Keamanan Informasi: Prinsip keamanan - availability (section 5)

Summary

This video discusses the critical role of 'Availability' in information security, highlighting its importance alongside confidentiality and integrity. The speaker emphasizes that with the increasing reliance on digital systems, availability has become crucial, particularly for services like e-commerce. Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are explained as major threats to availability. The video also covers strategies for mitigating these attacks, such as redundancy, disaster recovery plans, and cyber drills to ensure business continuity and service availability, even in the event of cyber incidents or system failures.

Takeaways

• 😀 **Confidentiality** and **Integrity** are two fundamental pillars of security, ensuring data is protected from unauthorized access and tampering.
• 😀 **Availability** is the third critical aspect of security, ensuring that services and systems are accessible when needed.
• 😀 Availability wasn't originally considered a key security concern, but with modern, interconnected systems, it's now vital to prevent business disruptions.
• 😀 A **Denial of Service (DoS)** attack targets availability by overwhelming systems with excessive traffic, causing services to be unavailable.
• 😀 A more dangerous variant, the **Distributed Denial of Service (DDoS)** attack, involves multiple machines working together to flood a target system, amplifying the damage.
• 😀 Real-world examples, like e-commerce platforms (e.g., Tokopedia, Shopee), highlight the severe business impact of availability disruptions.
• 😀 The **Domain Name System (DNS)** is vulnerable to DDoS attacks, where thousands of machines can bombard a DNS server with requests, making it fail.
• 😀 To mitigate availability risks, companies can implement **redundancy**, ensuring systems can failover to backup services if one is compromised.
• 😀 **Disaster Recovery Planning** is crucial for restoring services quickly after disruptions, through measures like backup servers or data recovery centers.
• 😀 **Cyber drills** are important for training staff to handle security incidents effectively and minimize downtime during service disruptions.
• 😀 Overall, ensuring the **availability** of systems is as important as safeguarding confidentiality and integrity, particularly with the increasing reliance on digital services.

Q & A

What is the third aspect of security discussed in the transcript?

The third aspect of security discussed is **availability**. It ensures that systems and services are accessible when needed.

Why was availability initially not considered an important aspect of security?

Initially, availability was not considered a critical security aspect because systems were less dependent on continuous access. However, as reliance on online services increased, the importance of availability grew significantly.

What can happen if a service like an e-commerce platform is not available?

If an e-commerce platform is unavailable, transactions cannot occur, leading to significant business disruptions. Both the company and individuals selling through the platform would be affected.

What is a Denial of Service (DoS) attack?

A **Denial of Service (DoS)** attack aims to make a service unavailable by overwhelming it with traffic or requests, thereby preventing legitimate users from accessing the service.

What is the difference between a DoS and a DDoS attack?

While a **DoS** attack originates from a single source, a **Distributed Denial of Service (DDoS)** attack is launched from multiple sources or machines, making it more difficult to mitigate.

What are some examples of attacks that target availability?

Examples include flooding networks with excessive traffic, overloading applications, and attacking supporting infrastructure such as power supply systems.

How can a company protect its systems from attacks targeting availability?

Companies can protect against availability attacks by implementing **redundant systems**, **disaster recovery plans**, and **traffic filtering** techniques to prevent service disruptions.

What is the role of a disaster recovery plan in ensuring availability?

A **disaster recovery plan** ensures that, in case of a failure (such as a power outage or system crash), a company can quickly restore its systems and services, maintaining availability.

What are cyber drills, and how do they help with availability?

Cyber drills are training exercises that prepare employees to respond effectively to security incidents. These drills ensure that the team can handle issues like DoS attacks or service outages, maintaining business continuity.

How do redundancy and disaster recovery contribute to maintaining availability?

Redundancy ensures that backup systems are in place to take over if the primary system fails. Disaster recovery plans ensure that data can be restored and systems can be quickly brought back online, minimizing downtime and maintaining availability.