Padu developed using outdated methods, says cybersecurity expert

29 Mar 2024 • 12:00 PM MYT
Daily Express
Daily Express

Daily Express Online (Malaysia) is Sabah's top-ranked & most viewed English news site. It is also Sabah's leading & most circulated daily English newspaper.

image is not available

PETALING JAYA: A cybersecurity expert has claimed that the central database hub (Padu) was developed using “outdated” methods, potentially compromising its data integrity.

Fong Choong Fook, CEO of LGMS Bhd, said modern organisations today opt for an API gateway to access distributed data, rather than relying on a duplicated centralised database.

“Take a look at the initiatives of the Singapore government. They have an API gateway in the cloud that allows the government to access distributed and stored data from different agencies,” he told FMT.

“What the Malaysian government is doing is very outdated.”

SPONSORED CONTENT Sabah revenue hits RM6.97 billion: Hajiji says GRS State Government may see full term Kota Kinabalu: The Sabah Government continued its momentum in managing the economy in line with the commitment and spirit of the Sabah Maju Jaya (SMJ) when it posted record high state revenue of RM6.973 billion last year. Read more Fong said employing such an antiquated approach to developing Padu not only risks data duplication but also raises concern about the integrity and accuracy of stored data.

“For example, when someone keys in salary information that’s different from the government records obtained from (the Inland Revenue Board), which piece of data should the government use?” he asked.

He was commenting on Machang MP Wan Ahmad Fayhsal Wan Ahmad Kamal’s suggestion on Thursday that public trust in Padu could increase if the database was overseen by the digital ministry.

Economy minister Rafizi Ramli previously said that Padu saw 28 distributed denial-of-service attacks on the first and second days of its launch in January but had remained unaffected by such attacks since then.

Fong also said it was “pointless” to decide which department should oversee Padu if the design of the database itself was flawed.

“More importantly, we need to study its root cause, how secure the database is, and how secure the database foundation is,” he said.

Yesterday, Sarawak premier Abang Johari Openg said Padu should not collect excessive information unrelated to individuals’ financial status.

Abang Johari said the people of Sarawak were questioning the necessity of providing extensive personal information when registering with Padu.

Last week, Sarawak’s top state government officials in Sri Aman and Sibu were told not to register citizens’ information with Padu until further notice.

Sri Aman division resident Abang Porkan Abang Budiman gave the order in a circular addressed to district and administrative officers there.

* Follow us on Instagram and join our Telegram and/or WhatsApp channel(s) for the latest news you don't want to miss.

* Do you have access to the Daily Express e-paper and online exclusive news? Check out subscription plans available.