JPCERT/CC Eyes

We attended an technical event “Everybody Can Hack” in Indonesia on 25-26 February as a guest speaker. I would like to introduce the event and our cooperation with Id-SIRTII/CC (Indonesia Security Incident Response Team on Internet Infrastructure/Coordination Center), the National CSIRT of Indonesia.

Everybody Can Hack

“Everybody Can Hack” is a technical seminar which is co-organised by Sekolah Tinggi Teknologi Terpadu Nurul Fikri (Nurul Fikri Institute of Integrated Technology, hereafter ‘STT-NF’) and IdNSA (Indonesia Network Security Association) in Depok City, located in the west of Java Island. This is the second run after the 2017 event.

Photo: Seminar poster

Id-SIRTII/CC kindly invited us to speak at the event, and we conducted a workshop on secure coding for Android application targeting mobile application developers.

JPCERT/CC has been engaged in software vulnerability handling for the last 15 years. We think it is important not only to alert on existing vulnerabilities but also to promote secure coding so that vulnerabilities will not be created in a product. For this purpose, we have been providing secure coding seminars in Japan and overseas.

This time we touched upon characteristics in Android framework to care about when developing Android applications and examples of vulnerable implementation along with some demonstrations. Although it was a long workshop for 4 hours in total, the participants were actively engaged in the event.

Photo: Workshop

This event also commemorates the launch of NF-CERT, which is the Computer Emergency Response Team for STT-NF. An opening ceremony was held with participants from National Cyber Encryption Agency (BSSN), University of Indonesia and Depok City Government. There are many CSIRTs being launched in Indonesia in various organisations.

Group photo at the event

Visit to Id-SIRTII/CC

After the “Everybody Can Hack” event, we visited Id-SIRTII/CC’s office in Jakarta.

Id-SIRTII/CC is a National CSIRT of Indonesia, and JPCERT/CC has been cooperating with them in many different areas, including APCERT (Asia Pacific Computer Emergency Response Team), a CSIRT community in the region.

Photo: At Id-SIRTII/CC

One of the venues of collaboration is ‘TSUBAME’, the joint Internet monitoring project which JPCERT/CC operates with the help of CSIRTs mainly in the Asia Pacific region. We discussed about the status of sensors placed in Indonesia.

Packet flow visualised by TSUBAME

JPCERT/CC will continue cooperating with CSIRTs in various countries through different projects.

Thanks for reading.

- Ikuya Fukumoto

(Translated by Yukako Uchida)