Cyber RoadmapINDONESIA

Learning Path

Urutan belajar minggu demi minggu.

Setiap fase dipecah menjadi modul mingguan dengan topik dan sumber belajar. Ikuti urutannya, atau buka roadmap untuk menelusuri materinya lebih dalam.

FASE 0 · DASAR

Pra-Fondasi

2–4 Minggu

Buka di roadmap →

Target: Mampu mengoperasikan komputer, memahami cara kerja internet, dan menjelaskan konsep keamanan dasar.

Minggu 1–2

Cara Kerja Internet & Jaringan

  • Komputer, OS, dan cara kerja internet
  • IP address, domain, dan DNS
  • HTTP vs HTTPS — perbedaan nyata
  • Router, WiFi, dan firewall dasar
Cisco NetAcad Intro Khan Academy MDN Web Docs
Minggu 3–4

Konsep Keamanan & Terminal Pertama

  • CIA Triad: Confidentiality, Integrity, Availability
  • Threat, Vulnerability, Risk — definisi presisi
  • Membuka terminal dan perintah dasar (ls, cd, ping)
  • Jenis ancaman siber yang umum di Indonesia
TryHackMe Pre-Security Linux Journey BSSN.go.id
FASE 1 · DASAR

Fondasi Teknis

6–8 Minggu

Buka di roadmap →

Target: Mampu mengoperasikan Linux, memahami jaringan TCP/IP, menulis script Python sederhana, dan memahami konsep keamanan inti.

Minggu 1–2

Sistem Operasi Linux

  • Navigasi terminal: ls, cd, cat, grep, find
  • File permissions: chmod, chown, sudoers
  • User management: useradd, passwd, grup
  • Package manager: apt/yum, systemctl, journalctl
Linux Journey OverTheWire: Bandit TryHackMe
Minggu 3–4

Jaringan Komputer

  • Model OSI 7 layer — fungsi tiap layer
  • TCP/IP, UDP, ICMP — perbedaan penggunaan
  • IP addressing & subnetting CIDR
  • DNS, DHCP, ARP, NAT — cara kerja
  • Wireshark: capture dan baca paket dasar
Professor Messer Net+ Wireshark Docs Cisco Packet Tracer
Minggu 5–6

Python & Bash Scripting

  • Python: variabel, kondisi, loop, fungsi, file I/O
  • Requests library dan parsing data
  • Bash: variabel, loop, pipe, cron job
  • Buat tools kecil: port scanner, log parser
Automate the Boring Stuff HackerRank Python TCM Python for Hackers
Minggu 7–8

Konsep Keamanan Inti & Database

  • AAA: Authentication, Authorization, Accounting
  • Defense in Depth dan Least Privilege
  • SQL dasar: SELECT, JOIN, WHERE
  • REST API, HTTP methods, developer tools
CompTIA Security+ Study SQLZoo Postman
FASE 2 · DASAR

Kriptografi & Post-Quantum

5–7 Minggu

Buka di roadmap →

Target: Memahami dan menerapkan kriptografi klasik dan modern, PKI/TLS, autentikasi token, dan dasar Post-Quantum Cryptography.

Minggu 1–2

Kriptografi Simetris & Asimetris

  • Enkripsi simetris: AES-128/256, DES, 3DES
  • Enkripsi asimetris: RSA, ECC, Diffie-Hellman
  • Hashing: SHA-256, SHA-3, MD5 (risiko)
  • MAC & HMAC untuk integritas pesan
CryptoHack.org Practical Cryptography OpenSSL CLI
Minggu 3–4

PKI, TLS & Sertifikat Digital

  • Public Key Infrastructure (PKI) — arsitektur
  • Certificate Authority dan chain of trust
  • TLS 1.3 handshake step-by-step
  • HTTPS: certificate pinning, HSTS, OCSP
Let's Encrypt Docs SSL Labs Wireshark TLS
Minggu 5–6

Post-Quantum & Autentikasi Modern

  • Ancaman quantum: mengapa RSA dan ECC rentan
  • NIST PQC Standards: ML-KEM, ML-DSA, SLH-DSA
  • Password hashing: bcrypt, Argon2, PBKDF2
  • JWT, OAuth 2.0, OpenID Connect, Passkeys
NIST PQC Project jwt.io FIDO Alliance Docs
FASE 3 · MENENGAH

Serangan & Pertahanan

8–10 Minggu

Buka di roadmap →

Target: Mampu mengeksploitasi OWASP Top 10, melakukan network attack dan defense, menganalisis malware, dan menulis vulnerability report.

Minggu 1–2

Malware & Social Engineering

  • Virus, Worm, Trojan, RAT, Ransomware — cara kerja
  • Supply chain attacks dan APT
  • Phishing, Spear Phishing, Vishing, Smishing
  • Business Email Compromise (BEC)
VirusTotal ANY.RUN GoPhish Lab
Minggu 3–4

Serangan & Pertahanan Jaringan

  • MITM: ARP spoofing, DNS poisoning
  • DoS & DDoS — volumetric, protocol, L7
  • Port scanning dengan Nmap — stealth mode
  • Firewall next-gen, IDS/IPS dengan Snort
Nmap Docs Snort pfSense Ettercap
Minggu 5–7

Web App Security — OWASP Top 10

  • A01 Broken Access Control — IDOR, privilege escalation
  • A03 SQL Injection — error, blind, time-based
  • A07 XSS — stored, reflected, DOM-based
  • CSRF, SSRF, XXE, Insecure Deserialization
  • Burp Suite: intercept, repeater, intruder
PortSwigger Web Academy DVWA Burp Suite Community
Minggu 8–10

Vulnerability Assessment & Reporting

  • CVE database dan CVSS v3.1 scoring
  • OpenVAS / Nessus Essentials — scan dan laporan
  • Patch management lifecycle
  • Menulis vulnerability report profesional
OpenVAS Nessus Essentials ExploitDB
FASE 4 · MENENGAH

Infrastruktur & Cloud

6–8 Minggu

Buka di roadmap →

Target: Mampu melakukan hardening OS, mengamankan cloud AWS/Azure, scanning container image, dan memahami Active Directory secara defensif.

Minggu 1–3

Hardening Sistem Operasi

  • CIS Benchmarks Level 1 & 2 — implementasi nyata
  • Disable unnecessary services dan SUID binaries
  • SELinux / AppArmor — mandatory access control
  • auditd, syslog, log forwarding ke remote server
CIS Benchmarks Lynis OpenSCAP
Minggu 4–6

Cloud Security

  • Shared Responsibility Model — siapa tanggung jawab apa
  • IAM: users, roles, policies, least privilege
  • S3/storage bucket misconfiguration — deteksi & fix
  • VPC, security groups, NACLs, logging CloudTrail
AWS Free Tier ScoutSuite Prowler A Cloud Guru
Minggu 7–8

Container & Active Directory

  • Docker security: non-root, read-only, image scanning
  • Trivy: scan image, identifikasi CVE, remediation
  • Kubernetes RBAC basics dan network policy
  • Active Directory: Kerberos, GPO, PAM dasar
Trivy Docs Docker Bench Microsoft AD Lab
FASE 5 · MENENGAH

Security Communication

3–4 Minggu

Buka di roadmap →

Target: Mampu menulis vulnerability report yang dipahami non-teknis, mempresentasikan risiko ke stakeholder, dan memulai personal branding di komunitas.

Minggu 1–2

Security Report Writing

  • Vulnerability report: executive summary, CVSS, remediation
  • Incident report: timeline, impact, root cause, prevention
  • Risk report untuk board: bahasa bisnis, angka, rekomendasi
  • Technical documentation: runbook, playbook, SOP
SANS Report Templates Dradis Framework PlantUML
Minggu 3–4

Komunikasi & Personal Branding

  • Menjelaskan risiko teknis kepada CEO dan board
  • Security awareness yang engaging, bukan menakutkan
  • Menulis write-up CTF dan security blog
  • LinkedIn optimization untuk cybersecurity professional
Medium/Hashnode LinkedIn OWASP Indonesia
FASE 6 · TINGGI

Governance, Risk & Compliance

5–7 Minggu

Buka di roadmap →

Target: Memahami dan menerapkan ISO 27001, manajemen risiko, regulasi Indonesia (UU PDP, UU ITE), GDPR, PCI DSS, dan AI governance.

Minggu 1–2

Manajemen Risiko

  • Risk identification: aset, ancaman, kerentanan
  • Qualitative vs quantitative risk analysis
  • NIST RMF: Categorize, Select, Implement, Assess
  • Risk register dan treatment plan
NIST RMF Docs FAIR Institute ISO 31000
Minggu 3–4

ISO/IEC 27001:2022

  • PDCA cycle dan klausul 4–10
  • Annex A: 93 kontrol dalam 4 tema
  • Statement of Applicability (SoA)
  • Internal audit dan management review
ISO 27001 Academy IT Governance Tugboat Logic
Minggu 5–6

Regulasi Indonesia & Global

  • UU PDP: hak subjek data, kewajiban pengendali
  • UU ITE: kejahatan siber dan jerat hukum
  • GDPR: 7 prinsip, 11 hak, DPO, DPIA, breach notif
  • PCI DSS v4: 12 requirements dan SAQ types
GDPR.eu Kominfo UU PDP PCI SSC BSSN.go.id
Minggu 7

AI Governance

  • ISO/IEC 42001:2023 — AI Management System
  • EU AI Act: prohibited AI, high-risk AI, obligations
  • NIST AI RMF: Govern, Map, Measure, Manage
  • AI impact assessment dan dokumentasinya
ISO 42001 Guide EU AI Act Portal NIST AI RMF
FASE 7 · TINGGI

SOC & Operasi Keamanan

6–8 Minggu

Buka di roadmap →

Target: Siap bekerja sebagai SOC Analyst Tier 1/2 — mampu mengoperasikan SIEM, melakukan incident response, digital forensics dasar, dan threat hunting.

Minggu 1–3

SIEM & Log Management

  • SIEM architecture: collector, normalizer, correlator
  • Log sources: Windows Event, Syslog, EDR, cloud logs
  • SPL (Splunk) atau KQL (Elastic) query dasar–menengah
  • Correlation rules — tuning untuk reduce false positive
Splunk Free Elastic SIEM Splunk BOTS
Minggu 4–5

Incident Response

  • PICERL lifecycle: Preparation → Lessons Learned
  • Incident classification: severity P1–P4
  • Playbook: ransomware, phishing, data breach
  • Evidence preservation dan chain of custody
TheHive DFIR.training Shuffle SOAR
Minggu 6–7

Digital Forensics

  • Order of volatility dan disk imaging (dd, FTK Imager)
  • Memory forensics: Volatility 3 — proses, network, artifacts
  • Log analysis dan timeline reconstruction
  • Network forensics: analisis PCAP
Autopsy Volatility 3 FTK Imager NetworkMiner
Minggu 8

Threat Intelligence & Hunting

  • MITRE ATT&CK: Tactics, Techniques — cara pakai Navigator
  • Threat hunting: hypothesis-driven methodology
  • IOC types dan cara ekstrak dari malware
  • OSINT untuk threat research: Shodan, VirusTotal
MITRE ATT&CK Navigator OpenCTI MISP Shodan
FASE 8 · TINGGI

AI Security & Agentic AI

4–6 Minggu

Buka di roadmap →

Target: Mampu mengidentifikasi dan mengeksploitasi kerentanan AI/LLM, memahami risiko agentic AI, dan menerapkan prinsip keamanan untuk sistem AI.

Minggu 1–2

OWASP LLM Top 10

  • LLM01: Prompt Injection — direct dan indirect
  • LLM02: Sensitive Information Disclosure
  • LLM06: Excessive Agency — AI yang bertindak berlebihan
  • LLM07: System Prompt Leakage
  • LLM09: Misinformation dan hallucination
GANDALF (Lakera) OWASP LLM Guide PortSwigger AI Labs
Minggu 3–4

Agentic AI Security

  • Agentic AI: autonomous decision-making dan tool use
  • Agent goal hijacking dan tool misuse
  • Memory poisoning dalam long-term agent
  • MCP (Model Context Protocol) attack surface
  • Multi-agent trust boundaries
GitHub Secure Code Game S4 OWASP AI Exchange
Minggu 5–6

Model Security & AI Governance Teknis

  • Adversarial attacks dan data poisoning
  • Model extraction dan model inversion attacks
  • AI supply chain security dan AI SBOM
  • Securing LLM API: rate limiting, output filtering
  • AI Security Posture Management (AI-SPM)
Adversarial Robustness Toolbox Garak Scanner Lakera Guard
FASE 9 · AHLI / SPESIALIS

Spesialisasi & Karier

6–12 Bulan (ongoing)

Buka di roadmap →

Target: Cybersecurity professional dengan spesialisasi, sertifikasi industri, portfolio nyata, dan jaringan komunitas yang aktif.

Pilihan A

Red Team / Penetration Testing

  • Pentesting methodology: PTES, OSSTMM
  • Exploitation: Metasploit, manual exploits, custom payload
  • AD attacks: Kerberoasting, Pass-the-Hash, DCSync
  • Report writing profesional — executive + technical
TCM Academy HackTheBox Pro Labs OSCP
Pilihan B

Blue Team / SOC Analyst

  • Advanced SIEM correlation dan tuning
  • EDR/XDR: CrowdStrike, Microsoft Defender, SentinelOne
  • Threat hunting frameworks: PEAK, TaHiTI
  • AI-assisted SOC: Copilot for Security
Splunk Enterprise Blue Team Labs Online CySA+
Pilihan C

Cloud Security Engineer

  • Multi-cloud security architecture (AWS + Azure + GCP)
  • CSPM: Cloud Security Posture Management
  • DevSecOps pipeline dari dev ke production
  • Container & Kubernetes security di produksi
AWS Security Specialty Prowler Wiz Checkov
Pilihan D

GRC / AppSec / AI Security / DFIR

  • GRC: ISO 27001 Lead Auditor, CISM, risk framework
  • AppSec: SAST/DAST, secure code review, API security
  • AI Security: OffSec AI-300, CAISP, AI red teaming
  • DFIR: memory forensics, malware RE, chain of custody
ISACA OffSec Practical DevSecOps GIAC