Encrypted Email For Local Government Information Security In South Sumatra

Abstract

This study obtains an overview of the conditions of the encryption email management workflow among local governments in South Sumatra. The workflow for managing email encryption for regular official news has been going very well. Meanwhile, the workflow for managing encryption of emails for confidential news is still experiencing problems, especially for local governments that do not have cipher expert personnel and official cipher equipment from the BSSN. In addition, this study also illustrates that the application of information security theory in the use of encrypted emails for confidential news between local governments in South Sumatra is not optimal. The main obstacle faced is that there are still local governments that do not have cipher expert personnel and official cipher equipment from the BSSN. The quality of the workflow is measured by looking at the fulfillment of the main elements contained in the Standard Operating Procedures (SOP) of the encryption email management workflow. The quality of using email encryption for information security is carried out by analyzing the fulfillment of the elements contained in the information security theory.

Email Security Issues, Tools, and Techniques Used in Investigation

“…Two stages of SMTP are used, one between the sender and the mail server, and another between the sender s server and the receiver s server. Since SMTP is a push protocol and a pull protocol is required at the receiver s end, either POP3 or IMAP4 can be used between the receiver s mail server and the receiver [10][11][12][13][14][15][16]. When sending messages between a client and a server, SMTP uses commands and responses.…”

“…Phishing attacks are also easy to send because it does not check message integrity. The SMTP protocol does not have a mechanism to prevent repudiation, which would force a sender to deny sending emails [12]. The POP and IMAP protocols are pull-type protocols, which means that a request is sent to the mail server for access to the mailbox using the username and password.…”