Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application...

28
Prepared by Dr. Khairul Akram Zainol Ariffin Assoc. Prof. Dr. Siti Norul Huda Sheikh Abdullah Dr. Khairul Azmi Abu Bakar Dr. Wan Fariza Paizi@Fauzi Assoc. Prof Dr. Nurhizam Safie Mohd Satar Assoc. Prof Dr Zulaiha Ali Othman Dr. Suhaila Zainudin Dr. Nur Samsiah Sani Ms. Shahrina Shahrani Technical Report on Cyber Heroes Competition 2017 4 & 5 December 2017 Fakulti Teknologi Sains Dan Maklumat Copyright@FTSM

Transcript of Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application...

Page 1: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

Prepared by Dr. Khairul Akram Zainol Ariffin Assoc. Prof. Dr. Siti Norul Huda Sheikh Abdullah Dr. Khairul Azmi Abu Bakar Dr. Wan Fariza Paizi@Fauzi Assoc. Prof Dr. Nurhizam Safie Mohd Satar Assoc. Prof Dr Zulaiha Ali Othman Dr. Suhaila Zainudin Dr. Nur Samsiah Sani Ms. Shahrina Shahrani

Technical Report on Cyber Heroes Competition 2017

4 & 5 December 2017

Fakulti Teknologi Sains Dan Maklumat

Copyri

ght@

FTSM

Page 2: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

2

TABLE OF CONTENTS

Introduction …………………………………………………………………………………………………

3

List of Committee ………………………………………………………………………………………… 3

Competition Format …………………………………………………………………………………… 3

Lists of Participants ……………………………………………………………………………………… 4

Competition Results …………………………………………………………………………………….. 4

Tentative Program ……………………………………………………………………………………….. 5

Postmortem Report ……………………………………………………………………………………… 6

Financial Report …………………………………………………………………………………………… 6

Management and Kit Activities ……………………………………………………………………. 6

Conclusion …………………………………………………………………………………………………… 6

Appendix A: Organization Committee ……………………………………………………………

Appendix B: Lists of Participants ……………………………………………………………………

Copyri

ght@

FTSM

Page 3: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

3

Introduction Nowadays, all the world industry and business analysts increasingly recognize that the world is currently undergoing its fourth industrial revolution. The fourth industrial revolution brings a new risk for manufacturers and digital supply network: cyber. In this age of Industry 4.0, the cybersecurity strategies need to be secure, vigilant and resilient as well as fully integrated in to the organizational strategy. As the preparation for this scenario, the youngsters have to be prepared with the set of skills and knowledge to handle the security issue when they are joining the industry later on. Due to this aims, Malaysian Communication and Multimedia Commission (MCMC) in collaboration with CyberSecurity Malaysia (CSM), Standard Chartered Bank (SCB) and Universiti Kebangsaan Malaysia has organized a cyber defense competition called Cyber Heroes Competition 2017. This event was held on 4 & 5 December 2017 at Universiti Kebangsaan Malaysia where a number of local universities students participated. Together with the competition the cyber security talks and campaigns were also launched on the same day. The event is an informative platform to promote the culture of being protective (defensive) and responsible in a cyber space. In this event, it is not only meant to send powerful messages of global security awareness (to make our cyberspace a safer place); but at the same time, the event also meant to provide exposure to undergraduate students about entrepreneurship career and professionalism in lucrative cyber security industry. The objectives are as follows:

● To create awareness among youths on the importance of defense over hacking and to make them see that defensing is more benefitting than hacking activities.

● To search and develop new talents among young generations in Malaysia on cyber defense.

● To instill forensic readiness knowledge and practice among the youths; so that in the event of crime or crisis the evidence is readily available for investigation purpose.

● To provide exposure to young talents on how to transform their cyber security skills to entrepreneurship.

List of Committees Please refer to Appendix A.

Competition Format The scenario for this competition is cyber defense, where the participants need to defend their critical asset from being attack by the attacker. During the competition, the participants must be able to identify and mitigate the attack, preserve the evidence, analyze the incident, present and recommend preventive action for future threats. This format meant to give a glance and exposure from the industrial expectation. On Day 1, the participants will try to answer all the questions to get the flags (points) based on the scenario given. Only the top 5 will be selected for the presentation session on Day 2. On Day 2, the top 5 teams will have 15 minutes each to present their findings. The concept of the presentation part is like the best 5 teams (so-called vendors) try to convince the

Copyri

ght@

FTSM

Page 4: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

4

judges to win an incident response project (competition) of a company.

Figure 1. Winner announcement and closing ceremony at Multimedia Hall The judges will evaluate the findings and presentation based on the criteria’s that will be set by the collaborators. The teams will also be given a slide template as guidance for their presentation.

List of participants In total, there are about 110 participants and 40 persons of committee. The number of institution is 11. Refer to Appendix B

Competition Results Below is the competition results.

Winners Prizes Team

1st Prize ● RM 5,000.00 (cash) ● CSM Technical Training ● Certificate of

participation

UNITEN

2nd Prize ● RM 4,000.00 (cash) ● Certificate of

participation

UTM

3rd Prize ● RM 3,000.00 (cash) APU 1

Copyri

ght@

FTSM

Page 5: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

5

● Certificate of participation

4th Prize ● RM 2,000.00 (cash) ● Certificate of

participation

APU 2

5th Prize ● RM 1,000.00 (cash) ● Certificate of

participation

UITM

Tentative Program This program was a-two day activity. It comprised competition, workshop and top 5 presentations. Day 1

Time Proposed Agenda

9.00 - 9.30 AM Opening Ceremony

9.30 - 10.30 AM Cyber Heroes Competition

Accelerating Incident Response and Security Investigation Speaker: Mr. Zainurrasyid Abdullah Forensics Senior Analyst, CyberSecurity Malaysia

10.45 - 11.45 AM 21st Century Forensic Speaker: Mr. Barry Foster Head of Cyber Forensic, Standard Chartered Bank

11.45 - 2.15 PM Lunch Break

2.15 - 3.15 PM From general IT to become Professional Infosec Speaker: Mr. Mohd Fazli Azran Malaysia Chapter Leader, Open Web Application Security Project (OWASP)

3.30 - 4.30 PM Cybersecurity, Catalyzing Digital Innovation Ecosystem Speaker: Mr. Alvin Teoh Manager, Cybersecurity, Enabling Ecosystems, Malaysia Digital Economy Corporation (MDEC)

4.30 - 5.30 PM End

Day 2

Time Proposed Agenda

9.00 - 11.30 AM Team Presentation

11.30 - 12.00 PM Judges Discussion & Evaluation

12.00 - 2.00 PM Winner Announcement Closing Ceremony

Table 3: Tentative program for Day 2

Copyri

ght@

FTSM

Page 6: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

6

Postmortem Report Refer to appendix C

Financial Report Refer to appendix D

Management and Kit Activities Press Release (Appendix E) Publicity (Appendix F) MC Text (Appendix G)

Conclusion

The Cyber Heroes Competition which was held on 4 & 5 December 2017 at Universiti Kebangsaan Malaysia came with one aim: to provide exposure to undergraduate students about entrepreneurship career and professionalism in lucrative cyber security industry. On the day of event, the time was occupied with cyber security awareness talk from the experts on and the competition which focused on the technical and soft skills of the participants. There were 22 teams from public and private universities in Malaysia participated in the event. The champions of the competition will be appointed as Cyber Heroes ambassador and free seats in technical trainings. The prizes will be given by all honourable leaders including UKM Vice Chancellor, YBhg Tan Sri Dato’ Seri Noor Azlan Ghazali, Ybhg Dato’ Dr Amiruddin Abdul Wahab dan Mr Mathew Norris.

Copyri

ght@

FTSM

Page 7: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

7

Appendix A: Organization Committee

Organisation Name

CyberSecurity Malaysia Standard Chartered Global Business Service

General Chair Dato’ Hj. Dr Amiruddin Abdul Wahab Program Chair Anthony Fung (Standard Chartered Global Business Service) Co-Chair Mohammad Firham Affendi

Co-Finance Chair Mohd Zabri Adil Bin Talib Competition Co-Chair Muslim Mansor (Standard Chartered Global Business Service) Saravanan Kulanthaivelu (Standard Chartered Global Business Service) Industry Publicity 1. Fauzi Bin Mohd Darus 2. Jazreena Binti Abdul Jabar

Universiti Kebangsaan Malaysia

Local Organizing Committee Chairman : Prof Madya Dr. Siti Norul Huda Sheikh Abdullah Co-Chairman : Prof Madya Dr. Muhammad Shanudin Zakaria Secretary : En. Mohd Mahyuddin Darus

Treasurer : Nordiana Ali Norana Mansor Sponsorship : Prof Madya Dr. Muhammad Shanudin Zakaria Program : Prof. Madya Dr. Zulaiha Ali Othman Dr Wan Fariza Fauzi Dr Nor Samsiah Sani SIG Ethics Publicity (Web) : Prof Madya Dr Dr. Nurhizam Safie & HEJIM Hafizi Abdullah www.nxt.training/events/cyber-heroes-competition http://bit.ly/2AbYEJ1 Logistic & Technical : Azmi Nasir Rustam Ikmal Ahmad Akmal Rusliza Md Ruz Jamaludin Sabran Accommodation: SIG NUMOSS Registration : SIG NUMOSS Protocol : Marlina Md Noh

Copyri

ght@

FTSM

Page 8: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

8

Refreshments : SIG Cyber Ethics UKM Competition Coach: Mohd Zamri Murah Ahmad Tarmizi Abdul Ghani UKM Competition Committee: Dr Khairul AkramZainol Ariffin Dr Khairul Azmi Abu Bakar CYBER ETHICS Ketua program : Afiqah *AJK Makanan * PIC : Muzdalifah 1. Raihan 2. Syazana 3. Eira 4.amelia 5.jannah 6.hanis *AJK Penutupan* PIC : 1. Adlina 2. Puteri 3. Zur'ain 4. Nisa 5. Zatil imani 6. Mas Aidura 7. Amira Asy-syura 8. zulhizzat 9. snjannah 10. aiman 11.amar 12.faris Mkn 1.afifah 2.ain 3.razita 4.adilla AJK NUMOSS 1. Jason Ariel Rajendran 2. Anis Safiya binti Ahmad Sanusi 3.Fatin Farhanis bnti Idris 4.Fazira Binti Madrasah

Copyri

ght@

FTSM

Page 9: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

9

Appendix B : List of participants

Copyri

ght@

FTSM

Page 10: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

10

Copyri

ght@

FTSM

Page 11: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

11

Appendix I: Financial Report

No Date DEBIT INSTITUTION RM No Date CREDIT RM

YURAN PENYERTAAN 4.12.2017

Hiasan Pentas Hari Penyampaian Hadiah 320

1 4.12.17 AFIQAH UPNM 350 1 4.12.2017 Keraian 2,947.50

2 4.12.17 DR. SUHAILAN 350 2 5.12.2017 Sijil seminar 216

3 4.12.17 ABD MALIK 350 3 5.12.2017 Keraian 2,325.00

4 4.12.17 PM HAZALI UPNM 350 4 7.12.2017 Cenderahati 15437.05

5 8.12.17 742 5 4.12.2017 Keraian peserta 2,986.55

6 12.12.17 NOR BADRUL 350 6 26.01.17 BAHAN PAKAI HABIS 331.79

7 12.12.17 FIZA BINTI ABDUL RAHIM UNITEN 700 7 26.01.18 Mesyuarat 1 nov 2017 37.50

8 12.12.17 MAZURA MAT DIN 700 8 08.02.18 Mesyuarat 6 Nov 2017 25.00

9 12.12.17 KHAIRIL ASHRAF BIN ELIAS 700 9 08.02.18

Mesyuarat 17 Nov 2017 75.00

10 12.12.17 FAKARIAH HANI BINTI MOHON ALI UITM 700 10 19.2.2018 Keraian 742

11 12.12.17 DR MOHAMMED HAZIM AMEEN ALKAWARIZMI APU 700 11

20.12.2017

Pindah ke Tabung Penjanaan Siber FTM4 7,568.61

12 18.01.17 MR. MESAM ESLAHI 350

13 18.01.17 TAJUL AZHAR MOHD TAJUL ARIFFIN 350

SUB JUMLAH YURAN (A) 6692

14 06.02.18 CYBER HEROES COMPETTION 2017 CSM 28000

GST 1.06% 1680

BAKI (B) 26320

JUMLAH (A)+(B) 33012 JUMLAH 33012

Copyri

ght@

FTSM

Page 12: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

12

Appendix II: Postmortem Report

MINIT MESYUARAT POST MORTEM CYBER HEROES 2017

Bil. 1/2018 Tarikh : 14 Februari 2018 Masa : 10.30 pagi Tempat : Bilik Mesyuarat 1, Blok B, FTSM Ahli Yang Hadir Prof. Madya Dr. Siti Norul Huda Sheikh Abdullah - Pengerusi Dr. Khairul Azmi Abu Bakar - Naib Pengerusi Prof. Madya Dr. Nurhizam Safie Mohd. Satar Prof. Madya Dr. Zulaiha Ali Othman Dr. Khairul Akram Zainol Ariffin Dr. Nor Samsiah Sani Dr. Suhaila Zainudin En. Mohd Zamri Murah En. Jamaludin Sabran En. Muhammad Zuhair - CSM En. Nurmohmmad Kamil Mohmmad Alta - CSM En. Fauzi Mohd. Darus - CSM En. Muslim Mansor - SCB En. Saravanan K - SCB Ahli Yang Tidak Hadir (Dengan Kenyataan) Prof. Dr. Mohamad Shanudin Zakaria Dr. Wan Fariza Paizi@Fauzi Encik Mahyuddin Darus En. Azmi Nasir Pn. Nurdiyana Mohd. Yassin Pn. Marlina Md. Noh Turut Hadir Rusliza Md.Rus - Pencatat ALU-ALUAN Mesyuarat dimulakan dengan bacaan Al-Fatihah dan bacaan doa. Memulakan tugas. Pengerusi mengucapkan terima kasih di atas kehadiran ahli dalam Mesyuarat Post Morterm Cyber Heroes 2017 pada kali ini. PENDAHULUAN I. PERKARA-PERKARA BERBANGKIT

Copyri

ght@

FTSM

Page 13: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

13

1. Hadiah pemenang tempat ke 3 Mesyuarat dimaklumkan bahawa: ● pasukan UTM masih belum menerima hadiah.

Mesyuarat bersetuju: ● meminta pengurus pasukan UTM untuk menghantar email berkenaan perkara

tersebut kepada CSM.

2. T-shirt Cyber Heroes Mesyuarat dimaklumkan bahawa:

● T-shirt yang tinggal masih berbaki 6 helai lagi. ● Hasil jualan t-shirt oleh kumpulan Cyber Ethic – 1 helai sahaja. Wang hasil

jualan ada pada Prof. Madya Dr. Nurhizam Safie.

Mesyuarat bersetuju: ● FTSM boleh menyimpan baki t-shirt tesebut.

3. Jamuan bagi Mesyuarat Post-morterm Cyber Heroes 2017

Mesyuarat bersetuju: ● Belanja jamuan pada hari ni perlu ditolak dalam perbelanjaan sebenar.

Tindakan/Makluman: Semua ahli /CSM

4. Sijil AJK Mesyuarat dimaklumkan bahawa: ● Beberapa orang ahli jawatankuasa Cyber Heroes 2017 masih belum

menerima sijil lantikan. Mesyuarat bersetuju: ● Minta Pn. Marlina menyemak dan kumpul senarai nama AJK yang tertinggal.

Tindakan/Makluman: Marlina /CSM II. AGENDA

1. Perbelanjaan sebenar “Cyber Heroes Competition 2017”

a. Perbelanjaan

Cyber Security Malaysia (CSM) masih lagi belum melangsirkan baki bayaran sebanyak RM28,000 kepada UKM.

Tindakan/Makluman : CSM

b. Infrastruktur

Copyri

ght@

FTSM

Page 14: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

14

Cadangan untuk menghadkan kuantiti penyertaan peserta kerana semasa pertandinga berlangsung server tidak boleh menampung kapasiti peserta yang ramai. Makluman: Ahli

c. Maklum balas dari pihak Cyber Security Malaysia

Mesyuarat mengambil maklum; i. Wakil dari CSM En. Fauzi mengucapkan ribuan terima kasih

kepada FTSM kerana sudi menganjurkan program “Cyber Heroes Competition 2017”.

ii. Mencadangkan penambahbaikan rangkaian untuk

mengelakkan dari menggunakan “wireless” dan penggunaan berlebihan kuasa internet.

iii. T-shirt untuk “Crew” tidak mencukupi. iv. Semasa program berlangsung – papan tanda kurang dan

kelewatan pembayaran harap dapat dimaklumkan lebih awal untuk mengelakkan penyertaan tercicir atau terbatal.

v. Sangat berpuas hati dengan majlis penutup berlangsung

dengan lancar. vi. T-shirt yang hendak dijual tidak perlu ada perkataan “Observer”. vii. Hadiah telah di terima oleh semua pemenang . viii. CSM masih belum menerima rekod pelajar dari 2 pasukan.

Makluman/Tindakan: Ahli

d. Hal-hal lain.

Mesyuarat mengambil maklum; i. Encik Zamri Murah mencadangkan papan markah diletakkan di

tempat yang lebih tinggi supaya peserta dan penonton dapat melihat “score” markah dengan lebih jelas.

ii. Cadangan untuk mengadakan Cyber Heroes Competition di Kuching Sarawak pada bulan November 2018. Asal membawa usul ke mesyuarat fakulti.

Tindakan : Ahli

Mesyuarat ditangguhkan pada jam 12.35 tengahari dan disudahi dengan bacaan Al-Asr dan doa mengakhiri tugas.

Copyri

ght@

FTSM

Page 15: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

15

Appendix III: MC Text

ITEM SCRIPT

Welcome Note by Emcee

/Ladies and gentlemen, as we are about to begin, please have a seat. /May I have your attention, please. Our program will start in about a minute, so please find yourself a seat to settle down. Thank you. Assalamualaikum and a very good morning ladies and gentlemen. Alhamdulillah, all praise and thanks be to Allah SWT for His bountiful grace and mercy, we are able to meet and gather today in the Cyber Heroes Seminar 2017. I would like to extend a very warm welcome to all honorable guests and speakers, and all participants of Cyber Heroes Competition 2017.

Background Ladies and Gentlemen, Cyber Heroes Competition 2017 is a cyber defense competition organized by CyberSecurity Malaysia in collaboration with Malaysian Communications and Multimedia Commission (MCMC), Standard Chartered Bank (SCB and Universiti Kebangsaan Malaysia (UKM). This seminar lines up great and experienced speakers who are recognized as experts in the cyber security industry. It serves the latest topics in data security field based on industry experts point of view. This is something special and must be benefitted by all especially by our universities student.

1st speaker Accelerating Incident Response and Security Investigation Speaker: Mr. Zainurrasyid Abdullah Forensics Senior Analyst, CSM. 9.30am – 10.30 am

Ladies and Gentlemen, Without any delay, I would like to invite our first speaker for today. Mr Zainurrasyid Abdullah is a Forensics Senior Analyst from CyberSecurity Malaysia. He has been an analyst for more than 6 years and has a vast experience in handling criminal and civil cases from various law enforcement agencies, regulatory, military, firms, and individuals. He’s also experienced in analyzing various types of digital evidence and testifying in the court of law. Without further ado, I would like to invite Mr Zainurrasyid Abdullah to the stage to deliver his speech entitled “Accelerating Incident Response and Security Investigation”. Please welcome. <speech>

Copyri

ght@

FTSM

Page 16: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

16

Thank you Mr Zainurrasyid for the wonderful speech and sharing of experience. I am sure many of us are benefitted by the sharing. As a token of appreciation, I would like to invite Dr Wan Fariza Fauzi, Fellow Cyber Intelligence Lab, Center for Cyber Security UKM to kindly present a memento to the guest speaker. Thank you Dr Wan Fariza, and thank you again Mr Zainurrasyid. Ladies and Gentlemen, we are going to take a short break for 15 minutes. Our next speech will start on 10.45am. VIPs, speakers, and committees are invited to have refreshment at Executive Room, Level 2, Block H. While seminar participants can buy some refreshment from café and students’ stall in front of the Multimedia Hall. Thank you.

2nd speaker 21st Century Forensic Speaker: Mr. Barry Foster Head of Cyber Forensic, Standard Chartered Bank. 10.45 am to 11.45 am

Ladies and Gentlemen, welcome back We are privileged to have our second speaker for today, Mr Barry Foster from Standard Chartered Bank. Mr. Barry Foster has over 20 years investigations, analysis and consultancy experience. He has held investigative and management roles in the government, professional services and in the financial sectors. He is currently the Director of the Standard Chartered Bank Cyber Forensic Laboratory. Without further ado, with all due respect, I would like to invite Mr Barry Foster to the stage to deliver his speech entitled “21st Century Forensic”. Please welcome. <speech> Thank you very much Mr Barry Foster. A very interesting and insightful speech indeed. I would like to invite Associate Prof Dr Mohammad Shanudin Zakraria, Fellow Information Governance Lab, Center for Cyber Security UKM to present a memento as a token of appreciation to the guest speaker. Thank you Assoc. Prof. Dr Mohammad Shanudin Zakaria and thank you again Mr Barry Foster.

Copyri

ght@

FTSM

Page 17: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

17

Break Now ladies and gentlemen, We hope you have found the two speeches from our two industry experts to be fruitful and engaging. Now it’s time for a break, before we proceed with another two speeches later this afternoon. The next session will start promptly after the break at 2.15 pm. VIPs, speakers, and committees are invited to have lunch at Executive Room, Level 2, Block H. While for competition participants, lunch is provided at Camp outside, in front of the Multimedia Hall. Seminar participants can buy some lunch from café and students’ stall outside the hall. See you again later this afternoon. Enjoy the lunch. Thank you.

3rd speaker From General IT to become professional Infosec Speaker: Mr. Mohd Fazli Azran Malaysia Chapter Leader, Open Web Application Security Project (OWASP). 2.15pm – 3.15pm

Assalamualaikum warahmatullahiwabarakatuh and a very good afternoon. Welcome back ladies and gentlemen. I hope all of you have benefitted a lot from the two speeches on our previous session. Our third speech today will be delivered by Mr Mohd Fazli Azran. He is the Malaysia Chapter Leader of Open Web Application Security Project (OWASP). Mr Mohd Fazli Azran is an Open Source Software enthusiast and love to collaborate with others to do activities about OSS events, seminars, conference, and workshop. An ambassador for openSUSE, Fedora, and CyberSecurity Malaysia CyberSafe, Mr Fazli has more than 15 years’ experience in network security and he strongly believes in OSS spirit that “sharing is caring”. Without any delay, I would like to invite Mr Mohd Fazli Azran to the stage. Please welcome. <speech> Thank you very much Mr Mohd Fazli Azran for the sharing of experience. As a sign of appreciation, I would like to invite Mr Mohammad Firham Efendy Md Senan, Head of Research and Development Digital Forensics, CyberSecurity Malaysia to present a memento to the guest speaker. Thank you Mr Firham, and thank you again Mr Mohd Fazli.

Copyri

ght@

FTSM

Page 18: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

18

4th speaker Cybersecurity, Catalyzing Digital Innovation Ecosystem Speaker: Mr. Alvin Teoh Manager, Cybersecurity, Enabling Ecosystems, Malaysia Digital Economy Corporation (MDEC) 3.30 pm to 4.30 pm

Now ladies and gentlemen, It is time for the final speech of the day. The speech will be delivered by Mr. Alvin Teoih form Malaysia Digital Economy Corporation (MDEC). Mr. Alvin Teoh is the Manager of CyberSecurity, Enabling Ecosystems in MDEC. The speech entitled “Catalyzing Digital Innovation Ecosystem”. With all due respect, please welcome. <speech> Thank you very much Mr. Alvin for the wonderful speech. I would like to invite Professor Madya Dr Zulaiha Ali Othman, Head of ICT Sector, Center for Research and Innovation Management UKM to present a token of appreciation to Mr. Alvin. Thank you Dr Zulaiha, and thank you again Mr Alvin Teoh.

Closing Ladies and Gentlemen, we have come to the end of the seminar. I hope you have found the sharing by our industry experts today to be informative and useful. Thank you to our speakers for spending time with us today and for the sharing of experience and knowledge. VIPs, speakers, and committees are invited to have tea break at Executive Room, Level 2, Block H. Thank you to all guest and participants for your attention and time. I hope you enjoyed the programme. Thank you very much. Let’s end the event with Sural Al-Asr and Tasbih Kaffarah. Have a nice day. Assalamualaikum wbt.

Copyri

ght@

FTSM

Page 19: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

19

Appendix V: Closing Ceremony Speech Text

EMCEE TEKS

**KETIBAAN TETAMU**

Anak helang mencari makan, Anak merbah menyanyi menari; Selamat datang kami ucapkan, Semoga hadirin selesa di sini. Welcome to Closing Ceremony of Cyberheroes 2017. We would like to invite all the guest to be seated as our ceremony will begin shortly. We hope that all the guest can stand up during the arrival of our honorable guests and during the singing of national anthem, ‘Negaraku’ and ‘Varsiti Kita’. Please turn off your cellphones during the event. We really appreciate your cooperation.

**VVIP masuk**

Announcing the arrival of Ybhg Prof. Dato’ Dr Imran Ho Abdullah, Deputy Vice-Chancelor, Industry and Community Partnership of UKM and all distinguished VIP’s guests. Ladies and gentlemen, please stand up.

(VVIP sampai di tempat duduk) **** NYANYIAN LAGU NEGARAKU DAN VARSITI KAMI ****

Ladies and gentlemen, please be seated. ***SALUTASI*** Assalamualaikum w.b.t and good afternoon, YBhg Prof. Dato’ Dr. Imran Ho Abdullah, Deputy Vice Chancelor, Industry and Community Partnership of UKM YBhg Dato’ Dr Haji Amirudin bin Abdul Wahab, Chief Executive Officer of CyberSecurity Malaysia YBrs. Encik Mohamed Abdel Razak, Global Head of Technology, Standard Chartered Global Business Services Ybrs. Prof Dr Abdullah Mohd Zin, Dean of Faculty of Information of Science and Technology UKM YBrs. Assoc. Prof Dr Siti Norul Huda Sheikh Abdullah, Chairperson Center for CyberSecurity UKM lecturers, contestants and distinguished guest. From Multimedia Hall of FTSM UKM, we would like to present Closing Ceremony of Cyberheroes 2017. Alhamdulillah, with the blessings of Him, we gather here today to commemorate this ceremony.

**Bacaan doa**

Copyri

ght@

FTSM

Page 20: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

20

Ladies and gentlemen, To bless this ceremony, we would like to invite MUHAMMAD AMZAR ISMA BIN IDRIS SAIDI to recite the dua’. *(Bacaan doa) * Amin, Amin Ya Rabbal A’lamin. Thank you to MUHAMMAD AMZAR ISMA BIN IDRIS SAIDI for the beautiful prayer.

**UCAPAN VIP**

To proceed with the ceremony and without further a due, we

would now like to invite Ybhg Prof. Dato’ Dr Imran Ho Abdullah,

Deputy Vice Chancelor, Industry and Community Partnership of

UKM to give his speech.

*Wakil UKM BERUCAP * Thank you to Ybhg. Prof. Dato’ Dr Imran Ho Abdullah for his

inspiring speech.

Without wasting any time, we would like to invite Ybhg Dato’ Dr

Haji Amirudin bin Abdul Wahab, Chief Executive Officer of

CyberSecurity Malaysia to deliver his speech.

*Wakil CSM BERUCAP *

Thank you to Ybhg Dato’ Dr Haji Amirudin bin Abdul Wahab for his

speech.

**TAYANGAN MONTAJ**

Throughout the program, we had a lot of fun and created a lot of

good memories. Despite the challenges that the contestants went

through with their group mates, they show us the beauty of

teamwork to achieve success together. Following the excitement

that we had throughout the program, we would like to present to

you a montage showing the sweet moment and activities

throughout Cyberheroes Competition 2017.

Copyri

ght@

FTSM

Page 21: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

21

After watching the montage, I believe that all of us, the

contestants, the coaches, lecturers and even myself had fun and

treasure a lot of new experience throughout the program.

**PENGUMUMAN PARA PEMENANG DAN PENYAMPAIAN HADIAH**

Our beloved ladies and gentlemen, The anticipated time have arrived, we are going to announce the winners of Cyberheroes Competition 2017. So, who do you guys think will be the winner? But before that, to make this event more meaningful, we would like to invite all the VVIP’s to be on stage for prize giving ceremony. **Penyampaian Hadiah Tempat ke-5** Now, we would like to invite Ybhg Dato’ Dr Haji Amirudin bin Abdul Wahab, Cief Executive Officer of CyberSecurity Malaysia to award the fifth and forth place. The fifth place will be awarded with a RM1000 cheque. The fifth place of Cyberheroes 2017 goes to ............................... The fourth place will receive a RM2000 cheque. Now, the fourth place goes to ......................... Thank you to Ybhg Dato’ Dr Haji Amirudin bin Abdul Wahab for awarding the winner. Next, we would like to invite YBhg Prof. Dato’ Dr Imran Ho Abdullah, Deputy Vice Chancelor, Industry and Community Partnership of UKM presenting for both second and first runner up prizes of Cyberheroes 2017. **Penyampaian Hadiah Tempat ke-3 dan ke-4** The second runner up will be awarded with a RM3000 cheque. The second runner up of Cyberheroes 2017 goes to .................... The first runner up will be awarded with a RM4000 cheque. The first runner up goes to ............................. Thank you to Ybhg Prof. Dato’ Dr Imran Ho Abdullah for awarding the winners. Next, we would like to invite Mr Mohamed Abdel Razak, the Global Head of Technology, Standard Chartered Global Business Services to award the grand prize. **Penyampaian Hadiah Tempat Juara dan Naib Juara** Now, it is time to announce the winner of Cyberheroes Competition 2017. The winner will proudly bring back a cheque with the value of RM5000 as well as a special training from ________________________ The winner of Cyberheroes Competition 2017 goes to.................

Copyri

ght@

FTSM

Page 22: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

22

Not forgetting to our hardworking, and respected judges who actively involve throughout the program. Once again we invite Mr Mohamed Abdel Razak to award them with some momento. We would like to call upon ...

1. Mr Barry Foster, Head of Cyber Forensic, Standard

Chartered Bank

2. Dr. Aswami Fadillah Bin Mohd Ariffin, Senior Vice

President, Cyber Security Responsive Services Division

3. Puan Nas Fatehah, Malaysia Digital Economy Corporation

(MDEC)

Thank you to Mr Mohamed Abdel Razak for awarding the winners. We would now like to invite YBhg Prof. Dato’ Dr. Imran Ho Abdullah, Deputy Vice Chancelor, Industry and Community Partnership of UKM to give a momento to YBhg Dato’ Dr Haji Amirudin bin Abdul Wahab, Chief Executive Officer of CyberSecurity Malaysia and YBrs. Encik Mohamed Abdel Razak, Global Head of Technology, Standard Chartered Global Business Services. **MOMENTO EXCHANGE** Next, we would like to invite Ybrs. Prof Dr Abdullah Mohd Zin, Dean of Faculty of Information of Science and Technology UKM to give a momento to YBhg Prof. Dato’ Dr. Imran Ho Abdullah, Deputy Vice Chancelor, Industry and Community Partnership of UKM. As we are moving to photography session, we kindly request all the VVIP’s and all the winners to be on stage. **SESI BERGAMBAR** Congratulations to the winners. For the rest of the participants, we sincerely hope that you do not give up and try again in the future. With that, the prize giving ceremony comes to an end.

*** VVIP KELUAR DEWAN***

We would like to thank the VVIP’s for their willingness to attend today’s ceremony. Let us all be guided by all the things we have learned and heard throughout the competition and be able to see and influence our future. Kalau ada sumur di ladang Boleh saya menumpang mandi Kalau ada umur yang panjang Boleh kita berjumpa lagi

Copyri

ght@

FTSM

Page 23: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

23

The ceremony reverently welcomes other honored guests to accompany the VVIP’s to retreat and head to the VIP Room for the Press Conference session and to the Executive Room for the banquet. Before we part, do forgive us for our shortcomings. Till we meet again. Perhaps in the next competition. Dian tiga lilin pun tiga, Obor tergantung rumah laksamana Diam juga sabar pun juga Ada umur tidak ke mana. Thank you and Assalamualaikum.

Copyri

ght@

FTSM

Page 24: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

24

Appendix V: Press Release CHAMPION OF CYBERHEROES COMPETITION 2017 APPOINTED AS CYBER HEROES AMBASSADOR 5th December 2017, Bangi. This year, Malaysian Communications and Multimedia Commission (MCMC) in collaboration with CyberSecurity Malaysia (CSM), Standard Chartered Global Business Service (SCGSB), and Universiti Kebangsaan Malaysia (UKM) are collaborating to organize a cyber defense competition called Cyber Heroes Competition 2017. The platinum sponsorships are from SCGSB and MCMC. The two-days competition is participated by 22 teams from local universities students in search for the top new and highly potential cyber security talents and promoting cyber security culture among young generation. It is an informative platform to promote the culture of being protective (defensive) and responsible in a cyber space. In this event, it is not only meant to send powerful messages of global security awareness (to make our cyberspace a safer place); but at the same time, the event also meant to provide exposure to undergraduate students about entrepreneurship career and professionalism in lucrative cyber security industry. Furthermore, it is hope that this magnifent event will motivate young generation to explore deeper cyber security knowledge via Cyber Security Program offered since 2013 by Center for Cyber Security in collaboration with prestigous Cyber Security Malaysia and Standard Chartered Global Service in which recently launched Fintech Security Track. The champion, the first runner-up until the forth runner-up prizes will be in form of cash rm20,000 but only the champion team will be appointed as Cyber Heroes ambassador and free seats in technical trainings. The prizes will be given by all honourable leaders including UKM Vice Chancellor, YBhg Tan Sri Dato’ Seri Noor Azlan Ghazali, Ybhg Dato’ Dr Amiruddin Abdul Wahab dan Mr Mathew Norris. A part of this competition, there are four slots of cyber security talks that given by Mr. Zainurrasyid Abdullah, Forensics Senior Analyst, CyberSecurity Malaysia, Mr. Barry Foster, Head of Cyber Forensic, Standard Chartered Bank, Mr. Mohd Fazli Azran, Malaysia Chapter Leader, Open Web Application Security Project (OWASP) and Mr. Alvin Teoh Manager, Cybersecurity, Enabling Ecosystems, Malaysia Digital Economy Corporation (MDEC). Distinguished guests who attended the closing ceremony are Mr. Matthew Norris, Chief Executive Officer, Standard Chartered Global Business Services(SCGB), Dato’ Dr. Amirudin Abdul Wahab, Chief Executive Officer, CyberSecurity Malaysia (CSM) and Mr. Victor Lo, Head of Cybersecurity Malaysia Digital Economy Corporation (MDEC) END.

Copyri

ght@

FTSM

Page 25: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

25

JUARA CYBERHEROES COMPETITION 2017 DILANTIK SEBAGAI DUTA CYBER HEROES 5 Disember 2017, Bangi. Pada tahun ini, Suruhanjaya Komunikasi dan Multimedia (SKMM) dengan kerjasama CyberSecurity Malaysia (CSM), Standard Chartered Global Business Service (SCGBS), dan Universiti Kebangsaan Malaysia (UKM) telah bekerjasama dalam menganjurkan pertandingan pertahanan siber yang bertajuk Cyber Heroes Competition 2017. Penaja platinum bagi pertandingan ini merupakan Standard Chartered Bank (SCB) dan Suruhanjaya Komunikasi dan Multimedia. Pertandingan yang berlangsung di Fakulti Teknologi Sains Maklumat, UKM selama dua hari ini telah disertai oleh 22 pasukan daripada institusi pengajian tinggi tempatan bertujuan mencari bakat-bakat baharu yang berpotensi tinggi dalam keselamatan siber dan secara tidak langsung mempromosikan budaya keselamatan siber di kalangan generasi muda. Malah aktiviti turut diharapkan dapat memberi inspirasi baru kepada generasi muda untuk meneroka bidang keselamatan siber dengan lebih mendalam menerusi program Sarjana Keselamatan Siber yang telah ditawarkan semenjak 2013 oleh Pusat Keselamatan Siber, UKM dengan kerjasama oleh Cyber Security Malaysia dan Standard Chartered yang terkini melancarkan Trek Keselamatan Kewangan. Pertandingan ini juga merupakan platform yang berinformatif dalam mempromosikan budaya melindungi dan kebertanggung jawaban ruangan siber. Ianya bukan sahaja bertujuan untuk menyampaikan maklumat kesedaran keselamatan siber yang global malah turut memberi pendedahan kepada mahasiswa tentang kerjaya keusahawanan dan professionalisma di dalam industri keselamatan siber yang menjanjikan pendapatan yang lumayan. Juara, Naib Juara sehingga tempat kelima akan membawa pulang hadiah berupa wang tunai yang kesemuanya berjumlah RM20,000 dan hanya juara yang akan dilantik sebagai Duta Cyber Heroes beserta latihan teknikal secara percuma. Kesemua hadiah disampaikan oleh semua dif kehormat termasuk Naib Canselor UKM, YBhg Tan Sri Dato’ Seri Noor Azlan Ghazali, Ybhg Dato’ Dr Amiruddin Abdul Wahab dan Mr Mathew Norris. Turut berlangsung empat buah slot ceramah mengenai keselamatan siber yang disampaikan oleh Encik. Zainurrasyid Abdullah, Juruanalisa Forensik Kanan, CyberSecurity Malaysia, Mr. Barry Foster, Ketua Forensik Siber, Standard Chartered Bank, Encik Mohd Fazli Azran, Ketua Malaysia Chapter, Open Web Application Security Project (OWASP) and Encik Alvin Teoh Pengurus, Cybersecurity, Enabling Ecosystems, Malaysia Digital Economy Corporation (MDEC). Majlis Penutup Cyberheroes Competition 2017 turut dihadiri oleh tetamu kehormat iaitu Mr. Matthew Norris, Ketua Pegawai Eksekutif, Standard Chartered Global Business Services(SCGB), Dato’ Dr. Amirudin Abdul Wahab, Ketua Pegawai Eksekutif, CyberSecurity Malaysia (CSM), Suruhanjaya Komunikasi dan Multimedia dan Encik Victor Lo, Ketua Keselamatan Siber, Malaysia Digital Economy Corporation (MDEC) -TAMAT-

Copyri

ght@

FTSM

Page 26: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

26

Appendix V: Publicity www.ftsm.ukm.my/chc2017 Banner

Poster and Bunting

Wooven Bag

Copyri

ght@

FTSM

Page 27: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

27

Certificate

T-shirt Design

Copyri

ght@

FTSM

Page 28: Technical Report on Cyber Heroes Competition 2017 Prepared ... · Leader, Open Web Application Security Project ... PIC : Muzdalifah 1. Raihan 2. Syazana 3. ... Memulakan tugas.

LI-FTSM-2018-016

28

Program Book

Copyri

ght@

FTSM