Uncovering Cyber Incidents Worth Hundreds of Billions & Three Pillars of Banking Network Security | Computer Systems Public Lecture Part 2

The Computer Systems Public Lecture once again presented industry expert Mr. Bambang Wahyu Nugroho in the second session, which delved deeper into the technical realm, dissecting how customer money is protected behind layers of firewalls and complex routing.

In his presentation, Mr. Bambang Wahyu Nugroho used the recent hacking incidents as valuable learning material for IT students. He analyzed how critical points in the network, ranging from customer endpoints (mobile applications) and public internet lines to core banking systems in data centers, must be fortified with a layered Demilitarized Zone (DMZ) architecture.

Furthermore, he also highlighted the role of the Security Operation Center (SOC) as the front line of monitoring. Sophisticated security tools such as Intrusion Prevention System (IPS) and Web Application Firewall (WAF) will be useless if the alerts are not followed up in real-time by the operational team.

One key concept that was strongly emphasized in this public lecture was the integration of the Three Pillars of Security: People, Process/Policy, and Technology. No matter how sophisticated the IT equipment purchased by a bank is, if its employees are susceptible to social engineering (phishing) or if operational standards are not implemented with discipline, hackers will always find a way in.

The students' enthusiasm was evident during the discussion and question and answer (Q&A) sessions. Various critical questions arose, ranging from system patching procedures without disrupting customer transactions (zero downtime), preventing data exploitation through public Wi-Fi, to decision-making strategies when the data center's Uninterruptible Power Supply (UPS) begins to run low in the midst of a cyber attack.

Let's formulate the practical knowledge from these banking experts into the research agenda we are developing. Hopefully, the knowledge from these two public lectures will not only broaden our understanding of banking IT infrastructure, but also upgrade our skills in a way that will have a real impact on our future careers.