Melola Discovery

← Melola Discovery

Open access Jurnal SINTA 2

Honeypot-Integrated CSIRT Model Based on ISO 27001/27035

IJCCS (Indonesian Journal of Computing and Cybernetics Systems) · Vol. 20 No. 3 (2026) · pp. 283–294

DOI
10.22146/ijccs.117482
ISSN
2460-7258, 1978-1520
Published
2026-07-31
Publisher
IndoCEISS in colaboration with Universitas Gadjah Mada, Indonesia.
Language
eng
License
creativecommons.org/licenses/by-sa/4.0

Abstract

Higher education institutions are evolving into digital entities that manage critical assets, including sensitive personal data and academic records. However, many universities in Indonesia still lack a structured and legally compliant approach to information security, leaving them vulnerable to cyber threats such as defacement attacks and data breaches. This paper proposes a conceptual model for a Computer Security Incident Response Team (CSIRT) specifically designed for academic environments. The model integrates international standards ISO/IEC 27001 for Information Security Management Systems and ISO/IEC 27035 for incident handling, with proactive threat detection using honeypot technology. The framework consists of four layers: governance, operational procedures, technology infrastructure, and legal compliance. Designed using a systems-thinking approach and validated through expert review, the model addresses institutional readiness and outlines a roadmap for phased implementation. It aims to support early threat detection, structured response workflows, and digital forensic readiness in alignment with Indonesian cybersecurity law. This honeypot-integrated CSIRT model contributes a strategic reference for universities seeking to enhance their security capabilities in a sustainable and lawful manner.

Keywords

Collaboration network of the authors

5 authors · 5 co-authorship links

Hover or tap a name to highlight its co-authors. Double-click to open the author's page.

  • Institut Bisnis dan Teknologi Indonesia
  • Affiliation unknown
  • Different organisations
  • Same organisation
  • Affiliation unknown
  • Thicker line = more joint articles · bigger circle = more articles
Show as table
Co-authorOrganisationJoint articles
I Made Karang Satria PrawiraAffiliation unknown1
I Gede Bagus Arya Merta TikaAffiliation unknown1
I Gede Totok SuryawanInstitut Bisnis dan Teknologi Indonesia1

Affiliations come from OpenAlex; journal OAI-PMH metadata carries none. Authors without an OpenAlex ID are matched by name, which can merge or split people.

Metadata source: OAI-PMH (metadata jurnal) https://journal.ugm.ac.id/ijccs/oai, first harvested 26 Okt 2026, last seen 26 Okt 2026.
Original metadata (oai_dc) 
<oai_dc:dc xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/  http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
	<dc:title xml:lang="en-US">Honeypot-Integrated CSIRT Model Based on ISO 27001/27035</dc:title>
	<dc:creator>Meinarni, Ni Putu Suci</dc:creator>
	<dc:creator>Udayana, I Putu Agus Eka Darma</dc:creator>
	<dc:subject xml:lang="en-US"></dc:subject>
	<dc:subject xml:lang="en-US">CSIRT; Honeypot; ISO/IEC 27001; ISO/IEC 27035; Information Security</dc:subject>
	<dc:description xml:lang="en-US">Higher education institutions are evolving into digital entities that manage critical assets, including sensitive personal data and academic records. However, many universities in Indonesia still lack a structured and legally compliant approach to information security, leaving them vulnerable to cyber threats such as defacement attacks and data breaches. This paper proposes a conceptual model for a Computer Security Incident Response Team (CSIRT) specifically designed for academic environments. The model integrates international standards ISO/IEC 27001 for Information Security Management Systems and ISO/IEC 27035 for incident handling, with proactive threat detection using honeypot technology. The framework consists of four layers: governance, operational procedures, technology infrastructure, and legal compliance. Designed using a systems-thinking approach and validated through expert review, the model addresses institutional readiness and outlines a roadmap for phased implementation. It aims to support early threat detection, structured response workflows, and digital forensic readiness in alignment with Indonesian cybersecurity law. This honeypot-integrated CSIRT model contributes a strategic reference for universities seeking to enhance their security capabilities in a sustainable and lawful manner.</dc:description>
	<dc:publisher xml:lang="en-US">IndoCEISS in colaboration with Universitas Gadjah Mada, Indonesia.</dc:publisher>
	<dc:contributor xml:lang="en-US"></dc:contributor>
	<dc:date>2026-07-31</dc:date>
	<dc:type>info:eu-repo/semantics/article</dc:type>
	<dc:type>info:eu-repo/semantics/publishedVersion</dc:type>
	<dc:type xml:lang="en-US"></dc:type>
	<dc:format>application/pdf</dc:format>
	<dc:identifier>https://journal.ugm.ac.id/ijccs/article/view/117482</dc:identifier>
	<dc:identifier>10.22146/ijccs.117482</dc:identifier>
	<dc:source xml:lang="en-US">IJCCS (Indonesian Journal of Computing and Cybernetics Systems); Vol 20, No 3 (2026): July; 283-294</dc:source>
	<dc:source>2460-7258</dc:source>
	<dc:source>1978-1520</dc:source>
	<dc:language>eng</dc:language>
	<dc:relation>https://journal.ugm.ac.id/ijccs/article/view/117482/44942</dc:relation>
	<dc:rights xml:lang="en-US">Copyright (c) 2026 IJCCS (Indonesian Journal of Computing and Cybernetics Systems)</dc:rights>
	<dc:rights xml:lang="en-US">http://creativecommons.org/licenses/by-sa/4.0</dc:rights>
</oai_dc:dc>