Marjorie Furay: Hello everybody and welcome to master class this evening, July 20th 2023.
Marjorie Furay: So glad to have you guys.
Marjorie Furay: We have a great list of presenters this evening.
Marjorie Furay: It's a long one, but they're 15 minutes each.
Marjorie Furay: Hopefully we will get through them.
Marjorie Furay: And it should be a lot of fun.
Marjorie Furay: There's a lot of different topics, so it should be really fun to listen to them and see what they've come up.
Marjorie Furay: We will start with Ricky to night.
Marjorie Furay: Are you ready, Ricky?
Rikki Boodram: Oh yeah, I'm here.
Rikki Boodram: I'm ready.
Marjorie Furay: Alrighty.
Rikki Boodram: OK, so let me share my screen.
Rikki Boodram: OK.
Rikki Boodram: I think last time you said if I click the the presenter here.
Rikki Boodram: There we go.
Marjorie Furay: Yes, alright.
Rikki Boodram: OK.
Rikki Boodram: So good evening everybody.
Rikki Boodram: Uh my my topic tonight will be on computer virtualization and let's get started so.
Rikki Boodram: Virtualization.
Rikki Boodram: When I was when I was doing some research on this topic, it was speculated that it started in the mainframe days in between the 1960s and 1970s by IBM to introduce a timeshare concept so that users can share compute resources.
Rikki Boodram: This promoted efficient computing and data management.
Rikki Boodram: Now in the IT cybersecurity world, uh virtualization is a program that allows you to run multiple operating systems and applications on top of an existing hardware like your PC or a server, for example.
Rikki Boodram: Virtual virtualization is seen most commonly in the server environment be because of its hardware and and basically you could run multiple instances of different operating systems on on that set hardware which which in turn leads me to my next point, which it can help reduce hardware cost and emissions.
Rikki Boodram: Else could save electricity and promote a smaller carbon footprint, which I thought was kind of cool.
Rikki Boodram: And UM to reduce the risk of compromising the whole system, IT and service security agents would launch a virtual machine to analyze a suspicious file or capture and malware for a deeper analysis.
Rikki Boodram: So so to summarize that instead of launching that on a real machine, they will basically launch a virtual sandbox.
Rikki Boodram: So that way the.
Rikki Boodram: Malware or what?
Rikki Boodram: Whatever they're trying to do is isolate it from from the OS, which which Patel was me, me as well.
Rikki Boodram: So according to VMware, at a minimum you you will need the following either a variety of Windows operating systems which could be Windows 810 eleven on the server side you can have Server 2012 sixteen and 19.
Rikki Boodram: On the Linux side, you could have Ubuntu, Red Hat, Debian and Fedora.
Rikki Boodram: Just just a list of few A compatible 64 bit Intel X86 or AMD64 CPU that was launched in 2011 or later.
Rikki Boodram: At least a 1.3 gigahertz.
Rikki Boodram: So faster core speed processor and at minimum you need at least two gigs of memory.
Rikki Boodram: But having and Moore is recommended so so that way it does not bog down the host operating system.
Rikki Boodram: Uh, so this photo here, this, this, this, this is my custom built PC.
Rikki Boodram: And here's some of my specs here, and as you can see I I have exceeded the VMware as minimum requirements and what what's also cool about it is that it is a custom liquid cooling kit, which means that my sister won't run hot.
Rikki Boodram: Basically, this system is primarily used as a workstation.
Rikki Boodram: I also game on this this machine and this will make a good VMware box as well.
Rikki Boodram: Let us see.
Rikki Boodram: And so here's my references here and I'm gonna give you guys a live demonstration of on how to create a virtual machine.
Rikki Boodram: So let me just exit out of this.
Rikki Boodram: All right, so here's here's the VM Ware workstation pro.
Rikki Boodram: Umm this this is the paid version of VMware.
Rikki Boodram: I I I think I think it cost me like around like two 200 bucks for a license which which is not too bad and this this license is for life.
Rikki Boodram: So there there's no umm, there's no subscription as stuff like that.
Rikki Boodram: It's it's tied in with with my my system here.
Rikki Boodram: So to create a virtual machine you want to click create it and new virtual machine.
Rikki Boodram: Typically I will use this this this is the recommended setting, so I'll just stick with this, although if if you feel ****** you could go ahead and click the event setup which are good, which will go through like.
Rikki Boodram: Of the hardware, so I prefer now.
Rikki Boodram: I'm so used.
Rikki Boodram: Typical.
Rikki Boodram: They'll click next and I I I have a isotopy.
Rikki Boodram: Here I'm a system and this make sure that's correct.
Rikki Boodram: Yeah.
Rikki Boodram: Yes it is.
Rikki Boodram: OK Ohh and this this is all my VM's I have here the ISO files and along with the client.
Rikki Boodram: Client.
Rikki Boodram: So in this case will go here open and is Windows 10 for this demonstration.
Rikki Boodram: Oh, and one thing to note here.
Rikki Boodram: Yeah, these Isos I've gotten straight from mom, my Microsoft.
Rikki Boodram: So.
Rikki Boodram: So yeah, so so, so that's the best way to to to grab the Isos.
Rikki Boodram: If you do a windows, if you don't do Linux, it's the same processor.
Rikki Boodram: I will go to either Ubuntu for example and grab the ISO from there, and you can always load it from here as well.
Rikki Boodram: Some will click next.
Rikki Boodram: Yet as fine.
Rikki Boodram: Uh.
Rikki Boodram: You can also change the name if you want, but I'll just keep it as default.
Rikki Boodram: I want to change this path here so that way we could do.
Rikki Boodram: This get a coucher.
Rikki Boodram: Here, let me see and this PC.
Rikki Boodram: Personalization.
Rikki Boodram: Yep. Alright.
Rikki Boodram: Here's where you could choose your this size, UM, this this is the minimum for Windows 10, so I'll I'll just leave that as default for now.
Rikki Boodram: Umm this if if if you want to select this option this this will make it easier if you wanna move the VM from 1 workstation to the next.
Rikki Boodram: But in this case I'm seeing that is is just my system here.
Rikki Boodram: I'm just going to do it as a store as a single file.
Rikki Boodram: Click next.
Rikki Boodram: Now by default this this.
Rikki Boodram: These options will come up here, but let's let's expand that.
Rikki Boodram: So here's your memory.
Rikki Boodram: As you see in my whole system is 64 gigs of memory, so I'm I'm just gonna put it put this as 8 gigs for now the processors UM.
Rikki Boodram: As you saw, I I have a 24 core processor, so to I'm just going to make make this a quad core.
Rikki Boodram: There we go.
Rikki Boodram: So that's so that's a quad core.
Rikki Boodram: These no.
Rikki Boodram: Normally I don't mess with these here, but most modern systems now would should have in the BIOS the virtualization enabled by default.
Rikki Boodram: If not was was was gonna happen.
Rikki Boodram: Is what's gonna happen is is once I click on close and try to launch the VM I I will get an error saying that I'll let go into the BIOS and enable the Intel Vt UM.
Rikki Boodram: Up up option there.
Rikki Boodram: So.
Rikki Boodram: So leave that this for now and then then for the network adapter Nat is is basically we we are sharing the host IP.
Rikki Boodram: If you wanna do whose only this is a private network, or if you want to bridge to, to to your network, you could just select bridged.
Rikki Boodram: But in this case I'll just keep it on that for now.
Rikki Boodram: All the all this here is by default.
Rikki Boodram: I don't really have a cell card, so that's fine. Printers.
Rikki Boodram: UM this.
Rikki Boodram: I actually just found out that this will will will will not pick pick, pick, pick, pick up your home printer.
Rikki Boodram: So I'll just leave this as is and then we'll just let that use my my monitor for now.
Rikki Boodram: So click, click close.
Rikki Boodram: Umm so it it's saved the settings.
Rikki Boodram: I want and I'm gonna click finish.
Rikki Boodram: Ohh and this is gonna power on by itself to make it easy, so click finish.
Rikki Boodram: It's going to create the disk.
Rikki Boodram: And effect, let me just full screen just for you guys, alright.
Rikki Boodram: Oops.
Rikki Boodram: There we go.
Rikki Boodram: All right.
Rikki Boodram: So obviously I speak English.
Rikki Boodram: I'm in the US and in the United States.
Rikki Boodram: Science.
Rikki Boodram: So Samuel click next in Star now.
Rikki Boodram: Umm I I don't have a key so I'll just click.
Rikki Boodram: I don't have a product key.
Rikki Boodram: That's fine.
Rikki Boodram: This, this, this is just a virtual machine, so I'm gonna do Pro 64 bit next.
Rikki Boodram: I accept the terms next to be able to do a custom install and you can see this.
Rikki Boodram: This is the disk we we are just made, so I'm going to click next and then it's going to go through this process.
Rikki Boodram: It should.
Rikki Boodram: It should not take take that that that long actually.
Rikki Boodram: It should take about.
Rikki Boodram: I would say 10 to 15 minutes tops so.
Rikki Boodram: Plus my my storage where my VM's are stored, it is in an SSD so so I guess so so it shouldn't take long if this was a hard drive it it'll be a different story.
Rikki Boodram: All right, we'll do a reboot.
Rikki Boodram: And then it's going to walk, walk through the steps from there.
Rikki Boodram: Oh, and this this could minimize as well.
Rikki Boodram: So, so doesn't really get in the way of anything.
Rikki Boodram: And she for pull up.
Rikki Boodram: Alright, so I'm going to do a U next.
Rikki Boodram: Yeah, we're in the US.
Rikki Boodram: No, I don't want to add another keyboard.
Marjorie Furay: Are the resources limited for this VM version?
Rikki Boodram: Uh, no, actually.
Rikki Boodram: Let me just drag this over now.
Rikki Boodram: You can't see it here to minimize this.
Marjorie Furay: I know my students have trouble with that.
Marjorie Furay: All the time.
Rikki Boodram: Uh.
Marjorie Furay: If they're using the wrong kind of computers to make their VMS in class, you know sometimes they can't do 2 gigs.
Rikki Boodram: Right.
Rikki Boodram: So let me see.
Rikki Boodram: So are so right now this?
Rikki Boodram: This is my usage right now, so I'm using like 20 gigs, but I've I've allocated, I've allocated 8 gigs right now so.
Rikki Boodram: 20 gigs is the 8 gigs plus.
Rikki Boodram: What?
Rikki Boodram: What my host is user right now so as you can see I have the my.
Rikki Boodram: My PC isn't slow whatsoever, so let's see.
Marjorie Furay: To yeah.
Rikki Boodram: Yeah, will do personal use.
Rikki Boodram: I would still offline account, it's just a VM limited this to Master Glass 7.
Rikki Boodram: Password is password.
Rikki Boodram: Uh, yeah, sure, why not?
Rikki Boodram: Yeah.
Rikki Boodram: Let's see.
Rikki Boodram: That's fine, it's just a VM then that's.
Rikki Boodram: Let's see.
Rikki Boodram: There's the Windows 10 thing.
Rikki Boodram: That's that's fine.
Rikki Boodram: That as is, except skip that.
Rikki Boodram: Not now.
Rikki Boodram: This box will eventually grow big because my my mother is kind of huge, so is gonna pull, pull the dried deer drivers and search.
Rikki Boodram: Alright.
Rikki Boodram: Maybe later or all right.
Rikki Boodram: And here we are.
Rikki Boodram: This this is the VM.
Rikki Boodram: I could go anywhere I could.
Rikki Boodram: I could do you know, import stuff.
Rikki Boodram: Let me just back out of this for a minute.
Rikki Boodram: Let's see.
Rikki Boodram: Yeah.
Marjorie Furay: So if I have this right, you have windows and you added a Windows VM.
Rikki Boodram: Yep.
Marjorie Furay: OK.
Rikki Boodram: So.
Marjorie Furay: Alright, that's cool.
Rikki Boodram: So right now?
Rikki Boodram: Yeah, because if I was to minimize this, I'm running on on top of my machine right now.
Marjorie Furay: So is.
Marjorie Furay: So is your machine Windows 10 or 11?
Rikki Boodram: I am running when Windows E 11 actually.
Marjorie Furay: OK, alright.
Rikki Boodram: Yep.
Rikki Boodram: And that's that's it.
Marjorie Furay: Awesome.
Rikki Boodram: This this is the VM right here.
Rikki Boodram: Alright.
Marjorie Furay: Very cool.
Rikki Boodram: Does any questions, comments.
Marjorie Furay: Now, excellent job.
Marjorie Furay: We do it in class.
Rikki Boodram: Ubuntu, yeah.
Marjorie Furay: We do it with Lubuntu, which always reminds me of yeah, Lubuntu.
Marjorie Furay: It's like, you know, lugal, I don't know.
Marjorie Furay: You got to know the movie, then talk about right now.
Marjorie Furay: But anyways, it always reminds me of that.
Marjorie Furay: But yeah, this is great.
Marjorie Furay: This is great to show and I might end up taking that out and showing my students because they just don't get it.
Rikki Boodram: Yes. Uh.
Marjorie Furay: But this is great.
Marjorie Furay: Thank you.
Rikki Boodram: You're welcome.
Rikki Boodram: Emeka, you got a question or a comment, but.
Emeka Chuku: Yeah.
Emeka Chuku: So when you are using the VM, umm and you make some profile configurations and changes.
Rikki Boodram: Hmm.
Emeka Chuku: Is there an instance where that would be lost when you log out of the VM?
Emeka Chuku: Or is there like how?
Emeka Chuku: How?
Emeka Chuku: What situation and what situation would you lose your profile or have to basically start over?
Rikki Boodram: Ohh so let let me share back my screen real quick.
Rikki Boodram: Actually, we'll just see.
Rikki Boodram: Oops.
Rikki Boodram: So when when I was playing around with the software, I actually just found out that you could create a snapshot.
Rikki Boodram: So a snapshot is like it it.
Rikki Boodram: It'll basically freeze in time, so let's let's create one.
Rikki Boodram: For example, let's do.
Rikki Boodram: To assist you, master.
Rikki Boodram: Master class.
Rikki Boodram: Test.
Rikki Boodram: And let me see that is a cycle where.
Rikki Boodram: Or is it?
Rikki Boodram: Oh, OK, so we could if I was to let me see. Close this out.
Rikki Boodram: To revert.
Rikki Boodram: Yeah, here we go.
Rikki Boodram: Yep.
Rikki Boodram: Right.
Rikki Boodram: So, umm, so technically you you wouldn't lose your profile per say if if you create snapshots, but you could also pause the VM as well.
Rikki Boodram: So if asked to pause it and close out a list and felsteel relaunch the VM, it will come come back back to here basically then this do resume.
Rikki Boodram: So also let me pull this up here real quick.
Rikki Boodram: It's going to store.
Rikki Boodram: Yep.
Rikki Boodram: So Yep, so so it's stored my my my virtual disk right here the snapshot and this this this is the disk image file right here so so so you should be you you should be all set from from there so so so you you actually shouldn't really lose anything in that case.
Rikki Boodram: All right.
Rikki Boodram: Let's see.
Rikki Boodram: Alec, how about you?
Alec Kramer: Hey rookie amigo can answer my question, but so how frequently do you use virtual since you don't have to set that up every time?
Alec Kramer: Do you like?
Alec Kramer: Once you have it up, it's it's up right?
Alec Kramer: I I've never used it before.
Rikki Boodram: Yep. Yeah.
Alec Kramer: OK, yeah.
Rikki Boodram: Yeah, so, so you you have the option to to leave this 24/7 or you could just shut it down.
Rikki Boodram: So I'll I'll go ahead and shut this down, for example.
Rikki Boodram: Yeah.
Rikki Boodram: Yeah, of course. Yeah.
Alec Kramer: And then you can just load it back up, no?
Rikki Boodram: Yes, Sir.
Rikki Boodram: So it's right here, you just pop, pop our back on.
Alec Kramer: OK, alright.
Alec Kramer: And you use that pretty frequently, then or no.
Rikki Boodram: I've I've actually if if if you see here I've.
Alec Kramer: Ohh.
Rikki Boodram: I've used this for truck my my, my my classes my my most yeah, my most recent one here.
Rikki Boodram: This is from hack the box.
Rikki Boodram: Actually this, this, this, this, this is their their VM.
Alec Kramer: No.
Rikki Boodram: And yeah, I've, I've, I've, I've.
Rikki Boodram: I've took A to took, took a Medina, Cali class so so this this the Cali VM I downloaded and stuff like that so.
Alec Kramer: OK.
Alec Kramer: So that's just get the download that on.
Alec Kramer: Are you from that I guess on online or something?
Rikki Boodram: Yeah, online. Yep.
Alec Kramer: OK, alright.
Alec Kramer: On. Thanks.
Rikki Boodram: Yep.
Pete Garcia: These this like a for do.
Pete Garcia: Do you use not like this but like like these center or be cloud director for work or anything.
Rikki Boodram: No, I actually when when I started my virtual list my virtualization journey.
Rikki Boodram: Uh, this this?
Rikki Boodram: This was the first one I've I've started with.
Rikki Boodram: I started with VMware Workstation but but but yeah I I I I have heard cases where people are where you could use vsphere by a V cloud and stuff like that for for for servers.
Pete Garcia: Umm.
Rikki Boodram: Yeah.
Rikki Boodram: So that's.
Rikki Boodram: That's cool, actually, yeah.
Rikki Boodram: So.
Pete Garcia: Thanks.
Rikki Boodram: Yeah.
Marjorie Furay: Yeah, I wanted to try this for because I'm on Windows 10.
Rikki Boodram: Yeah.
Marjorie Furay: I wanted to try it for 11 and see if I really want to get into it because I usually don't.
Marjorie Furay: Do you know the first?
Marjorie Furay: The first out of something I don't usually do it.
Marjorie Furay: I'll wait till all the bugs are gone.
Rikki Boodram: Ohh yeah.
Marjorie Furay: I thought I could try it on a VM, see how it works, see if I like it.
Rikki Boodram: Oh oh, and if if you want to, you, you you actually don't don't have to buy buy buy this program.
Rikki Boodram: You you goes down download this for free.
Rikki Boodram: Actually, the VMware workstation player.
Marjorie Furay: OK.
Rikki Boodram: And of course there's there's.
Rikki Boodram: There's ones there's neck, there is a a other programs like or Oracle Box and stuff like that too.
Marjorie Furay: Yeah, that's what we use in in the course. Exactly.
Rikki Boodram: Yeah.
Marjorie Furay: OK, let's very cool.
Marjorie Furay: Thank you so much.
Rikki Boodram: Yeah.
Rikki Boodram: You're welcome.
Rikki Boodram: Yep.
Marjorie Furay: Excellent job.
Rikki Boodram: Thank you.
Marjorie Furay: OK, great.
Marjorie Furay: All right, Next up.
Marjorie Furay: Thomas Johnson, Are you ready?
Thomas Johnson: Yeah.
Thomas Johnson: Can everybody hear me?
Marjorie Furay: We can.
Rikki Boodram: Yep.
Thomas Johnson: Alright, perfect.
Thomas Johnson: So you get my screen shared here.
Thomas Johnson: OK.
Thomas Johnson: Can everybody see my screen?
Rikki Boodram: Yep.
Marjorie Furay: I can Yep.
Thomas Johnson: Perfect.
Thomas Johnson: So money story, Rikki and I almost gave the exact same presentation.
Thomas Johnson: Umm, thankfully, we thought we were happened to be talking in teams and he was like, yeah, I'm doing virtualization and I was like, yeah, me too.
Thomas Johnson: So I pivoted.
Thomas Johnson: Instead, we're going to kind of piggyback on what Ricky showed everybody, and we're gonna take a look at Metasploit able, and Metasploit able is a virtual machine that is designed for you to be able to hack into it.
Thomas Johnson: So just a quick rundown, real quick of what we're going to do.
Thomas Johnson: We'll go over exactly what meta exploitable to is leveraging virtual machines to create your own hacking lab, and then we're going to do a live demo on my PC of attacking that.
Thomas Johnson: It's relatable to with a calling machine.
Thomas Johnson: So what is Metasploit able to Metasploit able to is a virtual machine that was created by Rapid Seven?
Thomas Johnson: It is based on the Linux operating system and they designed it to be as vulnerable as they could get it.
Thomas Johnson: So it's basically been put out there as a target for ethical hackers to practice on.
Thomas Johnson: Now, how can you leverage that in order to create your own hacking environment?
Thomas Johnson: Well, just like Ricky showed with his virtualization demo, we can create our own environment.
Thomas Johnson: That's isolated that we can hack in.
Thomas Johnson: So how do you set that up?
Thomas Johnson: We're gonna be working in VirtualBox, which is another virtualization program similar to VMware.
Thomas Johnson: I'm familiar with and use both, but I know how to do the network settings a little bit better on VirtualBox, so that's what I did the demonstration in.
Thomas Johnson: So to start, you're going to download the VirtualBox program which I put the link to it up there and you're gonna wanna download the meta Splittable 2 and a Kali Linux VM.
Thomas Johnson: Cali is another flavor of Linux.
Thomas Johnson: There's a bunch of different Linux operating systems out there, but it is one of the most common ones that's used by security professionals for penetration testing and things like that.
Thomas Johnson: And of course I have the link to the Met Splittable 2 machine from soy source forge and the Kali Linux machine directly from Cali.
Thomas Johnson: The cool thing about Kali Linux is if you go on their website they actually can give you virtual machines that are tailored to the program you're going to run it to.
Thomas Johnson: The one that we're going to be using today is one that they specifically made just for VirtualBox.
Thomas Johnson: You can actually just download it as long as you have the VirtualBox program up and running.
Thomas Johnson: You can just double click on and it pops right up.
Thomas Johnson: You don't have to do a lot of setup on it, which I thought was really cool and really convenient.
Thomas Johnson: Uh, so once you've downloaded your machines, you're gonna wanna go in and change some settings on them before you boot them up.
Thomas Johnson: So let's see.
Thomas Johnson: Can everybody see the manager there?
Rikki Boodram: Yep.
Thomas Johnson: OK, perfect.
Thomas Johnson: So before you start them, which I have mine running right now that way they didn't have to take time to boot.
Thomas Johnson: You're gonna want to go to settings.
Thomas Johnson: Network and you wanna set it to internal network and you can name your network here.
Thomas Johnson: Just write down what you name it, because you're gonna use it in the next part that I'm gonna describe.
Thomas Johnson: And what that does is it creates an isolated network that is limited only to the virtual machines.
Thomas Johnson: They can't even communicate with the host machine that they're on.
Thomas Johnson: If I tried to ping any of these machines from the command line on my Windows computer, it wouldn't go through, which is awesome.
Thomas Johnson: That way they're completely isolated.
Thomas Johnson: You don't have to worry about anyone getting to them, and you don't have to worry about you.
Thomas Johnson: You know, being able to get out to the Internet or anything like that, they're completely cut off insecurity.
Thomas Johnson: We call that a sandbox environment.
Thomas Johnson: So just set that and you can see down here I have that set on all three of these machines.
Thomas Johnson: Now before you boot them up, the one thing you'll want to do to make sure that they can talk to each other is to create a DHCP server on your host machine, and I have the commands actually for a Windows machine listed out here.
Thomas Johnson: To do that, first you'll change to the directory where VirtualBox is, and then you just type in that command and you can do it verbatim.
Thomas Johnson: You'll just replace where it says insert network name here.
Thomas Johnson: That's where I put in my hacklab you'll create your server IP, which can really be any IP address you want.
Thomas Johnson: Just make sure that the IP address you put here you use the same network and subnet information for your ranges.
Thomas Johnson: You'll set your lower range and your upper range and your subnet mask will pretty much always be the same, and then you enable.
Thomas Johnson: Now, the reason that we do that is so your host machine will assign IP addresses to the virtual machines that you just created so that they can talk to each other within your isolated network.
Thomas Johnson: But again, they can't talk to anything that's outside your host machine.
Thomas Johnson: You can't go to Google.
Thomas Johnson: You can't do anything like that.
Thomas Johnson: All they can do is interact with each other, which gives you that sandbox environment.
Rikki Boodram: Yep.
Thomas Johnson: If you get stuck, network Chuck has a great guide on YouTube.
Thomas Johnson: For this I put the link there at the bottom.
Thomas Johnson: Full disclosure, I used it to help me get this all set up.
Thomas Johnson: That's where I got the command from because I wanted to make absolutely sure it was isolated.
Thomas Johnson: The reason being these machines can't connect to the Internet at all.
Thomas Johnson: You want them completely cut off because you do not want them to be accessible.
Thomas Johnson: Multisport Table 2 is a vulnerable machine.
Thomas Johnson: It's designed to have security flaws, so if it's connected to the Internet and it's accessible from the outside, then it's vulnerable to attack.
Thomas Johnson: Someone else could attack your network and use it to bounce off and get in, so by isolating it and creating this cutoff hacking lab that you have now, you don't have to worry about that.
Thomas Johnson: They're not reachable.
Thomas Johnson: If you do need to connect your attacking machine, which is the only one that I would recommend to connect to a network, you just go back to the settings in VirtualBox.
Thomas Johnson: Where did it go?
Thomas Johnson: And just change that setting back to Nat here in the network department and reboot it.
Thomas Johnson: Obviously you wanna shut the machine down.
Thomas Johnson: Change this setting and then restart it again and then you'll be able to access the Internet and that's if you need to download a tool or updates or something that didn't come with the virtual machine image that you have.
Thomas Johnson: I ran into that actually with this machine itself, I had to reconnect it to the Internet to download Nessus.
Thomas Johnson: We're not gonna be using Nessus, I just wanted it on there for my own purposes.
Thomas Johnson: But so let's demonstrate this.
Thomas Johnson: Let's go ahead and hack something.
Thomas Johnson: So we're going to pull up the Metasploit able two machine and our Kali Linux machine.
Thomas Johnson: And on these default machines that you download, the passwords are usually very simple.
Thomas Johnson: For the Cali Dem machine that we're running at, the username is Cali and the password is costly.
Thomas Johnson: So while that's booting up, let's go over to the Metasploit able machine.
Thomas Johnson: So this is pretty much all we're going to do with this for the most part.
Thomas Johnson: It's just had it up and running now.
Thomas Johnson: How we're gonna approach this is just a standard network scan for security vulnerabilities.
Thomas Johnson: Like, say you're at an organization somewhere and someone comes up to you and says, hey, I think there is a machine on the network that has some vulnerabilities.
Thomas Johnson: Can you scan it for me?
Thomas Johnson: So first we're going to use Nmap, which stands for Network Mapper.
Thomas Johnson: It is a scanning tool that's going to check this machine that we're gonna run for any open ports and then we can use those open ports to see if there's potential vulnerabilities.
Thomas Johnson: So first we're gonna end map scan the network which is 10, that 38.
Thomas Johnson: There we go.
Thomas Johnson: Now this is assuming that you have the network.
Thomas Johnson: I you know, information first, which you would if it was an internal penetration test.
Thomas Johnson: So we're going to start it.
Thomas Johnson: And this does take a minute.
Thomas Johnson: That's the worst part about cybersecurity for me, as you have to be patient.
Thomas Johnson: If you are terribly impatient, you can just hit enter and it'll give you a percentage.
Thomas Johnson: So we're 62% done.
Thomas Johnson: OK, so this actually scanned because I have 1/3 virtual machine running in the background.
Thomas Johnson: I wanted to show an example of scanning a network, so this is the meta exploitable machine that we're looking at and you can see this has a bunch of ports open that is a red flag right there.
Thomas Johnson: That's something probably isn't terribly secure on this machine, because if you look at the other one that I have running, which is another vulnerable virtual machine, it has way less ports that are open and visible for scanning.
Thomas Johnson: So now that we know this one is the one that we're after, the 10.38 dot 1.11, we're gonna end map.
Thomas Johnson: Just that one machine, but we're going to do it a little bit differently.
Thomas Johnson: We're gonna use some different switches.
Thomas Johnson: We're gonna scan it in aggressive mode and we're going to check it for services that are running, and we're gonna have enmap run some scanning scripts against it to kind of help us look for vulnerabilities and see what's going on.
Thomas Johnson: Run that.
Thomas Johnson: Like I said, this is the worst part of cybersecurity is being patient for these scans.
Thomas Johnson: Imagine if you were scanning an organization with 100 different hosts on it.
Thomas Johnson: How long that could take?
Thomas Johnson: OK, we're out there.
Thomas Johnson: OK, so you can see using the different switches and in map which is basically just another way of saying the different scanning options.
Thomas Johnson: We've got a lot more information.
Thomas Johnson: It shows us what ports are open, the service that is running on it, and even the version of that service that's running.
Thomas Johnson: And this is all just surface level scanning.
Thomas Johnson: You can hit any machine that you want to with this.
Thomas Johnson: It's not strictly speaking, legal, which is why we're doing it in our isolated hacking environment, but you can see the level of information that we've got going on this machine.
Thomas Johnson: It even gave us down here at the bottom.
Thomas Johnson: It gave us the computer name.
Thomas Johnson: It pulled Metasploit, able out, gave us the local domain.
Thomas Johnson: This really gives you a lot of information to work off of, so let's go ahead and attack this now.
Thomas Johnson: What we can do here?
Thomas Johnson: Because we're going to open up another tab, and we're gonna bring up the Metasploit console.
Thomas Johnson: Metasploit is a network scanning tool and really it's like a whole framework because it has a bunch of exploits and everything pre saved into it and you can draw against it to find different ways to compromise a machine.
Thomas Johnson: So we'll do a simple one first, just going to copy that and now there were in the Metasploit table console or Metasploit console, we're going to search and we're going to paste that service and version number that was running.
Thomas Johnson: Sorry, I get a little click happy sometimes.
Thomas Johnson: OK, so it automatically searched and you can see here that there is an exploit that we found in the system that it could potentially be vulnerable for.
Thomas Johnson: So we're gonna do use zero and we do need to look at the options because you do have to tailor the attack a little bit and the only thing that we have to set here because you can see it required is only on our hosts and our port.
Thomas Johnson: All that's saying is you have to specify the port number that you want to attack, which we got that earlier that matches with our scan and you have to specify the R host which is the target host.
Thomas Johnson: So our target host will set our hosts to 10 dot 8.111 and let me just double check that that is the one that we wanted, yes.
Thomas Johnson: All right, so now we've set our hosts and all we have to do here is exploit.
Thomas Johnson: And it's running.
Thomas Johnson: You're launching an attack on that vulnerable machine.
Thomas Johnson: You know, it does that sometimes.
Thomas Johnson: Something with a virtualization.
Thomas Johnson: Sometimes it doesn't immediately get the shell.
Thomas Johnson: There we go.
Thomas Johnson: I found it this time.
Thomas Johnson: OK, we know we were successful because it says command shell session one open.
Thomas Johnson: So now we can do print working directory so that little slash symbol says we're in the root directory, which in a Linux system that's basically means we're in the administrator directory.
Thomas Johnson: We can do.
Thomas Johnson: Who am I?
Thomas Johnson: Which is a Linux command that tells us we are root.
Thomas Johnson: So right now we've compromised this other machine and we can do anything to it because we are the root user on this machine.
Thomas Johnson: So what we're going to do here, since we have this information on what the main login and everything is, we can actually switch users and go MSF admin.
Thomas Johnson: And if you am I MSF admin, so now we can LS, which just lists the all the files and directories there.
Thomas Johnson: We're gonna change directory to home.
Thomas Johnson: MSF admin LS again and ohh.
Thomas Johnson: Anyone who's done try hack me, you know what that is?
Thomas Johnson: That is a capture the flag, so we're going to cat, which means it allows us to read that text file in the terminal environment and look at that.
Thomas Johnson: We've got our own flag that we put in there.
Thomas Johnson: I put that in there earlier, but that just shows you how you can use this calling machine that you've used to compromise meta exploitable to view a file on that machine.
Thomas Johnson: Imagine if that was, you know, the Etsy password file which has all the password hashes.
Thomas Johnson: I'm sorry.
Thomas Johnson: The shadow file which has all the password hashes you can really use this as an example of how to get information off of a compromised machine, and we can even close out of that one just because we have how am I on time?
Thomas Johnson: Do I have time to do another one?
Marjorie Furay: Umm no, I.
Thomas Johnson: Ah, OK, well, there's another.
Thomas Johnson: There's a bunch of different exploits you can do on this Metasploit able machine.
Thomas Johnson: And there there's actually a list out there of them, so I should have gone to that slide earlier.
Thomas Johnson: Whoops.
Thomas Johnson: So just kind of in summary, you can see that by utilizing these virtual machines and programs like VirtualBox or VMware or whichever one you prefer to use, you can set up a isolated safe environment where you can attack vulnerable machines and get real world experience using your skills in an actual network environment.
Thomas Johnson: And it's legal because you're attacking your own stuff and justice.
Thomas Johnson: Some useful links here.
Thomas Johnson: This is virtual block virtual boxes guide for your network settings.
Thomas Johnson: This is the exploit guide from Rapid 7, the people that make Metasploit able too.
Thomas Johnson: And then if you just want some more info on Metasploit or in map, you can go to those and that's it.
Thomas Johnson: So anybody have any questions?
Marjorie Furay: Yeah.
Marjorie Furay: Excellent job.
Rikki Boodram: Nice stuff, yeah.
Marjorie Furay: That was great.
Thomas Johnson: To attract.
Marjorie Furay: Yeah, just teaching my my interns how to hack again.
Marjorie Furay: Thank you very much.
Thomas Johnson: Yeah, I to be fair, half the people when you're in cybersecurity right now.
Marjorie Furay: I know, I know.
Rikki Boodram: Yep.
Margaret Medina: I didn't have a question.
Marjorie Furay: So yeah, I didn't put any stipulations on these, so it's OK.
Marjorie Furay: But we teach everything right.
Thomas Johnson: Yeah, disclaimer, do not use these skills for evil.
Marjorie Furay: Exactly.
Rikki Boodram: Right, Yep.
Marjorie Furay: Do not try these at home.
Thomas Johnson: Try him in the.
Thomas Johnson: Try him in your isolated the hacking lab, not on someone else's computer.
Marjorie Furay: Yes, exactly right.
Marjorie Furay: There you go.
Marjorie Furay: Well, thank you so much.
Marjorie Furay: Any questions?
Marjorie Furay: OK, sounds good.
Marjorie Furay: Thank you so much.
Marjorie Furay: You did a great job.
Marjorie Furay: Thanks for showing all that very smooth.
Marjorie Furay: Our next presenter is Victor.
Marjorie Furay: And he's covering biometrics.
Victor Cintron: Can everyone hear me?
Marjorie Furay: Yes.
Victor Cintron: Right.
Victor Cintron: Me share my screen.
Victor Cintron: Can everyone see my screen?
Marjorie Furay: I can.
Rikki Boodram: Yep.
Victor Cintron: That my presentation is on biometrics.
Victor Cintron: Because of an increasing number of network security, data breaches and identity thefts, stronger are authentication systems must be implemented almost everywhere you go.
Victor Cintron: Biometrics technology is used for the identification and an access method for identifying people under surveillance.
Victor Cintron: Biometrics can also be defined as the automation of the automated recognition of individuals by means of unique physical characteristics, typically for the purposes of security, it can be unique physical characteristics used in the automated recognition of individuals, typically for the purposes of security.
Victor Cintron: Also, the application of statistical and and analysis to biological data and the branch of statistics that deals with data relating to living organisms.
Victor Cintron: There are several different types of biometric authentication techniques.
Victor Cintron: Facial is the most common type.
Victor Cintron: There are lots of techniques used to look at facial characteristics that wouldn't affect the significance of, say, age expression or lighting or other variables.
Victor Cintron: A face tablet is made when applying facial algorithms to describe the shape of a appearance of facial features like your eyes, nose and mouth, fingerprints, another type of common type, our form by raised papillary ridges on the skin surface.
Victor Cintron: The ridges themselves do not always run continuously because of the brakes and deviations in their structure.
Victor Cintron: A fingerprint on each human digit is unique and can be used to identify individuals.
Victor Cintron: We also have finger geometry which captures features such as the shape and surface area of each finger, its length, width, thickness, and the distance between the fingers hanging.
Victor Cintron: Hometree is similar to finger geometry, but also includes the surfaces of the hand itself and its side profile images are taken while the hand is kept calm down on the support plate and in position by the use of guided pegs.
Victor Cintron: The length, width, thickness and surface area of the individual's hand is measured and recorded, and finally, odor.
Victor Cintron: Odor.
Victor Cintron: It's primarily used for research of example olfaction device which is used to detect and capture human odors for analysis.
Victor Cintron: We also have DNA or the genetic code for replicating cells.
Victor Cintron: It's still being researched at this time.
Victor Cintron: They are showing that there are differences that lie between identity management, medical research and genealogy.
Victor Cintron: Your identification has been used for many years in countries like France, for example.
Victor Cintron: Ears reveal specific characteristics like shape and other features that allow for identification of an individual.
Victor Cintron: An example will includes an arrested person's ear collected alongside their facial image and fingerprint as part of a criminal record.
Victor Cintron: There's three parts to the eye.
Victor Cintron: You have the eye iris recognition technology which uses the unique patterns of the colored tissue that form the iris.
Victor Cintron: You also have.
Victor Cintron: For these patterns are captured by camera operating in near infrared wavelengths.
Victor Cintron: Then there's the eye eye retina, which is fed by a network of blood vessels.
Victor Cintron: And it is this network that forms the unique structure that the tilt of facilitates retina recognition.
Victor Cintron: Then you have ice Galera, which is the white part of the eye, and when the eye turns either to the left or the right, a network of veins is displayed.
Victor Cintron: It is these two networks in each eye, the left and the right side are that are used for scalera vein recognition.
Victor Cintron: These images are captured with a standard camera, infrared light or common smart phone.
Victor Cintron: We produce these distinct we all produce distinct a distinct heartbeat, regardless of their heart rate or exertion.
Victor Cintron: Distinct factors include shape, size, sounds, and the heart of the heartbeat of the arrangement of the heart valves and the pressures that produce the individuals.
Victor Cintron: General Physiology and health.
Victor Cintron: Only the electric signature of the heartbeat is transmitted and received within the biometric system.
Victor Cintron: The actions are with regards to keystrokes, the actions involved in typing on a keyboard can be used to identify the type is once a reference session of their typing has been recorded for comparison.
Victor Cintron: There are two types of biometric signature, static or offload, offline signature recognition and dynamic or online signature recognition.
Victor Cintron: Offline signature recognition is the graphic image of a handwritten signature of a person, and it is recorded as a digitized reference template.
Victor Cintron: Online signature recognition are the physical actions involved in writing a signature that are captured usually on a screen sensitive device like a tablet, or recorded and recorded electronically.
Victor Cintron: Different characteristics involve rhythm and varying velocities of forming each letter.
Victor Cintron: The overall signature, the pen stroke style is pressure and the direction of the stroke, including a free stroke like crossing your T or dotting an I.
Victor Cintron: Then we have vascular or vein recognition, which is a very new recent biological technology, which is still being researched.
Victor Cintron: The arrangement of veins in fingers and hands form a unique pattern that it can be used to identify an individual.
Victor Cintron: This pattern of veins is captured by shining a near infrared light source through the finger and recording the image on a CCD camera.
Victor Cintron: Finally, we have voice technology.
Victor Cintron: Umm, it is the result of the combination of distinct attributes like the length of vocal cords and the shape of the throat.
Victor Cintron: Distinctive behavioral attributes include your accent and how you speak human.
Victor Cintron: The human voice creates wavelengths that can be measured.
Victor Cintron: It's collected and analyzed by software that employs AI and machine learning techniques to produce a vast array of data derived from factors like your speech, tones, accent, and frequency.
Victor Cintron: Biometrics as an authentication.
Victor Cintron: Biometric systems is a combination of authentication, verification and identification.
Victor Cintron: Principle identification usually ask who are you verification?
Victor Cintron: As is their data associated with you off that authentication, as are you, who you say you are biometric authentications.
Victor Cintron: Aim is to verify that you are who you are supposed to be when scanned.
Victor Cintron: Attributes match templates stored within a database.
Victor Cintron: Obviously the person is allowed into the system.
Victor Cintron: Biometric verification can conclusively prove that their online identity is linked with their real life identity.
Victor Cintron: And then biometric identification can be applied to digital and physical scenarios.
Victor Cintron: It's a solution that is used in the Department of Defense, Law Enforcement and Border Control.
Victor Cintron: Their database is that control or that contain physical characteristics of a vast number of people.
Victor Cintron: The FBI's repository stores height, hair color, weight, eye color, scars, and even tattoos of over 70 million criminal records.
Victor Cintron: Biometrics in the workplace and in the environment.
Victor Cintron: Here we look at the future of biometrics.
Victor Cintron: There are interest industries out there that use biometrics.
Victor Cintron: However, many, many country or many companies still resist to this technology, they see little need to collect fingerprints and eye scans or use facial recognition.
Victor Cintron: How is this technology used in the workplace fingerprint collection, for example, is common in financial services and government?
Victor Cintron: I scan technology is a tool used in high security industries.
Victor Cintron: Individual photos are taken more frequently in many workplaces and are used to create company badges and identification PC's.
Victor Cintron: USB smart cards, door locks and shared devices like printers have enabled smarter and more secure access control in the workplace.
Victor Cintron: Biometrics has been supporting organizations in accommodating hybrid, remote and flexible work arrangements for their employees without exposing them to increase security risk.
Victor Cintron: There is a rise in in biometrics because there is a greater awareness of regulation of privacy.
Victor Cintron: Companies must clearly communicate and a obtain prior consent from an employee before information is collecting before information is collected.
Victor Cintron: Disclosing where it is to be stored and for how long facial scanning technology will be the the next wave of biometrics to be deployed in the workplace.
Victor Cintron: Facial scanning technology is already part of the background screening process in the form of identity verification.
Victor Cintron: When we look at public spaces, TSA, for example, is hasn't been exploration of biometric technologies and has scientifically is scientifically driven.
Victor Cintron: They've been capitalizing on significant advances in biometric accuracy, speed and the ability to automate processes to move passenger through a screening, facial matching, digital identity and facial identification technologies play an important role with TSA checkpoints when when you look at banking, Wells Fargo has been trialling eye scanning technology.
Victor Cintron: When we also wanna look at biometric technology.
Victor Cintron: Uh.
Victor Cintron: Within hospitals, as it as it is crucial today, umm, we have been seeing more where there has been a a mix up with patient files.
Victor Cintron: It has been common where incidents and these happen in hospitals.
Victor Cintron: Uh, where hospitals can't.
Victor Cintron: They're not able to keep the data in line as far as the patients name and their date of birth, so that definitely something that they do have to work on.
Victor Cintron: And then finally, we look at biometrics and AI.
Victor Cintron: What is AI? Biometrics.
Victor Cintron: Biometric technology uses unique traits of a particular part of the body, like your hand or face.
Victor Cintron: What AI does?
Victor Cintron: Is it transforms these traits into code and make them more complex and easier to understand for the system.
Victor Cintron: A person's typing rhythm.
Victor Cintron: Rhythm walking pattern of voice, for example, can be recognized to verify a person you using AI biometrics.
Victor Cintron: How can I I transform biometric authenticate?
Victor Cintron: Uh authentication system, AI and biometric ID validation work together in the following ways.
Victor Cintron: First, AI powered keyboard dynamics can identify people with the help of dwell time, speed and fight time.
Victor Cintron: AI systems can track information about the most frequent, frequently used keys to identify individuals.
Victor Cintron: There's also AI powered facial recognition, which uses 3D biometrics for successful face detection of a person and learning from millions of images.
Victor Cintron: AI can analyze the picture of an have an old image and create a younger image.
Victor Cintron: AI powered voice recognition is another and can train biometric systems using millions of voice samples of different users.
Victor Cintron: Voice patterns can be analyzed, such as speed, accent, tone, and pitch.
Victor Cintron: Recently deceased musicians and actors are examples of this.
Victor Cintron: We also have AI powered golf detection, which shows it is possible to detect the movement of a security perimeter of an airport or in a in healthcare to detect a certain diseases.
Victor Cintron: And then finally, is AI smarter.
Victor Cintron: Although biometrics are trusted for accurate authentication, advanced technology like AI can be used to help and deceive the system.
Victor Cintron: AI and biometrics are formed to create a secure biometric system.
Victor Cintron: This combination can help to develop secure systems that can be used to mitigate risk and fraud.
Victor Cintron: This concludes my presentation.
Victor Cintron: Do we have any questions?
Marjorie Furay: Wow, very cool.
Marjorie Furay: I didn't know there were so many properties in the eye that they can actually use for that.
Victor Cintron: Thank you.
Rikki Boodram: Yeah, the iPhones now have the the face recognition.
Marjorie Furay: Yeah. Yep.
Margaret Medina: I don't know.
Margaret Medina: There was that many different biometric stuff that was pretty cool.
Margaret Medina: Fascinating to learn about that.
Marjorie Furay: Yeah.
Marjorie Furay: Very cool.
Marjorie Furay: Good.
Marjorie Furay: A little bit more information about protecting ourselves, since we just learned how to hack.
Marjorie Furay: Thank you.
Victor Cintron: Thank you.
Marjorie Furay: Excellent job.
Marjorie Furay: OK, now we have ashlan.
Marjorie Furay: Are you ready?
Ashlan So: Yeah, I'm ready.
Marjorie Furay: All right.
Ashlan So: How do I show my presentation?
Marjorie Furay: Go up to the top right of your screen and click share.
Ashlan So: OK.
Marjorie Furay: And then choose a screen that has your my presentation on it.
Marjorie Furay: And if you're going to have something that's going to have audio with it, you want to turn on the.
Marjorie Furay: Pop it open.
Marjorie Furay: You want to.
Ashlan So: Can you guys see my screen?
Marjorie Furay: Yeah, you want to toggle the include computer sound.
Ashlan So: Oh, no, it's just me.
Marjorie Furay: If you're going to have something with sound on it other than yourself, OK, alright, go ahead.
Ashlan So: Thank you.
Ashlan So: So my presentation is on autonomous vehicles hacking and insurance.
Ashlan So: How they all relate in the concerns regarding all three and self driving cars have revolutionized the transportation industry before our very own eyes, from greater Rd safety to save costs and improved efficiency, autonomous vehicles can assist with at all with the use of high precision technology such as sensors, cameras and algorithms.
Ashlan So: Self driving vehicles can view and environment with the 360 degree range compared to humans who only have 180.
Ashlan So: It has the ability to detect their surroundings and make quick real time decisions with its driving assistance and crash avoidance systems, removing the risk of human related errors, which account for 94% of all traffic accidents.
Ashlan So: Examples of this are distracted driving, delayed response times, and fatigue related accidents, with these vehicles being interconnected with each other and in constant communication, they can use this to optimize the flow of traffic and reduce congestion by maintaining consistent speeds efficiently, merging in the traffic, and avoiding sudden breaking, leading to an overall smoother form of transportation.
Ashlan So: They can also optimize routes to reduce idling time and even increase lane and parking capacity.
Ashlan So: Autonomous vehicles can also cut costs relating to transportation expenses with its integration into ride sharing services at reduces the need for individual car ownership and supplements public transportations, as we can see on this chart, there is a continual increase in the number of autonomy autonomous vehicles on the road, with the 16% increase every single year.
Ashlan So: In 2021, there was an estimated 39.6 million self driving cars on the road, but the numbers are projected to be 54.2 million million by 2024.
Ashlan So: So it's important to note that there are varying degrees and the level of autonomy in these vehicles, such as minimal assistance to partial high and full automation.
Ashlan So: Despite the many benefits, there are that come with the self driving cars, there comes a warrant in the number of safety concerns.
Ashlan So: Although these vehicles are known to have quick response times, they may not always be accurate.
Ashlan So: These cars heavily rely on their sensors and there can be many factors that can obstruct it.
Ashlan So: These vehicles use a combination of sensors, including LIDAR or light detection and ranging sensors, as well as their cameras, radars, ultrasonic sensors and other technologies.
Ashlan So: Things that can obstruct these sensors are low light conditions, reflective services, surfaces, weather conditions, dirt, debris and especially damage caused directly to the sensor.
Ashlan So: They can also be incorrectly calibrated, resulting in data discrepancies.
Ashlan So: These factors can affect the vehicle's ability to react effectively and appropriately to their surroundings, decreasing their situational awareness.
Ashlan So: The result of this is a false positive or a false negative, meaning it can either detect obstacles that aren't there or fail to detect detect obstacles that are.
Ashlan So: This will cause the vehicle to act inaccurately by means of making sudden movements without cause or failed and move at all, therefore crashing into the obstacle.
Ashlan So: This event is not impossible as it's happened before.
Ashlan So: For example, in 2018 and Uber, driver used an autonomous vehicle, but it failed to sense a pedestrian crossing the street at night, resulting in their death.
Ashlan So: There are numerous examples of self driving cars with sensor failures.
Ashlan So: This brings up yet another safety concern.
Ashlan So: The lack of real life scenarios and circumstances that are too difficult to replicate during its rigorous testing process.
Ashlan So: It's algorithms haven't yet addressed all possible events, including rare and unpredictable ones, making it difficult to rely on the cars ability to make decisions.
Ashlan So: In these scenarios, system failures are another likely possibility, resulting in another, yet can safety concern because there are so many components that make up these vehicles that can be difficult to rely on.
Ashlan So: The proper communication amongst them all software bugs, glitches and failures, and its in its fail safe mechanisms can all result in the vehicle's ability to properly detect and respond to their surroundings.
Ashlan So: Aside from technological safety concerns, autonomous vehicles also carry the possibility of cyber security threats.
Ashlan So: These cars contained highly complex systems that rely on various interconnected components like sensors, control units, communication networks, software, algorithms.
Ashlan So: It leaves too many possible points of access to the possibility of exploitation, which can result in the compromisation of the vehicles, control data and passenger safety.
Ashlan So: Once all unauthorized access is gained through the exploitation, the attacker could have full control over the vehicle systems, therefore manipulating its steering, braking, acceleration and GPS abilities.
Ashlan So: Not only endangering the passengers, but other Rd users as well.
Ashlan So: This can cause unexpected and dangerous maneuvers.
Ashlan So: The disruption of the flow of traffic and potential collisions and accidents.
Ashlan So: Autonomous vehicles are also susceptible to data breaches, leaving the passenger at risk of identity to identity theft and other violations and threats.
Ashlan So: These cars can collect information on their passengers to operate efficiently, and then formation that it collects of their passengers are their location data, driving patterns, names, contact information, communication data, preferences, payment information, even and even biometric information depending on the vehicle.
Ashlan So: Due to its complex systems and interconnected components like its control algorithms, perception systems and decision making modules, it can present the autonomous vehicles to the possibility of vulnerabilities and exploitation of such like any other device, autonomous vehicles need to be regularly updated and patched to remove the risk of being an insecure target.
Ashlan So: Because these cars are so high tech, there is an option to update them over the air, meaning that fixes and features like firmware, software and encryption keys can be delivered wirelessly.
Ashlan So: The problem with this is that it can be susceptible to exploitation, allowing a way for hackers to intercept the exchange and inner inject unauthorized or malicious software, similar to a man in the middle attack the vehicles communication networks in systems can also be spoofed.
Ashlan So: The communication signals between the vehicle and another device can be jammed, disrupted or even manipulated by a spoof.
Ashlan So: Signals to control its perception of its surroundings, hackers may also attend to manipulate the sensors inputs by generating false readings or misleading the vehicles perception systems, leading to incorrect object detection and other potentially dangerous driving situations.
Ashlan So: These two result in a remote control takeover as it allows the attacker to override the cars autonomous functions.
Ashlan So: These cars are also prone to DDLS, attacks, ransomware, attacks, and now we're in viruses.
Ashlan So: So as I was researching this topic, I found this picture that really represents other cybersecurity threats that autonomous vehicles may face.
Ashlan So: As you see here a task can be conducted on connected and I OT devices, communications, GPS and sensors are points of access for attacks and spoofing as previously previously mentioned that DDoS attack can be referred to as a botnet on wheels.
Ashlan So: Ransomware is an interesting one, as attackers can reuse, refuse the passengers access to the entirety of the vehicle until the demand is paid, so they won't even be able to get in it or even get it functioning.
Ashlan So: Until that's done, a ransomware can be personal to the users or an entire fleet of public transportation in order, entire manufacture or supply chain have touch base on the possibility of carjacking and over the air update attacks as well.
Ashlan So: I had to include insurance in this presentation because I find the topic of it interesting as it relates to cybersecurity, of course, insurance agencies need to consider all possible threats, but the one that has them stumped is the possibility of cybersecurity risks, making it very difficult for them to provide comprehensive coverage where their customers, autonomous vehicles, are relatively new.
Ashlan So: And as we can see, it's on the rise and doesn't seem to be going anywhere time going anywhere anytime soon because of its newness to the transportation industry, there's not enough historical data for insurance agencies to refer back to making it difficult to estimate the likelihood and severity of all its possible threats.
Ashlan So: But especially the possibility of cyber attacks.
Ashlan So: As mentioned before, there are varying levels of autonomy these cars can provide.
Ashlan So: So this makes it difficult for them to assess liability if there is an accident.
Ashlan So: Do we blame the human behind the wheel, or is it the autonomous vehicles fault and the result of a breach?
Ashlan So: There's a liability lie within the stakeholders, the manufacturers, software developers or the vehicle owner with emergency, with emerging cybersecurity risk, how can it assurance policy be flexible enough to adapt to the threats without being too, too costly for the consumers?
Ashlan So: These are all types of questions that insurance agencies have to think of and consider.
Ashlan So: Although it seems like risks are plentiful with autonomous vehicles, there's still in the early stages of development, meaning there's still a lot of room for improvement.
Ashlan So: Insurance agencies, technology providers and regulatory bodies will have to collaborate on addressing these challenges posed by autonomous vehicle list.
Ashlan So: This allows the ability to share data sets and even encourage partnerships.
Ashlan So: They think the collaboration of research into institutions, industry experts and the investment of insurance agencies will allow ongoing research in order to comprehend comprehensively assess all possible and unique risks to identify all vulnerabilities, vulnerabilities and properly analyze accident data.
Ashlan So: Basic cybersecurity protocols can be implemented to defend against, and mitigate the possibility of some of these threats through intrusion detection systems.
Ashlan So: Strong encryption and authentication protocols and secure mechanisms when updating over the air regularly.
Ashlan So: Regular software updates and recalibration of sensors could be useful too, I'm sure.
Ashlan So: Going forward, regulatory frameworks will become more defined to allow adequate cybersecurity measures and effective liability frameworks.
Ashlan So: Autonomous vehicles have proven to be a transformative shift in that in the automotive industry, but with careful consideration and continuous development, the collaborative efforts will hopefully address all these possible threats, including technological and cyber security ones, and the possibility for a comprehensive insurance coverage plan to be provided.
Ashlan So: He's our main references and that is all.
Marjorie Furay: Excellent job.
Marjorie Furay: Wow, I did not know that.
Marjorie Furay: Of course, that's all new when it comes to autonomous vehicles. So.
Ashlan So: Yeah.
Pete Garcia: So Speaking of which, I don't know if you know this or not, but you can actually go to moralmachine.net and actually start judging scenarios for this specific purpose.
Pete Garcia: Umm, it gives you like, like, moral dilemmas.
Pete Garcia: Like, do you hit?
Pete Garcia: You know three older people versus one child or, you know, just different scenarios that play into the decision making of an autonomous vehicle.
Marjorie Furay: Oh wow.
Ashlan So: Oh, I didn't know that.
Pete Garcia: Yeah, it's called more moralmachine.net.
Marjorie Furay: That's terrible.
Ashlan So: OK, that's cool.
Ashlan So: Let's check it out.
Marjorie Furay: Ohh my gosh.
Marjorie Furay: OK.
Pete Garcia: This.
Marjorie Furay: Of course, there's something like that, I mean.
Pete Garcia: Well, it's it's it's all like it.
Pete Garcia: It's it's it's purpose like, you know, to to feed those algorithms, right?
Ashlan So: Yeah.
Pete Garcia: Because you know these these, they need to try to mimic, you know, human, you know, thought reaction as closely as possible.
Marjorie Furay: Right.
Pete Garcia: But like a lot of the scenarios that I came across were were do you hit these people or those people?
Pete Garcia: And it's like, how about none?
Marjorie Furay: Yeah, I mean, I mean, if it's playful, OK, but wow. OK.
Pete Garcia: Yeah, it's like, no, I'd rather take my card to the wall and not hit anybody.
Marjorie Furay: Right, exactly.
Marjorie Furay: Ohh, makes sense.
Marjorie Furay: OK.
Marjorie Furay: Excellent job.
Marjorie Furay: Definitely good.
Marjorie Furay: I love you guys and these these presentations, they're great, all right.
Marjorie Furay: And Margaret Medina, phishing attack.
Marjorie Furay: We've got another it's it's all cyber tonight.
Margaret Medina: OK, you wanna see if we can share this?
Rikki Boodram: Yep.
Marjorie Furay: You guys knew it, didn't you?
Marjorie Furay: I'm sorry.
Marjorie Furay: Emeka, did you have a question for Ashlan?
Emeka Chuku: Well, I just wanted to ask her if she came across any.
Emeka Chuku: I suspect this might be hidden for whatever reason, but any state sponsored or otherwise, attack on these sort of a self driving vehicles.
Margaret Medina: Ohh it worked.
Ashlan So: I had.
Ashlan So: I haven't came across anything, but I I was reading a couple articles and it got me interested in the topic.
Ashlan So: So I started doing some research and realized it's all connected, but I don't have any personal experience though.
Margaret Medina: How do I do this?
Marjorie Furay: Uh, cool.
Margaret Medina: Because they've never done this before.
Marjorie Furay: Umm, so you go up to the top.
Marjorie Furay: Well, you're I see your screen.
Margaret Medina: OK.
Marjorie Furay: You.
Margaret Medina: Because I can.
Margaret Medina: It's OK, I think it's.
Marjorie Furay: Yeah.
Marjorie Furay: Do you have your errors at the at the bottom one through 8 there and then?
Marjorie Furay: Or just click your screen, I think moves it forward right?
Margaret Medina: OK.
Margaret Medina: Umm, so this is a what is phishing?
Margaret Medina: Phishing is a type of cybersecurity attack that involves with malicious actors sending messages, pretending that they're trusted.
Margaret Medina: They're trusted person.
Margaret Medina: They can manipulate a user and trick them into installing a virus or clicking on a link that they shouldn't, or even giving away their credentials.
Margaret Medina: Do you know how to tell the difference between a phishing email versus a real email?
Margaret Medina: Anyone you can only answer if you like.
Rikki Boodram: Yep, the de spelling.
Margaret Medina: OK, I'm gonna show you here.
Margaret Medina: Can you tell if I don't know if you all can see this or not?
Margaret Medina: It's kind of small.
Margaret Medina: Can you tell if this is a real or fake email?
Margaret Medina: Can you see the email?
Marjorie Furay: I see that.
Rikki Boodram: Yeah.
Marjorie Furay: Oh, OK, I gotta look up at the top.
Marjorie Furay: Yeah, that's fake.
Margaret Medina: Right.
Rikki Boodram: Yeah, that, that's that's fake. Yep.
Margaret Medina: Did you?
Rikki Boodram: Fashion, yeah.
Margaret Medina: Yeah.
Marjorie Furay: If this is Best Buy, why is it fashion lab.com I get that same thing with American Express it's always something different.
Margaret Medina: OK.
Margaret Medina: And then there's one more how about this one?
Rikki Boodram: Yeah, that's that's fake.
Marjorie Furay: So something on this, how would you know with something like this?
Margaret Medina: Vote for this one is because they're asking.
Marjorie Furay: Oh, wow. OK.
Margaret Medina: They're telling you that you won a a certain amount of money and then what you to click on this link up here where it says click the view.
Marjorie Furay: Yeah, that's fake, right? Yeah.
Pete Garcia: So.
Margaret Medina: So it's kind of giving away like how did I win money for?
Margaret Medina: I didn't remember entering into anything.
Marjorie Furay: Right, exactly.
Pete Garcia: But definitely like the lack of punctuation.
Margaret Medina: Yes.
Marjorie Furay: Yeah, really.
Marjorie Furay: Look at.
Rikki Boodram: Yeah.
Margaret Medina: Yeah, sometimes people don't really.
Marjorie Furay: Ohh yeah, and spaces between things and typically it's written and wrong English, even if they're Australian, it's wrong English.
Margaret Medina: I mean, sometimes you don't really take a minute to look at it.
Margaret Medina: They just say, oh, I want money.
Margaret Medina: OK, cool.
Margaret Medina: I wanna do that.
Margaret Medina: They don't really take a second to figure it out.
Margaret Medina: Wait, wait.
Margaret Medina: What did I sign up for that?
Margaret Medina: I want money for because I don't remember.
Margaret Medina: They just think they want money and then they automatically click on it and then it brings them to a site where the hackers get all their information.
Margaret Medina: So how it all started was?
Margaret Medina: There is the first attack started back in the mid 1990s.
Margaret Medina: It was by a hacker spammer named Khan C Smith.
Margaret Medina: He was credited to have the coin term phishing and apparently AOL was one of the AOL users, were the first ones to get phishing attacks in 1990.
Margaret Medina: A group of hackers, they posed as a AOL employees and they used instant messaging to email the the users to steal their passwords and hijack their accounts.
Margaret Medina: Because, you know, back then we really didn't know that much about phishing attacks.
Margaret Medina: So people just fell for it.
Margaret Medina: And I'm guessing AOL was the easiest because you always have that little dial tone.
Margaret Medina: And remember how to get into AOL?
Margaret Medina: I don't really think they really protected themselves that much.
Margaret Medina: AOL didn't really have too much protection there, so they got a.
Margaret Medina: They got hacked a lot and this is a phishing attacks.
Margaret Medina: They hit an alarming level with over 1,000,000 in a single quarter, which was recorded back for the first time in 2022.
Margaret Medina: So these are some of the different types of phishing attacks that are out there.
Margaret Medina: Umm, there's CEO fraud business email compromise. That's where.
Margaret Medina: Like the somebody at the criminal sends an email to a lower level employee thinking someone like, that's an accounting or finance and pretending that they're work for the CEO.
Margaret Medina: They're the assistant to the CEO or another executive, and they trick them into giving you some information.
Margaret Medina: Umm, the next one would be a clone fishing.
Margaret Medina: That one is like the they take advantage of legitimate email messages and they act like the the victim may have already received it and they created malicious version of it and then the victim clicks on them and then they catch them that way.
Margaret Medina: And another one is domain spoofing.
Margaret Medina: Umm, they use either email or fraudulent websites.
Margaret Medina: It occurs when a criminal spouse, an organization's company domain.
Margaret Medina: Umm.
Margaret Medina: Another one would be evil twin.
Margaret Medina: That's a rogue wireless access point that masquerades as legitimate Wi-Fi access point, so the attacker can gather personal or corporate information without the end users knowledge.
Margaret Medina: Then another one is the HTTPS one.
Margaret Medina: That's the attacker uses a variety of social engineering tactics to trick the email recipient into clicking on the link or copying and pasting the URL into their website browser, and then another one uh smishing that's a way of cyber criminals to lower users into downloading malicious payloads by sending text messages that appear to be from legitimate sources and contain malicious URL's for them to click on.
Margaret Medina: And then there's spearfishing.
Margaret Medina: Don't you spam like tactics to blast thousands of people in massive email campaigns?
Margaret Medina: Spearfishing emails target specific individuals within an organization.
Margaret Medina: Then there's fishing.
Margaret Medina: And that's occurs when a criminal calls your phone to try to get you to provide personal or financial information.
Margaret Medina: A water hole fishing.
Margaret Medina: It's a targeted by business is identifying specific websites that your company or employees visit most often in infecting one of them sites with malware and the last one I found was wailing.
Margaret Medina: It's similar to the CEO fraud, but it's more they target the higher level individuals like the CEO and the CFO and the CEO.
Margaret Medina: And then how to protect yourself against it?
Margaret Medina: Never provide your personal information in a response to an unsolicited request.
Margaret Medina: Never provide password over the phone or in email.
Margaret Medina: If you think the company isn't legitimate, try calling them yourselves and to find out if you can see if they actually sent you an email or what the email was it why they sent the email to you.
Margaret Medina: Umm you wanna regularly review your statements on all your cards, your information to make sure that no one's got any information about your credit cards or your bank statements or any kind of statements like that.
Margaret Medina: And don't open any attachments or links in unsolicited emails.
Margaret Medina: Hmm, that's the last one.
Margaret Medina: And there's my references.
Marjorie Furay: Great job.
Marjorie Furay: Lots of information on that.
Margaret Medina: Thank you.
Marjorie Furay: Sweet.
Marjorie Furay: Any questions for Margaret from anybody?
Marjorie Furay: OK.
Marjorie Furay: Well, congratulations, everybody on getting your presentations done.
Marjorie Furay: They were awesome as usual.
Marjorie Furay: Lots of things to learn.
Marjorie Furay: I love it off.
Marjorie Furay: Have a great evening and thank you so much for your presentations.
Marjorie Furay: Thanks for everybody for joining and we will catch you again on next week.
Marjorie Furay: Thank you.
Margaret Medina: Have a great night.
Rikki Boodram: Alright, have a good night.