Saya hanya seorang yang berpikiran sederhana, mencoba memahami dunia penuh kerumitan, mensyukuri setiap langkah yang diberkati, mendoakan harapan dan berharap hidup saya membuat banyak orang merasa sungguh hidup..
Translate
Monday, December 30, 2024
One Story Two Perspectives
Sunday, December 22, 2024
Webinar Implementasi Keamanan Siber Untuk Operasional Teknologi (OT) - 23 Des 24
PERPAMSI bersama Komunitas Otomasi Tukang Ledeng menyelenggarakan webinar dengan tema "Implementasi Keamanan Siber untuk Operasional Teknologi (OT): Tantangan dan Solusi" pada:
🗓 Senin, 23 Desember 2024
⏰ Pukul 09.30–11.30 WIB
💻 Platform: Zoom
Webinar ini akan membahas:
- Infrastruktur keamanan siber untuk operasional teknologi (OT).
- Standar keamanan siber ISO 27001 dan regulasi terkait.
- Praktik terbaik penerapan keamanan OT di BUMD Air Minum.
Narasumber:
Fanky Christian (Sekretaris Jenderal APTIKNAS)
Sarip Hidayat (Analis Kebijakan Pertama - BSSN)
Muhammad Hadian Noor (Manajer IT - PT Air Minum Bandarmasih)
Kegiatan ini ditujukan untuk profesional TI, pengelola OT, serta pihak terkait BUMD Air Minum dan Umum.
Segera daftar di: www.perpamsi.or.id/webinar
#PERPAMSI #IndonesiaWaterSupply #WebinarKeamananSiber #DigitalisasiAirMinum #ISO27001
Saturday, December 21, 2024
Bagaimana peluang pengusaha IT Indonesia di 2025?
Tahun 2025 diperkirakan akan menjadi tahun penting bagi pengusaha di industri IT karena teknologi berkembang sangat cepat. Berikut adalah beberapa strategi yang dapat dilakukan oleh pengusaha IT:
1. Fokus pada Teknologi Baru
- AI dan Machine Learning: Investasi pada solusi berbasis AI untuk berbagai sektor seperti kesehatan, pendidikan, dan finansial.
- Edge Computing: Fokus pada pengolahan data lebih dekat dengan perangkat, terutama untuk IoT.
- Quantum Computing: Meski masih dalam tahap awal, siapkan tim untuk mulai eksplorasi teknologi ini.
2. Cloud dan Keamanan Siber
- Cloud-native Solutions: Banyak bisnis beralih ke solusi berbasis cloud, sehingga penting untuk menawarkan solusi yang scalable.
- Zero Trust Security: Keamanan siber berbasis prinsip "never trust, always verify" akan terus meningkat kebutuhannya.
- Compliance dan Data Privacy: Pastikan solusi IT Anda mendukung regulasi seperti GDPR atau undang-undang privasi data lainnya.
3. Pemanfaatan AI dalam Operasi Bisnis
- AI untuk Sales dan Marketing: Automasi lead generation, analisis data pelanggan, dan personalisasi marketing.
- AI dalam Operasi Internal: Menggunakan AI untuk efisiensi proses kerja dan pengambilan keputusan.
4. Penyediaan Solusi untuk Transformasi Digital
- Banyak perusahaan masih berada dalam proses transformasi digital. Fokus pada solusi untuk:
- Otomasi proses bisnis.
- Integrasi sistem lama (legacy systems) dengan teknologi baru.
- Memberikan layanan konsultasi transformasi digital.
5. Menargetkan Pasar Vertikal
Identifikasi sektor-sektor tertentu yang membutuhkan teknologi IT khusus, seperti:
- Kesehatan: Telemedicine, manajemen rekam medis berbasis cloud.
- Keuangan: Solusi FinTech, analitik risiko, dan keamanan data.
- Pendidikan: Platform pembelajaran digital berbasis AI.
6. Kolaborasi dan Ekosistem
- Bangun kemitraan dengan perusahaan besar seperti penyedia cloud (AWS, Azure, Google Cloud).
- Jalin hubungan dengan startup inovatif untuk masuk ke pasar baru.
7. Diversifikasi Model Bisnis
- Tambahkan layanan berbasis subscription untuk pendapatan berulang.
- Berikan solusi berbasis hasil (outcome-based solutions) yang terukur.
8. Adopsi ESG (Environment, Social, Governance)
- Tingkatkan inisiatif ramah lingkungan dengan cloud hijau atau solusi hemat energi.
- Tawarkan produk yang mendukung keberlanjutan.
9. Investasi dalam Pengembangan Talenta
- Fokus pada pelatihan karyawan dalam bidang teknologi baru.
- Rekrut talenta global untuk inovasi yang lebih cepat.
10. Manfaatkan AI Generatif
Gunakan AI generatif (seperti ChatGPT atau DALL-E) untuk menciptakan konten marketing, desain produk, atau automasi pekerjaan kreatif.
Dengan strategi di atas, pengusaha IT dapat tetap kompetitif dan relevan di tahun 2025. Apakah ada fokus spesifik yang Anda minati?
Friday, December 20, 2024
CYBERSECURITY PLATFORM..
Selama 2 bulan belakangan ini saya membantu satu instansi pemerintah untuk mengimplementasikan Cybersecurity Platform berbasis aplikasi open source. Platform ini mengolah log dan security event dari berbagai sumber, ada dari server berbasis Windows dan Linux, dari WAF, juga dari Firewall. Sehingga event dan korelasinya bisa terlihat sepenuhnya.
Selain itu dalam Platform ini juga menggunakan otomasi via SOAR. Sehingga jika ada event dengan true positif mendeteksi adanya IoC, bisa dilakukan pemblokiran langsung di Firewall dan juga membuat case di platform DFIR. Semua komponen dalam platform ini menggunakan aplikasi open source, sehingga tidak ada biaya langganan lisensi yang harus dikeluarkan namun tetap mendapatkan korelasi full untuk semua event.
Sebelumnya, instansi ini berlangganan SIEM berbayar senilai 10M per tahun. Namun tidak bisa mendapatkan korelasi full karena ingestion terbatas hanya 100GB per hari. Sementara log dari firewall saja sudah 60 s.d 70 GB per hari, belum dari WAF dan server. Setelah saya bantu implementasi, ingestion menjadi tergantung resource yang dimiliki, dan kebetulan memang memiliki resource yang cukup besar, jadi tidak ada masalah untuk ingestion.
Aplikasi yang saya implementasikan adalah sebagai berikut:
1. Wazuh sebagai log collector dan analysis untuk semua event dari endpoint yang bisa di-install wazuh agent. https://wazuh.com/
2. Graylog dan opensearch berperan untuk melakukan log ingestion untuk endpoint yang tidak bisa di-install wazuh agent. https://graylog.org/
3. Grafana sebagai pusat korelasi untuk event dari Wazuh maupun Graylog. https://grafana.com/
4. Shuffle SOAR menjadi otak otomasi pemblokiran attacker dan pembuatan case. https://lnkd.in/gSX-zntk
5. IRIS menjadi tempat penampungan case dan ticketing true positif untuk dilakukan analisa dan tindakan lebih lanjut. https://dfir-iris.org/
6. MISP dan OpenCTI sebagai sumber data IoC dan informasi event terkait IoC.
Dengan platform ini, instansi tersebut bisa menghemat 10M per tahun dan mengoptimalkan korelasi log dari berbagai sumber. Dan semua bisa dikerjakan secara remote di luar office hour, jadi jarak dan waktu tidak menjadi masalah.
Rencananya saya akan membuka course tentang otomasi ini dalam waktu dekat, sehingga yang membutuhkan dan ingin mencoba mengelola sendiri, mendapatkan gambaran dan arah implementasi yang optimal. Namun jika ingin saya bantu, silakan menghubungi saya via message.
Mungkin platform ini memang belum sempurna dan masih ada kekurangan, namun bisa membantu dalam pengelolaan cybersecurity di dalam organisasi. Sehingga profil cybersecurity dalam organisasi bisa meningkat.
Bayu Sangkaya
hashtag#wazuh hashtag#graylog hashtag#grafana hashtag#opensearch hashtag#misp hashtag#shufflesoar hashtag#dfir hashtag#iris hashtag#misp hashtag#opencti
Thursday, December 19, 2024
TREND 2025: Innovation in powering and cooling AI racks, management of energy consumption and emissions all to be a focus in new year
Singapore [November 21, 2024] – AI continues to reshape the data center industry, a reality reflected in the projected 2025 data center trends from Vertiv (NYSE: VRT), a global provider of critical digital infrastructure and continuity solutions. Vertiv experts anticipate increased industry innovation and integration to support high-density computing, regulatory scrutiny around AI, as well as increasing focus on sustainability and cybersecurity efforts.
“Our experts correctly identified the proliferation of AI and the need to transition to more complex liquid- and air-cooling strategies as a trend for 2024, and activity on that front is expected to further accelerate and evolve in 2025,” said Vertiv CEO Giordano (Gio) Albertazzi. “With AI driving rack densities into three- and four-digit kWs, the need for advanced and scalable solutions to power and cool those racks, minimize their environmental footprint, and empower these emerging AI Factories has never been higher. We anticipate significant progress on that front in 2025, and our customers demand it.”
The 2025 trends most likely to emerge across the data center industry, according to Vertiv experts:
- Power and cooling infrastructure innovates to keep pace with computing densification: In 2025, the impact of compute-intense workloads will intensify, with the industry managing the sudden change in a variety of ways. Advanced computing will continue to shift from CPU to GPU to leverage the latter’s parallel computing power and the higher thermal design point of modern chips. This will further stress existing power and cooling systems and push data center operators toward cold-plate and immersion cooling solutions that remove heat at the rack level. Enterprise data centers will be impacted by this trend, as AI use expands beyond early cloud and colocation providers.
- AI racks will require UPS systems, batteries, power distribution equipment and switchgear with higher power densities to handle AI loads that can fluctuate from a 10% idle to a 150% overload in a flash.
- Hybrid cooling systems, with liquid-to-liquid, liquid-to-air and liquid-to-refrigerant configurations, will evolve in rackmount, perimeter and row-based cabinet models that can be deployed in brown/greenfield applications.
- Liquid cooling systems will increasingly be paired with their own dedicated, high-density UPS systems to provide continuous operation.
- Servers will increasingly be integrated with the infrastructure needed to support them, including factory-integrated liquid cooling, ultimately making manufacturing and assembly more efficient, deployment faster, equipment footprint smaller, and increasing system energy efficiency.
- Data centers prioritize energy availability challenges: Overextended grids and skyrocketing power demands are changing how data centers consume power. Globally, data centers use an average of 1-2% of the world’s power, but AI is driving increases in consumption that are likely to push that to 3-4% by 2030. Expected increases may place demands on the grid that many utilities can’t handle, attracting regulatory attention from governments around the globe – including potential restrictions on data center builds and energy use – and spiking costs and carbon emissions that data center organizations are racing to control. These pressures are forcing organizations to prioritize energy efficiency and sustainability even more than they have in the past.
In 2024, we predicted a trend toward energy alternatives and microgrid deployments, and in 2025 we are seeing an acceleration of this trend, with real movement toward prioritizing and seeking out energy-efficient solutions and energy alternatives that are new to this arena. Fuel cells and alternative battery chemistries are increasingly available for microgrid energy options. Longer-term, multiple companies are developing small modular reactors for data centers and other large power consumers, with availability expected around the end of the decade. Progress on this front bears watching in 2025.
- Industry players collaborate to drive AI Factory development: Average rack densities have been increasing steadily over the past few years, but for an industry that supported an average density of 8.2kW in 2020, the predictions of AI Factory racks of 500 to 1000kW or higher soon represent an unprecedented disruption. As a result of the rapid changes, chip developers, customers, power and cooling infrastructure manufacturers, utilities and other industry stakeholders will increasingly partner to develop and support transparent roadmaps to enable AI adoption. This collaboration extends to development tools powered by AI to speed engineering and manufacturing for standardized and customized designs. In the coming year, chip makers, infrastructure designers and customers will increasingly collaborate and move toward manufacturing partnerships that enable true integration of IT and infrastructure.
- AI makes cybersecurity harder – and easier: The increasing frequency and severity of ransomware attacks is driving a new, broader look at cybersecurity processes and the role the data center community plays in preventing such attacks. One-third of all attacks last year involved some form of ransomware or extortion, and today’s bad actors are leveraging AI tools to ramp up their assaults, cast a wider net, and deploy more sophisticated approaches. Attacks increasingly start with an AI-supported hack of control systems, embedded devices or connected hardware and infrastructure systems that are not always built to meet the same security requirements as other network components. Without proper diligence, even the most sophisticated data center can be rendered useless.
As cybercriminals continue to leverage AI to increase the frequency of attacks, cybersecurity experts, network administrators and data center operators will need to keep pace by developing their own sophisticated AI security technologies. While the fundamentals and best practices of defense in depth and extreme diligence remain the same, the shifting nature, source and frequency of attacks add nuance to modern cybersecurity efforts.
- Government and industry regulators tackle AI applications and energy use:While our 2023 predictions focused on government regulations for energy usage, in 2025, we expect the potential for regulations to increasingly address the use of AI itself. Governments and regulatory bodies around the world are racing to assess the implications of AI and develop governance for its use. The trend toward sovereign AI – a nation’s control or influence over the development, deployment and regulation of AI and regulatory frameworks aimed at governing AI – is a focus of The European Union’s Artificial Intelligence Act and China’s Cybersecurity Law (CSL) and AI Safety Governance Framework. Denmark recently inaugurated their own sovereign AI supercomputer, and many other countries have undertaken their own sovereign AI projects and legislative processes to further regulatory frameworks, an indication of the trajectory of the trend. Some form of guidance is inevitable, and restrictions are possible, if not likely.
Initial steps will be focused on applications of the technology, but as the focus on energy and water consumption and greenhouse gas emissions intensifies, regulations could extend to types of AI application and data center resource consumption. In 2025, governance will continue to be local or regional rather than global, and the consistency and stringency of enforcement will widely vary.
“Data centres already account for about 5% of Australia’s grid, well ahead of the 3-4% expected global average by 2030 as AI demand soars. By that same year, the nation’s largest data centre companies are expected to invest a further A$26 billion into new data centre infrastructure, which will add further pressure to the energy capacity concerns we’re seeing. In 2025, it’s vital that Australian industry and government work together to help define energy efficiency standards and meet energy demands to help Australia keep pace in the AI race. Our predictions suggest that new data centres and existing ones undergoing upgrades must be built or refurbished to make energy efficiency and sustainability a top priority,” said LuLu Shiraz, senior director, Vertiv A/NZ.
"AI adoption is accelerating across the Asia Pacific region, with the likes of Singapore, Malaysia, and Australia enterprises leading the way in harnessing AI for transformation, unlocking new levels of efficiencies, enhancing customer experience, and solving complex challenges with agility. Our predicted trends for 2025 suggest a strong need for investment in energy-efficient and innovative digital infrastructure to unlock AI’s full potential. At Vertiv, we are ready to support our customers with our portfolio of end-to-end critical digital infrastructure solutions that address the challenges brought by high-performance computing environments," said Paul Churchill, vice president and general manager, Vertiv Asia.