Security best practices in different scenarios of cloud environment. Presented at OWASP Indonesia Day 2017.

1. CLOUD
WITH A CHANCE OF
SECURITY BREACH
YENI SETIAWAN - RUMAHWEB.COM

2. CLOUD WITH A CHANCE OF SECURITY BREACH
YENI SETIAWAN
▸ Web Developer, pernah jadi Technical Support dan
Sysadmin di rumahweb.com
▸ Ada di Twitter dengan handle “@sandalian”

3. INTRODUCTION
TENTANG RUMAHWEB.COM
▸ BERDIRI SEJAK 2002
▸ BERAWAL DARI HANYA 1 SERVER
▸ BELASAN RIBU PELANGGAN DOMAIN & HOSTING
▸ MENJAGA KEPERCAYAAN PELANGGAN
▸ TAK KENAL HARI LIBUR

4. CLOUD WITH A CHANCE OF SECURITY BREACH
SERBA-SERBI KEAMANAN HOSTING
▸ INSIDEN KEAMANAN YANG SERING TERJADI
▸ RAGAM PILIHAN HOSTING
▸ HOSTING’S BEST PRACTICES

5. CLOUD WITH A CHANCE OF SECURITY BREACH
INSIDEN KEAMANAN YANG SERING TERJADI
▸ OUTDATED CMS (WORDPRESS, JOOMLA, ETC)
▸ OUTDATED CMS’ COMPONENTS/PLUGINS
▸ BEGINNER’S SCRIPTS
▸ ZERO DAY EXPLOITS & OTHER SERVER’S
VULNERABILITIES

6. RAGAM PILIHAN HOSTING
▸ SHARED HOSTING
▸ CAGED-SHARED HOSTING
▸ VPS (WITH MORE EFFORT)
CLOUD WITH A CHANCE OF SECURITY BREACH

7. CLOUD WITH A CHANCE OF SECURITY BREACH
HOSTING’S BEST PRACTICES
▸ SHARED HOSTING, WITH A PLUS (CAGED)
▸ SCAN FOR COMMON CMS VULNERABLE FILES
▸ SCAN FILES ON UPLOAD
▸ MODSEC (WEB APPLICATION FIREWALL)
▸ STAY ALERTED

8. CLOUD WITH A CHANCE OF SECURITY BREACH
TERIMA KASIH!