Infra & Application security flow

1. Infra hardening

1. Cloudflare

   • SQL injection Protection (Cloudflare WAF)

   • DDoS Protection (Cloudflare WAF)

   • DNS Security (Cloudflare WAF)

   • Secure CDN (Content Delivery Network)

     (Cloudflare WAF)

2. Server Manajemen

   • Whitelist port (AWS Included) (AWS Security Group)
   • Private Database (Docker Engine)
   • SSH Keygen (AWS Included) (AWS Access Key)
   • Private kode repositori (Sekawanmedia Gitlab)

2. Application hardening

1. Nginx
   • Strong SSL/TLS Protokol (Using Latest TLS Protocol)
   • Cipher Suite (SSL Key exchange encryption)
   • SSL Pinning (MITM Protection)
   • Security headers (Basic http hardening)
   • DH Param (SSL cryptographic Diffie-Hellman)
2. Php
   • PHP file upload handling (Limit size & vars)
   • PHP executable handling (Limit dangerous PHP functions)
   • PHP session handling (Securing session cookie)

3. Login

• JWT token login portal (latest)
• Session login web admin (Max Session 5 minute)

4. Scurity Web admin

• CSRF (Cross-Site Request Forgery)