52
Cybersecurity Guidelines for Digital Financial Asset Trading Providers in Indonesia
a. Use of TLS 1.3 Protocol : All communications between users and a platform, including login credentials, transactions, and APIs, must be encrypted using Transport Layer Security (TLS) version 1.3, the latest standard that provides secure connections and performance efficiency b. Downgrade Attack Mitigation : Server configurations must strictly prevent downgrade attacks, where an attacker forces the system to revert to a weaker protocol version. c. Digital Certificate Validation: 1. Use Extended Validation (EV) Certificates to strengthen public trust in the service provider’s identity. 2. Implement Certification Authority Authorization (CAA) to restrict certificate issuance to authorized CAs only. 3. Ensure that certificate issuance is recorded in the Certificate Transparency (CT) system to detect fake certificates or CA misuse in a public and auditable manner. 2. Data at Rest Data at Rest refers to information stored on digital media, whether temporarily or permanently. Protection at this stage includes: a. AES-256 Encryption Standard A pply the Advanced Encryption Standard (AES) with a minimum key length of 256 bits for all stored data, whether on production servers, backups, or archival storage. b. Role-Based Access Control (RBAC) Integrate RBAC to ensure that only personnel with explicit authorization can access and decrypt stored data.
Made with FlippingBook Ebook Creator