Cybercrime

(Kriminalitas siber)
Etika Profesi: Cybercrime - Fathul Wahid 1
 Jenis cybercrime (1)
• Kriminalitas yang menyebabkan kerusakan
komputer
– Virus komputer
– Worm
– Kuda Troya (Trojan horse)
– Logic bomb
– Time bomb
• Kriminalitas yang melibatkan penipuan/
kecurangan (fraud)
– Credit card fraud/carding
Etika Profesi: Cybercrime - Fathul Wahid 2
 Jenis cybercrime (2)
• Kriminalitas yang menyebabkan akses
tanpa hak ke dalam Internet dan jaringan
komputer
– Hacking
– Cracking – dengan maksud merusak
– Industrial espionage
– Defacing

Etika Profesi: Cybercrime - Fathul Wahid 3

Etika Profesi: Cybercrime - Fathul Wahid 4
 Jenis cybercrime (3)
• Kriminalitas yang menggunakan Internet
sebagai alat bantu
– Cyberstalking
• Kriminalitas yang melibatkan penyalahgunaan
informasi pribadi
– Identifty theft
– Phising
• Kriminalitas yang mendukung perusahaan
kriminal
– Money laundring
– Basis data untuk distribusi obat terlarang
– Con games
Etika Profesi: Cybercrime - Fathul Wahid 5
 Phising

Etika Profesi: Cybercrime - Fathul Wahid 6

 Con Games
• Pyramid schemes
• Work-at-home schemes
• Business opportunities or franchises
• Internet-related services that are not
delivered –e-bay
• Competitions
• Win a Free trips!!
• 899 calls.

Etika Profesi: Cybercrime - Fathul Wahid 7

 Jenis cybercrime (4)
• Kriminalitas yang melibatkan masalah pencurian
software dan hak atas kekayaan intelektual
(HAKI)
– Pembajakan software
• Kriminalitas yang melibatkan pornografi
– Pronografi di bawah umur (kiddie porn)
– Jaringan prostitusi dan sejenisnya
• “Kriminalitas” yang menimbulkan perasaan tidak
menyenangkan
– Pernyataan membenci ras tertentu
– Pernyataan menjelekkan agama

Etika Profesi: Cybercrime - Fathul Wahid 8

Temuan Survei

Etika Profesi: Cybercrime - Fathul Wahid 9

Kasus kejahatan siber

Etika Profesi: Cybercrime - Fathul Wahid 10

Kerugian akibat kejahatan siber
Virus 42,79
Unauthorized access 31,23

Theft of proprietary information 30,93

Denial of service 7,31

Insider net abuse 6,86

Laptop theft 4,11
Financial fraud 2,57

Misuse of public w eb application 2,23

System penetration 0,84
Abuse of w ireless netw ork 0,54

Sabotage 0,34
Telecom fraud 0,24

Website defacement 0,12

- 10 20 30 40 50
US$ million

Etika Profesi: Cybercrime - Fathul Wahid 11

 Kerugian akibat “carding”
Loss of staff time 45

Chargebacks 44

Loss of revenue 41

Loss of goods 35

Increase in staff resources 31

Chargeback fines 30

Loss of customer goodw ill 29

Revenue reconciliation inefficiency 27

Higher discount fees 23

Bank fees 22

Increase in revenue requirements/holdbacks 21

Shipping and handling 17

0 5 10 15 20 25 30 35 40 45 50
% respondents

Etika Profesi: Cybercrime - Fathul Wahid 12

 Ancaman
• KPMG Survey
– 10% do not test security
– 52% no intrusion detection
– 87% suffer breaches
– 61% viruses
– 28% e-mail intrusion

Etika Profesi: Cybercrime - Fathul Wahid 13

Tingkat kepercayaan (1)

Etika Profesi: Cybercrime - Fathul Wahid 14

Tingkat kepercayaan (2)

Etika Profesi: Cybercrime - Fathul Wahid 15

Jenis ancaman (1)

Etika Profesi: Cybercrime - Fathul Wahid 16

Jenis ancaman (2)

Etika Profesi: Cybercrime - Fathul Wahid 17

Jenis ancaman (3)

Etika Profesi: Cybercrime - Fathul Wahid 18

 Hukum (1)

Etika Profesi: Cybercrime - Fathul Wahid 19

 Hukum (2)

Etika Profesi: Cybercrime - Fathul Wahid 20

 Auditing (1)

Etika Profesi: Cybercrime - Fathul Wahid 21

 Auditing (2)

Etika Profesi: Cybercrime - Fathul Wahid 22

 Temuan lain
• CSI/FBI Survey 2002
– 90% reported security breaches
– 87% acknowledged financial losses
– 42% quantify the losses US$455m
– Viruses US$49m
– Intellectual Property US$170m
• AusCERT 2002
– Total losses from viruses were A$ 891,000
– Theft of proprietary information, Sabotage, Financial Fraud totalled
A$ 2,220,000
– Inside abuse of email and other computer resources totalled A$
617,100.
• KPMG Survey– “Thought” were important
– 22% viruses
– 4% Intellectual Property loss
Etika Profesi: Cybercrime - Fathul Wahid 23
Etika Profesi: Cybercrime - Fathul Wahid 24
 Apa yang bisa dilakukan?
• Establish a policy
– No expectation of privacy
– Prohibited activities
– Communication of trade secrets
– Passwords
• Educate the employees
– Regular updates and reminders
– Signed agreement
• Enforce the policy
– Flexibility
– Trusted solution
– Test the solution

Etika Profesi: Cybercrime - Fathul Wahid 25

 Apa yang juga bisa dilakukan?
Firew alls 97

Anti-virus softw are 96

Instrusion detection systems 72

Server-based access control list 70

Encryption form data in transit 68

Reusable account/login passw ords 52

Encrypted files 46

Smart cards/other one-time passw ord tokens 42

Public key infrastructure 35

Instrusion prevention systems 35

Biometrics 15

0 10 20 30 40 50 60 70 80 90 100
% respondents

Etika Profesi: Cybercrime - Fathul Wahid 26

Matur nuwun!

Etika Profesi: Cybercrime - Fathul Wahid 27