🔍 Pendahuluan

Cyber Security adalah praktik untuk melindungi sistem, jaringan, dan program dari serangan digital. Serangan ini biasanya bertujuan untuk mengakses, mengubah, atau menghancurkan informasi sensitif, memeras pengguna, atau mengganggu operasional bisnis.

Dalam artikel ini, kita akan membahas berbagai aspek Cyber Security, mulai dari dasar hingga teknik lanjutan.

---

📌 Panduan Belajar Cyber Security

1️⃣ Fundamental IT & Networking

Sebelum masuk ke dunia Cyber Security, pemahaman dasar tentang komputer dan jaringan sangat diperlukan:

🖥 Komponen Perangkat Keras (Hardware)
📂 Sistem Operasi: Windows, Linux, macOS
🌐 Jaringan Komputer:

• Model OSI (7 Layer)
• Jenis Koneksi & Fungsinya (LAN, WAN, WLAN, VLAN, DMZ)
• Protokol Penting (HTTP/HTTPS, SSL/TLS, IPSEC, DNSSEC)
• Subnetting & IP Addressing (IPv4, IPv6, CIDR)
• Troubleshooting Jaringan (ping, tracert, netstat, nmap, Wireshark)
• Virtualisasi & Cloud Computing (VMWare, VirtualBox, AWS, GCP, Azure)

---

2️⃣ Keamanan Sistem & Jaringan

🔐 Authentication & Authorization
✅ MFA & 2FA
✅ SSO (Single Sign-On)
✅ Kerberos, LDAP, RADIUS

🛑 Firewall & Intrusion Detection System
✅ Host-Based Firewall vs Network Firewall
✅ IDS/IPS (Intrusion Detection/Prevention System)

📡 Keamanan Nirkabel
✅ WPA, WPA2, WPA3 vs WEP
✅ Evil Twin Attack
✅ Rogue Access Points

☁️ Cloud Security
✅ IaaS, PaaS, SaaS
✅ Zero Trust Model
✅ Keamanan Infrastruktur Cloud

---

3️⃣ Serangan Siber & Eksploitasi

💥 Jenis Serangan Jaringan
✅ DoS vs DDoS
✅ MITM (Man-in-the-Middle)
✅ DNS Poisoning, ARP Spoofing, VLAN Hopping

🌐 Serangan Web-Based
✅ SQL Injection (SQLi)
✅ Cross-Site Scripting (XSS)
✅ Cross-Site Request Forgery (CSRF)
✅ Directory Traversal

🦠 Serangan Berbasis Malware
✅ Phishing, Vishing, Smishing
✅ Ransomware, Spyware, Adware
✅ Zero-Day Exploit

🔑 Serangan Berbasis Sistem Operasi
✅ Pass-the-Hash
✅ Buffer Overflow
✅ Privilege Escalation

---

4️⃣ Digital Forensics & Incident Response

🔍 Langkah dalam Incident Response
1️⃣ Preparation
2️⃣ Identification
3️⃣ Containment
4️⃣ Eradication
5️⃣ Recovery
6️⃣ Lessons Learned

🛠 Tools Forensik Digital
✅ Wireshark, FTK Imager, Autopsy
✅ Memdump, WinHex
✅ SIEM & Log Analysis

---

5️⃣ Ethical Hacking & Penetration Testing

🔴 Jenis Tim dalam Cyber Security
🟢 Blue Team: Defenders & Security Analysts
🔴 Red Team: Ethical Hackers & Penetration Testers
🟣 Purple Team: Gabungan Red & Blue Team

🎯 Langkah dalam Penetration Testing
✅ Reconnaissance & OSINT
✅ Scanning & Enumeration
✅ Exploitation
✅ Privilege Escalation
✅ Post-Exploitation & Reporting

🛠 Alat Pentesting Populer
✅ Kali Linux, ParrotOS
✅ Metasploit Framework
✅ Burp Suite, SQLMap

---

6️⃣ Compliance, Risk & Governance

📜 Standar & Framework Keamanan
✅ ISO 27001, NIST, CIS, RMF
✅ SOC 2, HIPAA, GDPR, PCI-DSS

⚖️ Manajemen Risiko
✅ Threat Intelligence & OSINT
✅ SIEM (Security Information & Event Management)
✅ SOAR (Security Orchestration, Automation & Response)

🚪 Zero Trust Architecture
✅ Segmentasi Jaringan
✅ Least Privilege Access Control
✅ Multi-Factor Authentication (MFA)

---

7️⃣ Sertifikasi Cyber Security

🎓 Beginner-Level:
✅ CompTIA A+
✅ CompTIA Network+
✅ CompTIA Security+
✅ CEH (Certified Ethical Hacker)

⚔️ Intermediate-Level:
✅ CISSP (Certified Information Systems Security Professional)
✅ CISM (Certified Information Security Manager)
✅ OSCP (Offensive Security Certified Professional)

🏆 Advanced-Level:
✅ GPEN, GWAPT, GSEC
✅ CREST, GIAC
✅ CCNA (Cisco Certified Network Associate)

---

8️⃣ Sumber Belajar & CTF

🏆 Platform Hands-on & CTF
✅ HackTheBox
✅ TryHackMe
✅ VulnHub
✅ picoCTF
✅ SANS Holiday Hack Challenge

📚 Resource Belajar
🔗 NIST Cybersecurity Framework
🔗 MITRE ATT&CK Framework
🔗 Roadmap.sh Cyber Security

---

🏁 Kesimpulan

Cyber Security mencakup banyak aspek dari networking, keamanan sistem, forensik digital, ethical hacking, dan governance. Untuk menjadi ahli di bidang ini, disarankan untuk memahami dasar-dasar IT terlebih dahulu, lalu mendalami area spesifik sesuai minat.

💡 Cyber Security bukan hanya soal hacking, tapi juga tentang membangun sistem yang lebih aman! 🚀

---

📚 Daftar Pustaka

• National Institute of Standards and Technology. (2020). Cybersecurity Framework Version 1.1. NIST.
• International Organization for Standardization. (2013). ISO/IEC 27001:2013 Information Security Management Systems. ISO.
• Anderson, R. (2020). Security Engineering: A Guide to Building Dependable Distributed Systems (3rd ed.). Wiley.
• Bishop, M. (2019). Computer Security: Art and Science (2nd ed.). Addison-Wesley.