Author Archive for Surya Narayanan


EC-Council Appointed Universitas Mercu Buana as Academic partner Jakarta, May 21st, 2014


EC-Council has strengthened the partnership with Faculty of Computer Science of Universitas Mercu Buana in Indonesia. EC-Council was appointed Universitas Mercu Buana as academic partner to implement IT Security knowledge for their current students.
At the left Mr. Bambang Hariyanto as a Dean of Faculty of Information Technology, follow by Mr. Arisetyanto Nugroho as Rector of Universitas Mercu Buana and Mr. Sean Lim as Vice President of EC-Council at the center and at the right end is Mr. Muhammad Misni as Academic member of University of Mercu Buana

‘IT security becoming a strong knowledge for students to enter global competition in 2015 onward’ says Mr. Arisetyanto Nugroho as Rector of Universitas Mercu Buana and Mr. Bambang Hariyanto as Dean of Universitas Mercu Buana.

Universitas Mercu Buana is one of the universities in Indonesia who has forward thinking on building their students competency to be ready enter industries faster . University provide them the high qualification in IT Security and make their graduate easily get high paying job.
Universitas Mercu Buana will continues work with EC-Council on the awareness, sharing knowledge and implement IT security knowledge for their students.

It was an honor for EC-Council to help education sector in Indonesia to build strong knowledge for their students in IT Security, to help their graduate getting high qualification in industries world wide. As end of the result give their students a chance to high employed by corporation and get high paying job.

This event was follow with a short seminar at their lovely auditorium and attend by more than 400 students. In this seminar we bring the issue of How IT Security equip them becoming a good talent to get high paying job in the world. They are very enthusias to listen and give tons of question to know more details about IT Security career advantage.

About Universitas Mercu Buana
Universitas Mercu Buana was established on October 22nd, 1985 by a Renowned Business owner H. Probosutedjo who has experience as a lecture at Taman Siswa Pematang Siantar, Sumatera Utara Currently they growth by having 4 campus and 6 Faculties with more than 20,000 active students body.
Address: Universitas Mercu Buana, Kampus A – Jl. Meruya Selatan, Kebun Jeruk – Jakarta Barat Phone: 021-5840816 (hunting), 5840816 (ext.2751), Fax: 021-5840815. For more information visit http://www.mercubuana.ac.id

About EC-Council
EC Council (International Council of E-Commerce Consultants) is one of the world’s largest certification bodies for information security professionals. EC Council is a member-based organization that certifies individuals, institution and company in various information security and e-business skills. Over 500 universities globally have been merging this unique IT Security qualification into their curriculum. Certified by the American National Standards Institute to meet its ANSI 17024 standard in 2012 has empowered EC Council to growth more powerful especially to collaborate with universities for their better IT student career. EC-Council is the owner and creator of the world famous Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT) programs, and many other programs. We offered this program in over 92 countries and over have trained over 120,000 & certified more than 90,000 security professionals through a training network of over 500 training partners globally. For more information, visit www.eccouncil.org or email to indomarketing@eccouncil.org


Overwhelming response at EC-Council IT Security Seminar for Indonesian Universities Jakarta, May 21st, 2014,


EC-Council as a world leader in IT Security Certification recently held an exclusive seminar in four universities in Indonesia. The seminar was held continuously at 4 different universities such as Universitas Mercu Buana, Universitas Bina Nusantara, Universitas Multimedia Nusantara, and Universitas Surabaya.

Universitas Mercu Buana becomes our first home of seminar. Held at their lovely auditorium attended by more than 400 IT students and was very keen and enthusiasm to listen the sharing knowledge from Vice President of EC-Council, Mr. Sean Lim and one of Certified EC-Council Instructor Mr. Kristian Oktavianus with more than 20 years experience in IT.

The Big Step has made by Universitas Mercu Buana as they strengthen the partnership with EC-Council as Academic Partner and joined among 500 universities globally all around the world that deliver IT security qualification in their curriculum and prepare their students to have a chance get high paying job in industry globally.

Mr. Arisetyanto Nugroho as Rector of Universitas Mercu Buana and Mr. Bambang Hariyanto as Dean of Faculty of Information Technology Universitas Mercu Buana says ‘ IT Security is the pathway for the students graduate to get high paying jobs globally, partnership with EC-Council will be strengthen their knowledge and proven to the industry that their graduate are qualified.

Universitas Bina Nusantara Jakarta in association with HIMSISINFO and Faculty of Computer Science organized the exclusive seminar for our next home. More than 400 IT students attended the seminar from 2 different faculties, Faculty of Information Systems Management and Computer Science. Their student looks enthusiasm to listen and give a lot of questions how they started to learn in IT security. They have admitted that this kind of seminar should be held more intensively, because IT student is eager to learn and know further about the IT Security knowledge applied in industries. Most of students are having a vision to get a job globally. And they realize that they need to have a uniqueness of their qualification to compete with foreign graduates.

Different story when we arrived at Universitas Multimedia Nusantara in BSD, Serpong. Housed in their modern auditorium with a capacity of 200 IT Students who participate in the seminar having a great enthusiasm with interspersed questions and answers during the seminar. This seminar has aroused their IT student’s interest to dig deeper into the importance and uniqueness of IT Security for better IT careers. As we have seen this big wave of interest, Universitas Multimedia Nusantara has put their concern about how to merge our curriculum into their curriculum. As mention by Vice Rector, Prof Dr. Muliawati G. Siswanto, M.Eng.Sc ‘IT Security is one of the skills that they need to develop more’

At last, University of Surabaya another EC-Council’s exclusive seminar was held at Surabaya city. Tin Tin Hadijanto as EC-Council Indonesia Country Manager has brought a point of view on building a career advantage in IT Security. TheThis seminar bring next level of mindset of how IT Security becoming a unique qualification and could bring great impact for real-world IT business and chances for high-paying job is not just a dream for their students.
The key message from Miss Lisana as Member of faculty of Universitas Surabaya, ‘ Students needs additional knowledge in practical and focus profession, make them different from others 30.000 graduates every year.

It was an honor for EC-Council to help education sector to build strong knowledge for their students, to help the graduate getting unique qualification, unique job in unique industries world wide. EC-Council will continue to carry out similar activities in some future event with other universites in Indonesia. IT Security has become one of the most demand skill globally and becoming an important point in the joints of modern business life as a cog in a role behind the IT continuity at each institution. This exclusive seminar become one of our main agenda in 2014 for only selected Indonesia universities. Are you one of them that ready to become our part of world-wide recognized unique qualifications university in IT security?

About EC-Council
EC Council (International Council of E-Commerce Consultants) is one of the world’s largest certification bodies for information security professionals. EC Council is a member-based organization that certifies individuals, institution and company in various information security and e-business skills. Over 500 universities globally have been merging this unique IT Security qualification into their curriculum. Certified by the American National Standards Institute to meet its ANSI 17024 standard in 2012 has empowered EC Council to growth more powerful especially to collaborate with universities for their better IT student career. EC-Council is the owner and creator of the world famous Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT) programs, and many other programs. We offered this program in over 92 countries and over have trained over 120,000 & certified more than 90,000 security professionals through a training network of over 500 training partners globally. For more information, visit www.eccouncil.org or email to indomarketing@eccouncil.org


EC-Council takes the privacy and confidentiality of their customers very seriously.

On Saturday, February 22nd, 2014, the ICANN-accredited domain registrar of EC-Council was compromised and as a result, EC-Council suffered a DNS Poisoning attack, which resulted in their website being defaced.  EC-Council launched a comprehensive investigation and began work to regain control immediately.

As the attack happened over the weekend, EC-Council’s security team had challenges reaching the appropriate domain registrar personnel to address the situation.  As a result, the hacker was able to maintain control of the registrar’s system and the EC-Council domain during this time period.  The domain registrar in question was unable to secure their servers to a level desired by EC-Council and during this period, the domain registrar was exposed at least 2 more times.  As such, EC-Council sustained an outage while moving the entire domain to another provider.  Simultaneously, the EC-Council security team instituted additional countermeasures to other EC-Council systems within their direct control and began strengthening other security measures organization-wide.

EC-Council uses a cloud service provider for enterprise email. Once the domain privilege was attained, the hacker then issued a password reset request to the email service provider.  This circumvented EC-Council’s best practices of using complex passwords and 2-factor authentication.

EC-Council has informed the service provider of this password reset policy vulnerability and are hopeful that they have already rectified it for the benefit of the IT community in general.

With administrative access to the email service provider, the hacker was able to compromise a small number of email accounts before the EC-Council security team was able to respond to the breach. This resulted in unauthorized access to messages in those specific email boxes for a short duration of time. The potentially compromised accounts represent approximately 2% of their customer base.

As the investigation is ongoing, EC-Council was unable to ascertain if any data was compromised in these accounts. However, as a precautionary measure, they are writing to notify customers that have sent any personally identifiable information to EC-Council via e-mail that there is a possibility that these may have been exposed through email.  No credit card data was compromised. As a precaution, EC-Council strongly recommends that their affected customers remain vigilant for any unauthorized use of the information shared with EC-Council and that they alert EC-Council if they find any reason to suspect any.

EC-Council strives to set a very high bar for how they serve their community, and this incident is upsetting. EC-Council has since transferred their domain to another registrar, changed policies on management of personal information, improved existing data retention policies, introduced two-factor authentication for member portals, and improved security procedures and systems.  They will continue to do more in the weeks and months to come.

EC-Council has been working closely with law enforcement agencies across 3 continents.  EC-Council is doing everything in their power to prevent this from happening again and will leverage the full extent of international law to prosecute the individual responsible.

EC-Council is a vibrant community like no other, and value their customers. Please let them know if you have any questions, comments, or concerns. You can reach them at accountsecurity@eccouncil.org.