebal ARP Poisoning ARP Spoofing]]  | ||
* [[Pemutus jaringan LAN di linux dengan TechnoCut]]  | * [[Pemutus jaringan LAN di linux dengan TechnoCut]]  | ||
| Line 77: | Line 111: | ||
* [[GnuPG Privacy Handbook]]  | * [[GnuPG Privacy Handbook]]  | ||
* [[Ubah Nomor Port sshd]]  | * [[Ubah Nomor Port sshd]]  | ||
| + | |||
| + | ===Authentikasi===  | ||
| + | |||
| + | * [[openldap]]  | ||
===Mematikan Mesin Windows Jarak Jauh===  | ===Mematikan Mesin Windows Jarak Jauh===  | ||
| Line 90: | Line 128: | ||
* http://www.go2linux.org/fedora-centos-root-password-recovery - kalau lupa password root  | * http://www.go2linux.org/fedora-centos-root-password-recovery - kalau lupa password root  | ||
* [[Enkripsi Disk]]  | * [[Enkripsi Disk]]  | ||
| + | * [[20 Linux System Monitoring Tool]]  | ||
| + | * [[Cyber Security: Detect and remove trojans in a Linux operating system]]  | ||
| + | |||
| + | ===Anti Rootkit===  | ||
| + | |||
| + | * [[Rootkit Hunter]]  | ||
| + | * [[chkrootkit]]  | ||
===Anti Virus===  | ===Anti Virus===  | ||
* [[Instalasi antivirus clamav]]  | * [[Instalasi antivirus clamav]]  | ||
| + | * [[Scan File dan URL Secara Online]]  | ||
| + | * [[Virus]]  | ||
| + | * [[Anti Virus]]  | ||
| + | |||
| + | ===Host based IDS===  | ||
| + | |||
| + | * [[Tripwire]]  | ||
| + | * [[systraq]]  | ||
| + | |||
| + | ===RaspberryPi Pentest===  | ||
| + | * http://resources.infosecinstitute.com/pentesting-distributions-and-installer-kits-for-your-raspberry-pi/  | ||
| + | * http://www.raspberrypi.org/downloads  | ||
| + | * https://github.com/g13net/PwnBerryPi.git  | ||
==Web Security==  | ==Web Security==  | ||
* http://www.ipa.go.jp/security/vuln/documents/website_security_en.pdf    | * http://www.ipa.go.jp/security/vuln/documents/website_security_en.pdf    | ||
| + | * https://www.owasp.org/index.php/Web_Application_Firewall  | ||
| + | |||
| + | ===Web Application Firewall===  | ||
| + | |||
| + | * [[Web Application Firewall]]  | ||
| − | ===  | + | ===SQL Injection===  | 
| − | * [[  | + | * [[SQL Injection Web dengan Dork]]  | 
| − | |||
* [[Algoritma dan teknik menangkal SQL injection]]  | * [[Algoritma dan teknik menangkal SQL injection]]  | ||
| − | |||
* [[Teknik Mengatasi SQL Injection]]  | * [[Teknik Mengatasi SQL Injection]]  | ||
* [[Patch SQL Injection Session 1 cmsmadesimple]]  | * [[Patch SQL Injection Session 1 cmsmadesimple]]  | ||
* [[Patch SQL Injection Session 2 cmsmadesimple]]  | * [[Patch SQL Injection Session 2 cmsmadesimple]]  | ||
* [[Patch SQL Injection Session 3 Final akses module]]  | * [[Patch SQL Injection Session 3 Final akses module]]  | ||
| + | |||
| + | ===Cross Site Scripting XSS===  | ||
| + | |||
| + | * [[Injeksi XSS Ke Dalam Website]]  | ||
| + | * [[Analisis dan antisipasi serangan Cross Site Scripting (XSS)]] ('''RECOMMENDED''')  | ||
| + | * [[Cara Mengatasi XSS Bug pada Bagian Komentar Wordpress]]  | ||
* [http://books.google.com/books?id=3YFwVj6_51IC&printsec=frontcover&dq=XSS&hl=en&ei=r_YiTabbBIXwrQer_tDNCw&sa=X&oi=book_result&ct=result&resnum=1&ved=0CCMQ6AEwAA XSS attacks: cross-site scripting exploits and defense]  | * [http://books.google.com/books?id=3YFwVj6_51IC&printsec=frontcover&dq=XSS&hl=en&ei=r_YiTabbBIXwrQer_tDNCw&sa=X&oi=book_result&ct=result&resnum=1&ved=0CCMQ6AEwAA XSS attacks: cross-site scripting exploits and defense]  | ||
* [http://books.google.com/books?id=_9P9ImY3ITwC&pg=PA93&dq=XSS&hl=en&ei=r_YiTabbBIXwrQer_tDNCw&sa=X&oi=book_result&ct=result&resnum=2&ved=0CCgQ6AEwAQ Security+ Guide to Network Security Fundamentals - Page 93]  | * [http://books.google.com/books?id=_9P9ImY3ITwC&pg=PA93&dq=XSS&hl=en&ei=r_YiTabbBIXwrQer_tDNCw&sa=X&oi=book_result&ct=result&resnum=2&ved=0CCgQ6AEwAQ Security+ Guide to Network Security Fundamentals - Page 93]  | ||
| Line 120: | Line 187: | ||
* [[Melaporkan Situs Phising]]  | * [[Melaporkan Situs Phising]]  | ||
| + | |||
| + | ===mod security===  | ||
| + | |||
| + | * http://www.thefanclub.co.za/how-to/how-install-apache2-modsecurity-and-modevasive-ubuntu-1204-lts-server  | ||
==Hacking==  | ==Hacking==  | ||
| Line 132: | Line 203: | ||
==Referensi Keamanan Jaringan==  | ==Referensi Keamanan Jaringan==  | ||
| + | * http://docs.fedoraproject.org/en-US/Fedora/14/html/Security_Guide/index.html  | ||
* http://www.securityfocus.com  | * http://www.securityfocus.com  | ||
* http://www.lists.gnac.net/firewalls  | * http://www.lists.gnac.net/firewalls  | ||
| Line 162: | Line 234: | ||
* [http://milisdad.blogspot.com/2009/02/mereset-password-pada-aplikasi-berbasis.html Mereset Password pada Aplikasi Berbasis Web] - Aplikasi yang cukup aman tidak bisa menggunakan cara ini  | * [http://milisdad.blogspot.com/2009/02/mereset-password-pada-aplikasi-berbasis.html Mereset Password pada Aplikasi Berbasis Web] - Aplikasi yang cukup aman tidak bisa menggunakan cara ini  | ||
* http://situstarget.com/home/2010/07/02/cara-melaporkan-situs-phising/  | * http://situstarget.com/home/2010/07/02/cara-melaporkan-situs-phising/  | ||
| + | * https://crypto.stanford.edu/cs155/syllabus.html  | ||
==Pranala Menarik==  | ==Pranala Menarik==  | ||
* [[Linux Howto]]  | * [[Linux Howto]]  | ||
| + | * [[Cyber Security]]  | ||
| + | * [[Cyber Security (en)]]  | ||
[[Category: Network Security]]  | [[Category: Network Security]]  | ||
Latest revision as of 04:02, 4 January 2025
Teori
- Peta Teknologi Network Security
 - Cyber Defence
 - http://www.owasp.org/index.php/Category:Principle - Prinsip Keamanan Aplikasi
 - Trend Keamanan Internet Indonesia 2010
 - 20 Linux Server Hardening Security Tips
 - http://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html
 - Linux Security Howto
 - Security: Basic OS Security
 
Manajemen
Network Security Appliance
Untuk yang tidak mau pusing menginstalasi berbagai software / aplikasi network security, dapat menggunakan appliance yang sudah jadi.
Evaluasi Jaringan
Security Test
- http://sectools.org/web-scanners.html
 - http://www.cirt.net/nikto2
 - http://www.parosproxy.org/
 - http://sectools.org/web-scanners.html
 - http://sectools.org/vuln-scanners.html
 
Acunetix, Retina Network Security Scanner, Network Security Auditor, dll dapat menganalisa dan memberikan report / generate report secara akurat dan profesional.
Network Security
- Beberapa Tip Hacking
 - Teknik Memblok Situs Tidak Baik
 - Memblok Situs Porno Menggunakan Content Filter di Firefox Windows
 - 11 Kelemahan Yang Kerap Tidak Disadari Admin Jaringan
 - DDos: Langkah Mengatasi Serangan DDoS
 - Cloud: Tujuh Resiko Keamanan pada Cloud-Computing
 
HoneyPot / HoneyNet
Mail Security
- Postfix: Konfigurasi relayhost dengan Authentikasi
 - Block Spam Menggunakan Postfix
 - Blok Spam Menggunakan Postfix dan Bogofilter
 - Instalasi MailScanner
 - http://www.scamnailer.info/
 - Teknik Anti Spam
 - Melihat Header e-mail
 
Firewall & Blokir Situs
- Mini Howto iptables untuk Firewall
 - Firestarter Firewall untuk Ubuntu
 - Teknik Memblok Situs Tidak Baik
 - Firewall Untuk Proxy DansGuardian
 - Edit Konfigurasi Pemblokiran Dansguardian
 - Instalasi phpSHIELD
 - http://www.fail2ban.org/wiki/index.php/Main_Page - Deteksi Serangan & Ban automatis
 - Zero Trust Network Access (ZTNA)
 
Network Monitoring & Intrution Detection
- Suricata
 - Instalasi Nessus
 - Instalasi Nessus Client
 - Nessus: Melalui Web
 - Instalasi NTOP
 - Instalasi SNORT dan BASE Intrusion Detection System (IDS)
 - Instalasi EasyIDS
 - Suricata Open Source Next Generation Intrusion Detection and Prevention Engine
 - http://www.endace.com/cyber-security-monitoring.html
 - Snorby Preconfigured Security Application
 - http://www.linux-sec.net/IDS/ (IDS)
 - http://www.monkey.org/~dugsong/talks/ids/ (IDS).
 - http://www.cert.org/tech_tips/intruder_detection_checklist.html (IDS)
 - http://www.robertgraham.com/pubs/network-intrusion-detection.html (IDS)
 - http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm (IDS)
 - Linux Monitoring Tool
 
Pertahanan untuk NetCut
- Pertahanan Melawan ARP spoofing di Linux
 - Membuat Linux Kebal ARP Poisoning ARP Spoofing
 - Pemutus jaringan LAN di linux dengan TechnoCut
 - Anti NetCut
 - tuxcut
 
Secure Connection
- http://www.madboa.com/geek/gpg-quickstart/#keyintro - GPG Key
 - Virtual Private Network (VPN)
 - Instalasi dan Konfigurasi rsync untuk backup antar mesin
 - Persiapan SSH untuk SCP Batch
 - Topal - Pengikat GnuPG dan Alpine
 - Mengikat GnuPG dan Alpine
 - Menggunakan GnuPG
 - GnuPG Mini Howto
 - GnuPG Privacy Handbook
 - Ubah Nomor Port sshd
 
Authentikasi
Mematikan Mesin Windows Jarak Jauh
- http://www.howtoforge.com/how-to-remotely-shut-down-windows-xp-computers-from-a-linux-server
 - http://www.lgr.ca/blog/2008/04/shutdown-windows-from-linux.html
 - http://www.linuxforums.org/forum/redhat-fedora-linux-help/60324-remote-shutdown-windows-linux-box.html
 - http://landofthefreeish.com/linux/howto-remote-shutdown-of-a-windows-computer-from-linux/
 - http://blog.beausanders.com/?q=node/8
 
OS Security
- http://www.go2linux.org/fedora-centos-root-password-recovery - kalau lupa password root
 - Enkripsi Disk
 - 20 Linux System Monitoring Tool
 - Cyber Security: Detect and remove trojans in a Linux operating system
 
Anti Rootkit
Anti Virus
Host based IDS
RaspberryPi Pentest
- http://resources.infosecinstitute.com/pentesting-distributions-and-installer-kits-for-your-raspberry-pi/
 - http://www.raspberrypi.org/downloads
 - https://github.com/g13net/PwnBerryPi.git
 
Web Security
- http://www.ipa.go.jp/security/vuln/documents/website_security_en.pdf
 - https://www.owasp.org/index.php/Web_Application_Firewall
 
Web Application Firewall
SQL Injection
- SQL Injection Web dengan Dork
 - Algoritma dan teknik menangkal SQL injection
 - Teknik Mengatasi SQL Injection
 - Patch SQL Injection Session 1 cmsmadesimple
 - Patch SQL Injection Session 2 cmsmadesimple
 - Patch SQL Injection Session 3 Final akses module
 
Cross Site Scripting XSS
- Injeksi XSS Ke Dalam Website
 - Analisis dan antisipasi serangan Cross Site Scripting (XSS) (RECOMMENDED)
 - Cara Mengatasi XSS Bug pada Bagian Komentar Wordpress
 - XSS attacks: cross-site scripting exploits and defense
 - Security+ Guide to Network Security Fundamentals - Page 93
 - Hacking: The Next Generation
 - Building scalable web sites
 - The definitive guide to Grails - Page 409
 - Apache security
 - http://www.owasp.org/index.php/SQL_injection
 
Pelaporan
mod security
Hacking
- Wireless Hacking
 - Beberapa Tip Hacking
 - Backtrack
 - Mari Hacking Website agar menjadi lebih aman
 - Bagi yang Account Facebook di Crack
 - WebGoat - Web yang tidak aman Untuk Belajar di Hack
 
Referensi Keamanan Jaringan
- http://docs.fedoraproject.org/en-US/Fedora/14/html/Security_Guide/index.html
 - http://www.securityfocus.com
 - http://www.lists.gnac.net/firewalls
 - http://www.nfr.com.mailman/listinfo/firewall-wizards
 - http://www.sans.org/sansnews/
 - http://www.cert.org/
 - http://www.safemag.com/
 - http://www.ciac.org/
 - http://www.linuxsecurity.com/
 - http://www.insecure.org/
 
Buku-Buku
Referensi Keamanan Web
- http://www.w3.org/security/faq/
 - http://www.securityportal.com
 - http://www.2600.com
 - http://www.go2net.com/people/paulp/cgi-security/
 - http://www.consensus.com/security/ssl-talk-faq.html
 - / Web Engineering dalam Konteks Web Science: Isu Terkini dan Tantangan author : Bambang Purnomosidi D. P
 - http://whitesecure.com
 - http://www.owasp.org/index.php/Main_Page
 
URL Menarik
- http://awarmanf.wordpress.com/2010/05/01/drop-ultrasurf-dengan-iptables/
 - Mereset Password pada Aplikasi Berbasis Web - Aplikasi yang cukup aman tidak bisa menggunakan cara ini
 - http://situstarget.com/home/2010/07/02/cara-melaporkan-situs-phising/
 - https://crypto.stanford.edu/cs155/syllabus.html