There we go, recording started.
Then we'll give it a couple more minutes to see if anybody else
shows up.
You know, maybe more people show up.
Kayla hope.
But this is the order that I have here.
So if you look here, it would be Sonia first, then Sadie and then
Jose.
And then you will be OK.
Jameson and Michael of relation.
But we'll give it a couple more minutes to see if anybody else
shows up.
Uh Jameson's here, OK.
Yep, I am here.
All right.
So then we just need Cade and Michael.
But we can start if you want.
Sondra, you can start now.
We'll get it started and then see if anybody, if the Caden
Michael show up.
OK, now let me go ahead and see if I can get it to share.
You might hear my.
Varment that's beside me.
You might hopefully not.
Let's go over here.
Are you able to see my screen?
Yes, I can see your screen.
OK. Come on.
I'm beginning.
Come on.
There we go. Yay.
Alright.
So I ended up doing mine on the pros and cons of having a smart
or connected home, not a phone, but a home alright.
So what is a smartphone?
Umm, I might end up accidentally saying phone instead of home, so
I'm so used to saying phones.
So what is a smart or a connected home?
A smart home refers to a convenient home setup where
appliances and devices can be automatically controlled
remotely from anywhere with an Internet connection.
By using a mobile or other networked device, devices in a
smart home are interconnected through the Internet, allowing
the user to control function such as security access to the
home temperature, also known as you know your thermostat,
lighting and even a home theater.
And you can do that remotely.
So the history of smart homes?
Very interesting.
Umm Smart Home started as ideas, not physical structures.
We have seen in the realm of science fiction home automation.
Famous writers have also imagined a future where homes
are completely interactive and at the same time run themselves.
We've also seen shows specially from the 1960s, such as The
Jetsons, with a fully automated home along with robots in all
that other good stuff.
Doubt.
Timeline this is now.
This is interesting.
From 1901 to 1920, we had the creation of home appliances, the
first true achievement began with the first engine powered
vacuum cleaner in 1901.
Six years later, a much more practical version was invented.
Within a few decades, refrigerators, along with
toasters, irons, washing machines and dryers were created
so Fast forward to between 1966 and 1967.
Even though it was never commercially sold, the E4 was
the first smart device this device could turn appliances on
and off, control the thermostat and compute shopping lists.
The kitchen computer was developed the next year.
The reason why this never ended up working was that the
advertisement did not help with selling the product.
So advertising is the key.
If you wanna make sure you can get things, they get things
passed.
OK.
Next one, 1991.
That is the creation of Jaron technology.
This is where gerontology meets technology.
This new technology was created to help seniors, if one
remembers the commercial.
You know, I've fallen and I can't get up, which is from life
alert.
That is a good example of that, all right?
And then in night between 1998 and the early 2000s is when
smart homes really started to be developed.
Some of the first things were things such as Amazon's Alexa,
and then we have the Apple smartphones that you Siri and
the Android devices that have Google Assistant.
There are also things like smart TV's and of course IT's.
So what are the pros and cons?
What are the pros of having a smart home?
There's convenience, easy access, security.
Think of doorbell cameras such as ring.
Of course, everything is connected and then the IO T
Internet of Things, which those are all easy to set up.
You can even have these in apartments.
So I mentioned both smart and connected earlier.
So what's the difference between a smart and a connected home?
Well, as of right now, there is no difference.
So smart and or connected homes can help with security as
mentioned earlier with cameras one can see what is happening
within the residence and report the to the police.
If there is a burglary.
At the same time, security does need to be taken into
consideration.
Is back in 2021, a group in the UK wanted to see what would
happen if they set up a smart home.
And how's the spec susceptible?
It was to being hacked.
They used real devices that connected to the Internet.
These range from TV's to thermostats to a security
system.
Most of the devices were able to fend off the attacks, but a
camera that was purchased from Amazon that security was not as
strong as it could be and now actually was hacked.
The hacker was able to take control of the camera inside the
residence and spy on what was happening.
It was May of 2021 when the house went live.
This test began slowly, with about 1000 hacking attempts in
the first week.
By June it it increased to at least 12,000 unique scan
attacks.
Attempts against all devices.
This equates to around 14 attempts by hackers to brute
force their way into the devices every hour.
Yes, every hour.
So how can you protect a smart and or connected home?
Well, think about what is needed just because it's new and shiny.
Does it mean it's needed? Then?
Of course, secure your Wi-Fi.
Change those default passwords and then update firmware.
Always make sure that the latest patches installed remember Patch
Tuesday.
Replace all dated routers and modems.
Sometimes it's the router and or modem and not the antivirus
program that is the problem.
And then manage passwords if needed.
Get a password?
Well, to save all those complex passwords.
And of course, you know, enable multifactor authentication
having a strong password is one thing, but MFA can add another
layer of security, split up the network, don't have everything
on one network for all, can be sabotaged with one hack if
needed.
Also have a guest network setup for friends and relatives.
If one remembers this is actually a good example of this
with the network, the updated Battlestar Galactica television
show from the early 2000s, they set up the military on one
network saying it was the best thing ever.
That was created and of course the silence had a back door and
they were able to shut the that entire military down and the
rest of the show was the fallout of that event.
So and then of course monitor the network after setting up the
networks.
You also need to monitor it on a regular basis to make sure that
it is not hacked.
So the takeaway, having a smart and or connected home is good.
Just keep in mind that it can and will be hacked at some
point.
Make sure that all antivirus and anti malware programs are
updated on a regular basis and default passwords are changed to
one that is complex.
So enjoy your smart and connected home.
Just make sure it is.
You have everything protected.
And that's it.
Thank you so much.
That was really good.
Does anybody have any questions for Sonia?
Sondra, I'm sorry.
That's OK.
This was a great job.
It was very informative.
I like that.
There was more information that I found, but I just didn't have
time to put it in.
So yeah, and you have you also have to make you also have to
Yeah.
Sometimes the underground.
make sure that because some technology companies are taking
control more and more and more if they don't like what you say,
they could control things and shut things down.
That's kind of scary.
So you have to be. It's.
Yeah, it's scary.
So you have to be extremely cautious and and you know.
And you know, like I said, you have to be extremely cautious
and wary.
Man.
And I know people they say, OK, you know, when I get my stuff, I
get the dumbest thing out there.
I mean, most people go from like the cheapest one, so that way
So.
they don't think nothing will happen, but you never know what
can happen to any device you have.
Right.
No.
All right.
Very good job.
Thank you so much, Sondra.
Thank you.
OK, so the next person up is Sadie.
I Sadie, come on up.
Can you guys hear me?
Yep, I can hear you now.
OK, that's good.
Sorry about it.
You're fine.
Work.
You know what?
You need all my Lord.
Is that happening because I have?
I already have it open or do I need to close it for it? OK.
No, we see your screen.
Why is it so small?
I want you to be bigger.
That's so small.
Should be able to do like a full screen.
It looks normal for us.
Sorry because I know you guys can't see that.
That's very small, right?
No, it's not small on our side.
We see a fine.
I can read that just fine.
I was actually sent over to make sure there were no interns that
have wandered the way over here on accident.
OK.
I don't think so.
OK, let me reintroduce myself.
I hardly speak the most persons don't really know my voice.
My name is Sadie Williams and I'll be presenting an optical
character recognition, also referred to as OCR.
I'll be discussing what an OC what OCR is.
I show you guys can't even see that.
This is I wanted a nice big screen for you.
I'm so sorry about that, but I'll go ahead.
I'll click on the first one.
South, the first thing I'll be discussing in what what is OCR
and how does it work?
See if I can see from here.
I myself good dear, is there anyway else I can make this
bigger?
Can you guys see anything now?
Yeah, we see it perfectly fine.
OK.
Everything is good on our side.
We see a big it's not small.
OK, probably what I'll do.
You are hearing me right.
Yep, we hear you.
Perfectly. Right.
Yep.
OK.
What I'll do, I'm just looking for my end.
OK, for on a table of contents, but discussing 3 things and I
have two videos that that I think you'll find quite
interesting.
1st I'll be talking about what is OCR and how does it work.
2nd techniques involved in OCR.
Third, while businesses use it and tools and example of the OCR
tools and tool videos at the end.
What is OCR and how does it work?
Optical character recognition or OCR, is a technology consisting
of hardware and software used for processing and detecting
handwritten text in digital images or paper files.
This technique is done by scanning a document and then
converting information into machine readable format.
Alright.
What are the techniques involved in OCR?
The techniques involved in OCR are image preprocessing, AI
character recognition and post processing.
Image preprocessing is the first stage in which a document is
converted into a picture, transformed into black and
white, to evaluate black versus dark characters, and then
segmented into individual pieces using the OCR system.
In the next stage, artificial intelligence AI character
recognition, the AI targets one letter phrase or paragraph at a
time.
By analyzing the dark portions, they're recognized characters
and numerals using pattern recognition and feature
recognition approaches in the pattern recognition approach,
the AI system has information that is already stored, such as
language, text formats and handwriting.
It then compares this information to the tech letters
on pictures define matches.
So this is the information that is stored in the info in the
database in the feature recognition approach, the
algorithm is used to recognize characters like the amount
angled crossing or curved line in a letter.
Just think of the letter T in the post processing stage.
The AI used to correct flaws or errors in the final fly file.
Sorry.
So why businesses will use it?
The most popular reasons businesses use alstr technology
are to search text and for operational efficiency to help
with document and digital workflows.
The following are examples of operational efficiency, one
scanning, verifying, reviewing, editing, and analyzing handfield
forms.
So if you go to our company and you're asking to fill out
information, you're filling out a form.
They actually use a technology to scan all that, and they'll be
verifying of you and doing all of that, that one.
So they don't reduces manual label and make it more efficient
and it's faster.
Second, using term to search for documents in the database rather
than sifting through files.
What I mean by that, when you go on a database, you're going you
want a file, so you put a particular word in and you will
get a file.
It's rather than going through manually going through the files
the file.
What you want and 3rd converting handwritten notes to editable
text and documents.
This one.
Some examples of the OCR tools.
One, there's a PDF scanner.
This is used for adding a signature to papers by importing
photos and PDF.
I'm sure we have the PDF document there.
You'll see something asking it to have fixed your signature PDF
scanner to do that, and two, you have online OCR.
This is used for converting pictures to text and supports 46
languages including Italian, Portuguese, Spanish, Japanese
and Chinese 3.
There's an office lens.
This is the this is developed by Microsoft.
It is used for converting written notes on whiteboards to
digital format.
And these are the example.
Here are the examples of the let me go over.
I might so slow at this.
Yeah, sorry.
That's an example of the three tools.
No, you remember I said that the OCR consist of both hardware and
software.
So the hardware in this case is the PDF scanner and on the
screen probably it's still a little small, which I apologize
once more that brand is Epson and one of the description it
says simplified file management created searchable PDFs with
included optical character recognition, convert scanned
documents to editable word and Excel files and another one is
online OCR Google lens.
I don't know about anyone else when on my phone because I have
an Android, you know they always populate all these things on
Italian.
Seeing what is Google length and I had no clue what it is and now
I do so Google ends become a mobile scanning and OCR app when
you use it with other apps like Google Photos and then third out
all the tool is the office lens.
This one is by Microsoft Microsoft Lens formally formally
Microsoft Office lens.
It trims, enhances and makes pictures of whiteboards and
documents readable, not in order for things to make more sense.
You have presented a little video clip on it.
This tiny thing.
It's not character recognition.
OCR isn't technology that recognized his characters, such
as letters, numbers, and symbols within the digital images like
documents, seen photos, and any other images with.
Steps involved.
Processing.
See also process is used to improve the chances of
successful recognition?
That's right.
Correct.
Is it not?
Processing.
That would correct sentence and states using dictionary.
Sorry and then I have another video.
Because I'm not going to take it for granted that everyone
remembers exactly how algorithm worked.
So this video is 2 minutes and 29 seconds long.
Please enjoy.
You may have heard the term algorithm whether it was online
or maybe in some conversations about technology.
It's a work that gets thrown around the line, but what
exactly does it mean?
Well, Simply put, an algorithm is a set of steps used to
complete the specific tasks.
They're the building blocks for programming.
Bail out things like the computers, smartphones and
websites to function and make decisions.
But in addition to being used by technology, a lot of things we
do on a daily basis are also simpler to algorithms.
Let's say you want to make some spaghetti.
In order to do this successfully, there's a certain
set of steps you need to follow in a particular order.
First, we need to boil a pot of water.
Once it's boiling, you then add the spaghetti and cook it for a
set amount of time, stirring occasionally.
What's finished?
You drain the water and then it's ready to be served with a
sauce of your terms.
That entire process is actually an algorithm, because you
followed those steps in that order, you reached your desired
outcome, that delicious position.
But if we were to make a mistake, say over or
undercooking your noodles, it probably wouldn't be as.
Programs work in a similar way.
Their code is made up about telling them what to do.
Let's say that we want to the navigation app to get directions
when we punch in the destination.
The app uses an algorithm to look at the various available
routes.
Next, it uses the different algorithm to check the current
traffic and then a third one takes that information and
calculates the best available round.
All of these algorithms are built right into the apps code.
If there were any kind of error in that code, app would be able
to follow these algorithms correctly, meaning you wouldn't
receive your directions.
Both of these examples show how both humans and computers use
algorithms to perform everyday tasks.
The difference is that computers can use algorithms and calculate
things better and faster and more efficiently than we can.
Technology is only going to continue to evolve and get even
better.
And what it does as long as coding and programming will
continue to be used, algorithms will be at the heart of these
technologies, guiding what they do and how they do.
And that is it for my presentation.
Thank you for listening.
I hope you enjoyed it.
Yes, it was very good.
Thank you, Sadie.
Does anybody have any questions for Sadie?
Oh, I forgot one thing.
Hope I don't know if you if the for the the OCR video was a show
in your hole when you have your ID.
I only have passport and you're traveling.
That is the technology that they're using, so they are
scanning it just to find a matching the database to ensure
that you are you.
Thank you.
Did a great job.
It was really good to see you didn't have enough things to
Thanks.
worry about.
You did good.
Thank you very much.
We came if nobody has any questions, we'll move on to Jose
Moreno.
Ohh it just setting it up right now.
No problem.
OK.
Ohm, you guys could hear me.
See glides and everything.
Yep, everything sounds good and we can see it and hear it.
Yes.
Alright, good evening.
Good evening, everyone.
Thank you for being intending today.
I'm Jose Moreno, a networking intern with PGIP to see.
To start, I wanted to see change it up a little bit on this
master class.
Wanted to see if I could get a volunteer chance or a question
or two.
It could be anybody.
Just open your mic.
I volunteer.
Alright, so Sadie.
This is Sadie.
So Sadie, I wanted to see the first question is, what is your
favorite hobby?
And then the second one would be what month you were born in?
Sure, my favorite hobby is art.
I like to draw and I was born in the month of July.
OK.
I appreciate your answers.
Thank you so much for the information you provided me
with.
I'll try to improve this presentation based off the
information you provided me with and now you can intend the rest
of the slide show.
Now if you look at the bottom right of your slide, you'll be
able to see the fine print stating the data collected and
this presentation is voluntary and will be used to improve our
revenue.
But your name will not be used.
So this leads me into my presentation where we will cover
data collection for my master class presentation.
Thank you, Sadie again.
You're welcome.
Alright.
On today's agenda for this presentation, I will start off
with briefly covering what is data collection and how we could
define it.
Next, we'll cover what are the benefits or the pros to data
collection followed by what are some disadvantages or cons to
data collection.
I also wanted to share a video with you all that gives great
examples of the dangers of big data.
Followed by the conclusion where we'll discuss everything that we
covered.
And lastly, my reference is that I used during my research.
So what is data collection?
Is the collection of data all bad as it seems not all data
collection is bad.
Data collection consists of collecting, measuring and
analyzing data through various methods, which could be surveys,
cookies, social media tracking or website visits.
This collection of data can help businesses or companies build a
foundation on learning their users or customers, which can
lead to help businesses and make crucial decisions on releases.
The merchandise or improved services that the company may
provide to the consumer company is data governance program
should include policies that comply with the GDPR, which
stands for general data protection regulations.
But we will also learn how this can be abused by influence to
get the outcome of the organizations well, what the
organization want, whether it's political to sell merchandise or
to get kids to buy more Roblox.
So the pros data collection is a powerful tool that can lead to
change in any business to get the desired outcome or
prediction.
For example, fashion boards or even predicting the top trending
Christmas gifts?
Or your children by using previous years of market
research to see the trend for this year.
Umm, another amazing example of how data was used for the better
of people was during COVID-19 when two top come tech
competitors Apple and Google work together to develop methods
of tracking.
Sorry, Tracy.
And and all breaks of coronavirus before the tech
companies work together.
GPS was a was used by third party applications to track
outbreaks of COVID-19.
This was not only depleting users devices battery but also
due to accuracy and privacy concerns.
Apple and Google decided to ban the third party applications and
work together to provide the users with improved exposure
alert system.
Now that we heard the good time to hear the why data collection
is sometimes bad.
Although companies are trying to get better at data collection by
implementing.
Regulations are not three years.
There are major issues that have faced major backlash for
improper or misuse of customer data.
Also insecure methods of data that was collected from users
and privacy concerns.
A real life example of misuse or misrepresentation of data
collection that I came across in my research would have to be
Facebook a few years ago when they required users of the
social media application to provide their email passwords to
log into their Facebook account.
Which your Facebook then stored on their company servers and
plaintext.
This allowed more than 20,000 employees to be able to access
the passwords for more than 200,000,000 users.
Email passwords.
The only way around giving Facebook your email password was
by clicking a small button that says.
Need help but users were unaware of the function of the button,
so I hope this helps you understand the disadvantage of
data collection and how it could be abused.
How now present the video covering the dangers of data
that I found helpful during my research.
One second.
Hello.
I'm Victor, Mayor Shenberger professor of Internet governance
at the University of Oxford and Co, author of the new Book
Reinventing Capitalism in the Age of Big Data, the huge market
platforms, the Netflix isn't the Amazons of this world.
They know a lot about us and we as humans think that we are so
original and so creative and so unpredictably and irrational,
when in fact we are much more predictable than we think.
And so those companies could conceivably use the data that
they have and try to influence us not just in our buying
decisions, but in our political decisions.
We've seen some of that sinister tone in the discussion about
fake news on Facebook and the targeting of fake news to
particular users of Facebook over the last six to nine
months.
So the obvious danger for consumers is that that they
become transparent, that their privacy and their data is being
abused, or at least exploited by those large platforms.
But I see an even larger, more sinister danger, and the
sinister danger has to do with the fact that those digital
recommendation engines, those smart the systems that are data
driven and are proliferating on those data rich market
platforms, these assistants are fed with data from all of us.
If these assistants have a flaw in how they interpret data, then
everyone of the recommendations that they make will be flawed.
Will be biased and so we all make the wrong decisions.
The beauty of the market has always been that it's been
resilient.
If somebody makes a stupid choice, then the market doesn't
go down to two.
But that only works if we are independent of each other.
If, however, we all listen to the same stupid smart
recommendation engine, we all may make the same mistake.
It's like finding out that your car has a break that doesn't
work and everybody else's car has the same brake, and this is
the kind of single point of failure that we may encounter if
we continue along the paths of these monopolistic structures.
Structures.
If we believe that the market is a really good social innovation
to bring people together and to help them coordinate, then we
need to keep them competitive at every company that operates in
the market and that it's getting larger and larger, we'll be able
to offer their product to lower prices.
That's called the scale effect.
If you scale up, you can produce more cheaply.
The counterforce to the scale effect of market concentration
is always been innovation.
That is that a new company can come in with a great idea and
then topple the incumbent because they just have the
better idea to use.
The problem now is that most innovation in the future is
going to be data driven.
It's going to be derived from feedback data from consumers and
users, so the companies that have a lot of data will also be
highly innovative.
That will lead to an unprecedented age of market
concentration, and if we don't stop it now, we will find
monopolies that combine political and market power like
we've never seen before.
All right, just to make sure y'all can hear me.
Yep, I can hear you.
OK, So what do we learn?
We are not as predictable as we thought.
Big data collection builds pretty much a profile to
identify our tendencies to get to know you and me.
It's not only predicts what we want to buy, but it also it
could influence us to make major decisions that impact our daily
lives and example being politics.
One example the presenter used that I liked was a car with no
brakes.
If we are all influenced by a smart machine that says this is
about, this is the best decision to make and we all make that
same decision.
But the machine has a ball.
The machine had a flaw in the data that was collected.
Then we all made the same mistake.
Like I said before, this could be a market decision, political
or even lifestyle with decision.
Sorry and then this brings me to my conclusion.
In this presentation, I wanted to introduce you or even further
expand your knowledge on what data collection is by going over
the meaning of data collection and covering some real life
examples of data being used or abused.
I also wanted to cover what are some advantages that companies
are doing with the data they do collect and how they use the
information.
The information to actively improve their services and
products they supply to their consumers.
Another point that we covered in this presentation is learning
how with every advantage there's a disadvantage and in this case
we saw.
Even though companies are trying to improve their services
through data collection, there may be faults in the system that
may lead to over collection of data such as password storing or
even abuse.
By selling data to third parties.
Lastly, recovered how the use of data can be repurposed.
So it can influence users to make decisions that affect their
everyday lives.
So now that you know a little more about data collection, do
you think it's as bad as it seems?
Umm.
And then this is my reference slide.
Ohh one second that I used during my research.
If you have any questions, please feel free to reach out to
me.
I also love feedback and since this is on data collection, I
would love to hear your feedback.
So I can improve my services.
Thank you.
You're welcome.
I enjoyed her presentation.
Thank you, Jose.
That was a good presentation.
Yeah, sorry about the nerves in the beginning.
I know about that.
I also had a little bit of heartburn.
You know what's in there?
It happens sometimes.
That was a good topic though, because data is everywhere and
Yeah.
as long as we know how to get it protected and keep it safe,
that's all that matters.
Thank you.
Umm.
If you are a new intern, I believe I see Yao in here.
You have to be in your orientation first before you
come to masterclass.
So if you are a new intern, we need you to go to orientation,
not be in master class.
Thank you.
Does anybody have any questions for Jose?
Once again, Jose was a very good presentation.
Thank you so much.
And the next person up would be Cade Schmidt.
Cade, if you're ready.
Hello are you guys able to hear me?
Yep, we can hear you.
Alrighty, are you guys able to see my screen?
Yes, Sir, we see it.
Cool.
OK, so my presentation topic is the digital dangers that await
us in the modern world will be unpacking some modern cyber
threats.
The purpose of this presentation will be covered existing
security threats and examples of how they're being used every
day.
Well, try and inform us the threat of the cyber attacks,
especially when they're targeted as a weapon against a nation,
how we can prevent some of these threats on a personal or
employee level.
No.
And then we're gonna try and paint a picture of what?
Cyber warfare could look like and how it does the different
attack vectors as well as the implications of some of those
attacks.
So without further ado, let's get into the fun.
We're going to cover some of the relevant recent cyber attacks
that we've seen unfold in the last couple years.
The goal of these attacks are not all the same, but it
basically cover.
They fall under the same criminal element.
I suppose some of these categories are data focused
attacks.
Good example of this was the Equifax data leaks of 2017,
where Chinese hackers exploited a vulnerability and leaked the
personal information of 147 million Americans.
Nearly half our population and the data range for names,
addresses to birthdays and Social Security numbers, is a
pretty bad one.
Just about half of all adults.
Were a victim of this one.
Now the majority of attacks are financially focused, such as I'm
sure we've all heard a million times ransomware attacks and the
last three years we've seen a wild variation from them.
The most recent one being The MGM Resort TAC, which shut down
all of the MGM's business fronts, ranging from casinos to
their hotels and whatnot.
And it's estimated to cost him $100 million, plus a damage that
alone.
That's just tremendous for a company.
It's probably the worst ransomware attack we've seen so
far, but the targets range to another example where the
Russian hacker group attacked the colonial pipeline in the US,
which shut down.
I'd allegedly over like $100 million.
I apologize about that.
Let me get this dog and we're control.
So, sorry about that at all.
But yeah, that the Russian hacker group they targeted that
That's OK.
pipeline, I'm sure we all remember that, especially if
you're in the northeast of the US allegedly.
I'm from the South.
I'm in Oklahoma, so I didn't really see the full
consequences, but from what I heard there was there's fuel
shortages.
I think prices may have, you know, spiked.
I mean, if I own the gas station, I have took advantage
of it.
That's a story for another day.
Now cyber attacks like we were mentioning earlier range widely
in a major, major, major category that not a lot of
people discuss is intellectual property attacks.
Dolly here's the real fun.
So in one scenario, Chinese state actors stole the
blueprints for the F35 and F22 fighter jet from, like Lockheed
Martin, and they also stole the B1B heavy bomber blueprints from
Boeing in the circumstance of the F35, it was estimated that
the hackers got terabytes of data.
Terabytes.
They had to be practically the whole all of the research
information I had to be a ton of it.
We all know how small data is on a computer.
How much you can get out of a MB, but anyway, since the plans
were stolen, the Chinese government had created a.
They had modified and adapted their jets with some of the
proprietary information they took here in the picture on the
right we got a picture that 22.
But anyway, the Honeywell company that was also complicit
in some of these, some of the files being leaked, not all of
them.
I think it was something like 70.
The leaked about like 70 different files pertaining to
the projects and they were only fined $13 million.
Just nothing.
That's pretty preposterous if you ask me, but in another
circumstance that wasn't defense related, a Chinese company named
synovial of the Brown $800 million to AMS C, which
manufacturers wind turbines for renewable energy they had stolen
the source code and had no longer needed that company in
their supply chain operations.
So they cut them out, but that proprietary information that had
stole allegedly cost the company a billion dollars of damage and
the loss of 700 people's jobs.
It's substantial.
700 people had to go out and find new work.
Probably couldn't eat for a couple nights, but here's a
quote from the assistant Attorney general that was
partnered with the case.
Synovial nearly destroyed an American company by stealing its
intellectual property.
Dolly, that's just horrible.
But also here we have a picture of the the Chinese counterpart
jet of uh.
Some of the plans they had stolen from the Raptor and I'll
look exactly the same, but they're the majority of what
they were looking for, I guess was a information about the
engine or the jet, some of the stealth radar detection
capabilities of it.
But we'll continue on from some of the crazy ones and get to the
physical based attacks.
Now, I'm sure everybody's heard of the Stuxnet attack, which is
a US and Israeli joint cyber offensive focused on the Iranian
nuclear material enrichment program.
They had set up.
They had made the virus and what it what at the time was the
largest malware ever developed and used successfully.
We might add they had gotten it on the centrifuges of the in
their program, and I had caused them to span way faster than
they're supposed to to damage the hardware.
And they had programmed it so they wouldn't be able to tell
through any alerts or just monitoring it at all.
So months went by.
Many, many centrifuges were broken before anybody caught
wind and figured out what was happening.
Is a pretty major deal, and when it comes to cyber warfare, it
really makes you think if that you could get away with that for
months without a single person noticing.
Like that's going on.
Imagine how far you could get just infiltrating and not having
any.
Any carrying out the attack it you know, you could probably
really get in there, get to the top of the leadership.
Well, now another physical attacks scenario.
In 2015, the Ukrainian power grid was attacked.
Situation resulted in the power of 230,000 citizens being
disrupted and after the successfully down the power they
had bombed the customer support hotlines with fake phone calls
to further hinder the reporting capabilities to figure out how
widespread it was.
I'm sure as we all know, that current conflict is escalated
way beyond out of control and the power grid is targeted again
in 2016 and 2022.
I'm sure they're probably working on it again right now.
But we'll go back to another case that's closer to home for
most of us, the colonial pipeline attack.
So you mentioned earlier it was a Russian hacking group.
We can't certify that they were state affiliated, even though
they probably were.
I'd imagine that would be something for to get against
your counterpart.
The impact of the situation resulted in short term fuel
shortage to the whole northeast of the US.
You know, I said again.
I'll say it again.
I didn't live up there, but from what I heard it was pretty bad
lines at the gas stations again and whatnot.
But we'll go ahead and continue to watch.
Cyber warfare does look like which we covered a little bit of
and we'll talk about the physical aspects.
What could happen?
So we all know today's world is interwoven with technology.
The vast majority connected to the Internet.
Some form or fashion.
Most of the commodities that support our life would be under
threat, including these high value targets.
In her in telecommunication infrastructure, power grids,
water, sanitation stations, manufacturing facilities, farm
equipment, transportation systems, healthcare weapon
systems, just about everything that keeps us fed keeps us
entertained.
Make stuff for us keeps us alive.
If we get hurt, the weapons that protect us, literally everything
you know is being worked on by every state's working against
each other to try and infiltrate these aspects, and some of them
we can definitely say for a fact they've there's major moves
going on.
And then we have the psychological aspects, which
we've all come to know over the last couple of years.
Misinformation.
You know this takes place through a a lot of different
forms or fashions just from.
Simple stories that you see and read and you know just topics
you don't really care to read into, like, uh, they're raising
rent in California or whatever, raising rent out in Oklahoma.
So create sort of like a fear monger for people on some
psychological operations.
Orchid aim, you know, to be political, to divide people.
You know, we seems like that's the majority of news.
That's even discussed today.
We all got to remember United.
We stand divided we fall.
Some of the crazy stuff you see news stories about, you don't
ever hear somebody physically in person talking about it, but as
a AI is recently evolutionized to the crazy state that it is
now compared to, you know, 3-4 years ago or you'd have never
guessed, it would have been this advance, this intelligent.
It's only gonna get worse.
You know somebody out there is using it all day long.
To with the efficiency of 1012 people to push out fake stories
and fake information against their enemies or whoever, they
won't affect.
Or it could just be it for financial gain, which we'll
cover here in a minute.
I got it very good video to cover that.
We also got to talk about the deep fakes.
What you'll also get to you.
That's my favorite topic this whole conversation, but we'll
continue.
Social media used as a weapon, you know, obviously a lot of the
fake misinformation.
Uh, most of it obviously spread through social media.
I know we all see posts about fake things or claims that
couldn't be backed up about products.
You know, this will make you smarter, so make you stronger.
You won't crash off coffee caffeine if you take one of
these.
But I believe the the best example social media as a weapon
is around election time in the US for the last two cycles about
to be in the third, we already see the machine ramping up, but
think back to 2016, 2020, all the fake news stories and
interference of this and that and whatnot.
Other countries pushing in propaganda making up stuff,
trying to divide everybody or just spread fake lies?
Or maybe even get some people elected over the others.
Now we'll go ahead and cover the modern threats targeting average
user we all know about.
Fishing.
We should all know what it is by now.
I'm sure all of us have received hundreds of emails trying to
fish us to stop the Amazon payment or PayPal payment or
whatnot.
These targets usually are looking for some kind of
financial gain, so the impact on average user would be financial
loss, loss to an account on a website or even identity theft
for some of the most obvious ones.
Now this threat ransomware, we've all know this is and the
implications, data loss, financial loss, extortion and we
got malware where your computer would be intruded with the virus
and it could range.
If you're somebody important, they probably want to extort you
or use your position and the connections you have to gain
something.
Are they might just be trying to set up your computer to do
crypto mining without you knowing it.
Mine Bitcoin Forum or you could be on a botnet.
They could use it to attack DDoS people.
Then we got the classic scams.
You know, I'm about to be.
I need $1000 to get my $1,000,000 or whatever which is
almost always some kind of financial loss and we got the
classic credential stuffing where people use your leak login
information and they try and log into as many websites as
possible.
See if you have the same password.
From whatever was leaked.
You know the impact on these really does vary.
I mean, most of the time, people are just trying to get your
streaming account, or they might even.
I've heard people hack these accounts and then use your
points for food, your rewards points and go and get some free
food for your all your points.
I mean, it really ranges, but sometimes people can be doing it
to get like administrator access for uh web app or a business or
just even to get on your.
Maybe they use that to get on your tax profile and then they
figure out all your stuff and steal your identity.
I mean, most of those previous ones also could pertain to
business, but on a business level, we know the implications
are so much greater.
So we got malware and ransomware again for businesses.
People love to steal proprietary business information.
People love it.
I mean, it's a lot of money just waiting to be used.
So you can understand why it's so targeted.
And then you got people that wanna do nothing but disrupt
their competitors.
Or put them under some kind of way, stop them from working for
a couple weeks so they can get ahead.
And then we got the classic business email compromise attack
vector.
Where are they getting your email?
And then they watch the emails you send and they wait till day
where they can put their payment information where you're gonna
get paid for a job and try and get paid up.
Or they could use that to get in insider level view of your
business to figure out what you're gonna do next.
Or they can just steal your intellectual property if it's
being transmitted through there somehow.
And we got the classic data breaches, where they're gonna
steal personal information like people's phone numbers, their
names.
Who's a user here?
Whatever information you might have that's relevant to them,
usually they get it all.
Or they can steal once again your business intelligence, very
high value commodity.
Then we got supply chain disruptions where they're
specifically targeting a business or organization that
does something important.
So we'll think back to Stuxnet.
It's a nuclear program or the colonial pipeline brings a lot
of oil and gas to people.
Ukrainian power grid, you know, we're about to invade.
We send them all offline.
Maybe we can get them focused or distracted.
From what's going on, the impact varies significantly.
For whatever the purpose is, then we got the classic insider
threat, which in insider is motivated by malice, or I feel
like they haven't gotten enough or whatnot.
And then they work against the company from the inside out.
They can either, you know, put a virus on a system or tell people
how to get in or how it's organized or whatever might be
relevant.
And one of our final concepts we'll cover is the recent
evolution of AI.
Now we all know AI can be used to generate all sorts of content
you know, fill out a database.
For me real quick or make a misinformation video about how
they're gonna come for everybody's guns or whatever it
might be, but you can imagine we know how efficient it is.
It takes a second to write an essay, so it could probably come
up with 1000 different topics.
For misinformation, you know one or two minutes, you got at least
two or three.
That's gonna stay.
It's gonna get in the media and people are gonna talk about or
it's gonna go all over.
Facebook get shared 1000 times.
Or, you know, the AI could be used for deep fakes, which is
where the fun really comes in.
Create message.
Reputable or famous people for various reasons.
I don't know if any of you saw it, but one of the Ukraine
conflict just escalated to where it is.
There was a deep fake of the Ukrainian president
surrendering, telling everybody to put down their guns and we
give up, which is completely fake.
It was totally a deep fake, but it was kind of believable.
I mean, especially in the circumstances that you're a
citizen, you might believe it.
And then on the other hand, I mean, I don't really have much
evidence to support this.
I'm sure somebody's working on it.
I'm sure it could be used to detect misinformation or deep
fakes throughout some some kind of method.
And now here's the real fun of the whole presentation.
There was a event where somebody made a deep fake at Joe Rogan on
his podcast and they were trying to sell a libido supplements
through Tik T.O.K ads that we'll go ahead and watch any a crazy
example of today's deep fake technology and how it can be
used.
Alright, here we go.
Category of supplements that are you guys able to hear this F?
Is this legal?
Awesome.
Yeah, this this is hilarious, he says.
My first time seeing a deep fake ad in the wild on Tik T.O.K.
How the F is this legal now?
I've not confirmed this is an actual ad.
This may be a gag.
It's got 5,000,000 views.
Let me play for you this clip.
Listen to this.
There's a category of supplements that are very
interesting, work very well to increase testosterone by about
100 to 200 points.
Well, look that alpha grind product, that's all over Tik
T.O.K.
If you go to Amazon and you type in libido booster for men,
you're going to find it right at the top.
I mean and that's because guys are figuring out that it
literally is increasing size and making a difference down there
stimulates the testes.
If you got those to make more testosterone or estrogen, so I
don't know if that's.
I don't know if you ever watch that guy too much, but uh, I
would say it's pretty spot on to his movement and his voice and
how he acts as a person.
That's pretty scary.
The point in time we're getting to.
Alright, let's wrap this up.
So what can the average person do to protect themselves and
their business?
The number one thing we've all heard 1000 times, we all know
better, do not reuse the same password and you can stay up to
date whenever passwords do get leaked without have I been poned
organization where you can go and put your email and they'll
tell you where your data has been leaked and what other
information it could be with it.
Name, phone number, address or whatever.
Another thing, stay vigilant and watch your communications with
others.
We all know how it goes.
You get hacked.
And they send a message out to all your friends.
Click on this link or is this you in the picture and then
they'll get you and they'll get the rest of your friends in a
worm like virus information campaign.
But another thing you can do is stay informed on new threats.
There's always new ones coming out.
We're always here.
About how there's some kind of X.
What that just got found on?
Are there some new way people are scamming people?
Cash up.
Keep important files backed up on two different storage
devices.
I recommend keeping you know your important family pictures,
your court documents keep them on cloud storage and put them on
two different devices.
And then always be skeptical of information you're seeing on the
Internet.
Always wonder what source it came from.
Why?
Who would be motivated to make this and lie about it?
Or what do they have to gain from reporting on this?
I can wrap up a lot of obviously fake things.
Just asking those questions.
And then now we've come to the end of our presentation.
Pretty crazy stuff or getting into world's come into a a scary
point where everything's technology.
Half of its being targeted do you don't know if you're the
threat if you got friends that are engineers at Boeing or
somebody successful, they own a business.
If they're targeting them, they're going to try and get to
them through you, through their family, through whatever means
possible.
There's some nations out there that wanna do nothing that will
send someone to live somewhere 20-30 years just to get, you
know, one document just to do one thing, find out one person
who we can infiltrate.
The the the lengths or unknown truly, I mean, we see every day
new targets, new information being leaked, new things, just
just totally crazy.
And I'm almost at a loss of words after doing some of this
research.
Who knows or will be in 10 years, especially with AI coming
out?
Golly, it's gonna be nothing but fake stuff.
Half the Internet we made up by AI, all the content will be
probably tailored towards you.
Personal fake misinformation stories just for you and knowing
what's going to click for you, it comes back to the previous
presentations too.
Your data profile being used to target against you.
I mean galy, who knows where this ends?
Who knows?
But thanks for taking the time to listen to me.
Y'all sorry for ranting on there for a bit.
It was a good presentation, very informative.
Thank you, Kate.
But I do see like when you were explaining it that a lot of it
My pleasure.
is coming from the Chinese, they seem to be the ones that are
attacking China, it's always attacking.
Yeah.
Yeah, I I didn't want to promote that narrative, but I mean,
You.
that's.
Now, yeah, it's crazy.
It's it's fact.
It's what's happening.
I mean, there's no narrative sides protecting yourself and.
Knowing what you need to protect, it's crazy.
It's so absolutely insane or country the US is so behind, and
cyber warfare.
Or maybe we're ahead.
I wanna believe it, but you don't ever see anything being
reported on our end.
But you'll hear all day about Russian hackers, Chinese
hackers, Iranian hackers, everybody but us, and our
allies, too.
Yeah, it's it's so crazy with the way things are going and the
nation state hacking groups.
Who knows where we'll end up?
Yeah.
Does anybody have any questions for Cade?
OK.
Thanks all.
If not, then I'm the next person in line is Jameson, Baber.
Yep, hello.
Right, you're up.
All right.
Everybody can see.
Yep, we can see.
Alright.
Hello again.
My name is Jameson Baber.
I am a cybersecurity intern and my presentation is on behavioral
analytics in cybersecurity.
So on the agenda here, I'm going to briefly discuss the
cybersecurity landscape.
What is behavioral, behavioral analytics?
Key benefits of behavioral analytics in cybersecurity, how
it works, the types of BA in cybersecurity, and then some
final takeaways.
So the cybersecurity landscape in this in today's digital age,
cyber security is a critical and concern for people,
organizations and governments in the fight against data loss,
breaches and theft.
The fact is, organizations are increasingly reliant on the
Internet for their day-to-day operations, or a reliance that
was accelerated by the COVID pad endemics pushed towards remote
work as the as the digital landscape evolves, driven by
rapid technological advancements like IoT, cloud computing and
AI, these innovations have created new and more
sophisticated opportunities for both defenders and attackers
alike.
One such threat or advanced persistent threats, which are
sophisticated long term cyber attack that presents significant
challenges to traditional security techniques.
Another significant concern is ransomware, which is
progressively getting worse and the consequences of an attack
can be extremely damaging or even lethal to an organization.
Ransomware is now set up to steal the data, first encrypt it
and then demand a ransom, and it can even be delivered with other
malware to deliver a double blow to companies.
Nevertheless, in the face of rising threat complexity, we can
leverage the power of AI to strengthen our defense
capabilities and mitigate attacks, and in particular,
behavioral analytics has demonstrated effectiveness in
identifying and mitigating a variety of threat types.
So what is behavioral analytics?
In essence it is a sub genre of business analytics that
investigates past business performance to generate insights
from making future decisions.
BA began in the early 2000s but began getting traction in the
mid to late 2000s and became even more refined with the
integration of machine learning and AI technologies.
After 2010, it has application across various business
functions from product development and customer
customer service to marketing and sales.
It also has the capability to make predictions for gauging
future industry success and analyzing past performance to
make optimized decision decisions based on that
information, which is kind of like how Netflix offers viewing
suggestions based based on its predictions of what you might
want to watch next.
However, in the context of cybersecurity, behavioral
analytics plays a different role.
It harnesses the power of AI and machine learning to analyze
extensive data sets, which enables the detections of a
regular patterns that deviate from typical behaviors or usage
that indicates potentially malicious activities that could
stem from cyber threats.
Simply put, it looks for things that seem strange or different
from what usually happens, like having a digital digital digital
detective that helps by spotting potential signs of trouble by
revealing unusual patterns such as data exfiltration, privilege
escalation, denial of service attacks, and insider threat
behavior.
It is a valuable security tool that helps organizations
identify threats at an early stage, as well as as well as
assist in identifying and recommending improvements to
enhance your security posture.
Are the key benefits the primary benefit of BA is helping
organizations.
Security teams identify a wide range of threats.
It can be leveraged in every part of the organization,
including networks, computers, servers, routers, endpoints and
applications to enable the detection of complex threats and
even zero day exploits as advanced persistent threats pose
a significant challenge to traditional security techniques
due to their specialized methods of accessing systems and
maintaining persistence, be a can be invaluable in detecting
their presence.
BAE Systems continuously monitor behaviors in real time, sending
alerts as soon as unusual behavior is detected, which
empowers security teams to respond immediately, addressing
issues and preventing cyber threats from infiltrating or
spreading further.
Additionally, by detecting non compliant user behaviors such as
on unauthorized access attempts to private data be a can help
organizations demonstrate compliance with regulatory
requirements.
And given that threats like ransomware attacks can
potentially leave lead organizations to bankruptcy, be
a empowers security teams to proactively identify and prevent
such attacks before they occur, thereby mitigating the risk of
substantial financial loss.
So how does it work?
The initial stage of BA is gathering data related to the
areas of concern and converting it into a format that can be
used for analysis.
This includes collecting data from places like network traffic
logs, access logs and databases, recording user activity.
Notably, this extraction and transformation of data can be
fully automated and accomplished in real time.
Data collection is key to making effective use of BA and pairing
it with big data.
Analytics can be a great way to boost its capabilities.
The more data it has, the better it can find patterns and
anomalies that might otherwise go undetected.
Additionally, organizations should aim to have experts in
both cyber security and machine learning working together for an
effective and find fine tune solution once the data is
transformed into a usable format.
BA employees, unsupervised machine learning algorithms to
add, analyze and the data and detect anomalies when it
detection is made, it promptly notifies security teams through
an integrated alert system and this information equips the team
to take an appropriate action and initiate remediation
measures if necessary.
At the same time, BAE Systems will continuously learn and
improve their detection capabilities over time.
This adaptive process enables them to effectively respond to
evolving and sophisticated cyber threats.
Now, many companies assert the accuracy of their BA products.
However, the interpretation of this claim can vary.
If a solution alerts security teams about 10 anomalies in a
day and even one of them turned out to be a genuine threat, the
solution could be deemed capable of accurately predicting
threats.
This is partly due to the general consensus that
generating several false positives is much more
preferable than allowing a false negative to go by undetected.
However, it's also worth noting that in 2019, a study by
researchers from Southern Methodist University using BA
algorithms found the performance of different algorithms to vary.
A first for a specific attack type, with some demonstrating
much higher accuracy than others.
Additionally, in 2018, a paper published by the Institute of
Electrical and Electronics Engineers highlighted a specific
flaw with user and entity based BA indicating that machine
learning has limitations dealing with, with and creating a
baseline for privileged users, developers and knowledgeable
insiders.
Consequently, BA solutions won't necessarily work as A1 size fits
all solution to threat detection, though in conjunction
with other defense capabilities and train staff.
Uh, it can make an effective tool for safeguarding and
organizations.
Assets ultimately BA is continuously getting better and
more sophisticated overtime with contributions from advancements
in machine learning and AI increase data availability, the
shift towards real time analysis and integration with other
security technologies.
Some of the types of behavior analytics in cybersecurity.
There are several categories based on where an organization
wants to focus its attention and integrate BA monitoring.
First, the most prevalent is use user and entity BA, which
focuses on analyzing the behavior of users, applications
and entities.
It functions by scrutinizing various behaviors such as user
login patterns, data they access or modify the frequency of their
interactions with network resources.
Uh, and their frequency.
OK, it also tracks the behavior of entities such as devices,
servers, or applications to identify unusual or unauthorized
activities that may indicate a security threat.
Additionally, user and entity BA can detect uh user account
compromises abnormal patterns in network traffic, privilege
escalation attempts, insider threats, data exfiltration and
other anomalies.
Anomalies like unusual login times and then network BA
focuses more on monitoring network traffic and analyzing
communication patterns.
It helps identify unusual traffic, such as large file
transfers, suspicious IP addresses and malicious website
activity.
The most common malicious network traffic behaviors
include the the use of nonstandard protocols like HTTP
or FTP, large volumes of traffic going to or coming from a single
domain or IP.
A user attempting to scan the network lateral movements across
the network.
Downloading suspicious scripts or executable files and large
data transfers out of the network.
Insider threat BA, as the name suggests, focuses on monitoring
for employees who are typically trusted but reveal themselves as
having hidden motives.
These individuals may have intentions of stealing and or
leaking sensitive data, or even attempting to cripple the
operation operations of an organization.
In such cases, insider threat BA monitoring may reveal things
like a user trying to, uh, install unusual software, or a
change in the typing dynamics of a user which may be indicative
of stolen credentials or unauthorized use of another
person's computers.
Other category categories include cloud BA, endpoint
detection and response application, BA and IO TBA.
However, these categories often overlap and their
functionalities can be integrated into a comprehensive
security solution based on the specific requirements of an
organization.
Some final takeaways.
BA enables the proactive identification of potential
threats by analyzing patterns and behaviors, allowing
organizations to stay ahead of cyber threats.
The real time monitoring provided by BA Systems allows
for swift responses to security incidents, minimizing the impact
of cyber threats and reducing the potential for data breaches.
Be a systems continuously learn and adapt, providing as a
dynamic defense against evolving and sophisticated threats.
By detecting noncompliant user behavior, be a helps
organizations demonstrate compliance with regulatory
requirements and maintain data integrity.
And lastly, via assists in the in identifying and preventing
cyber threats like ransomware attacks, thus mitigating the
risk of substantial financial loss that could lead to
significant challenges for an organization.
These are my references and any questions.
Very good job.
Thank you so much.
You did a great job there.
Right.
Yeah.
Thank you everyone.
Is anybody have any questions for Jameson?
It's not, umm, we did have one more presenter, but it looks
like he never showed up.
So we shall end this.
Present this master class early, since he hasn't showed up and I
just want to thank everybody for attending and thank you all to
the presenters that presented all their presentations.
There's a lot of peas there, but I appreciate everybody coming in
and showing your presentation.
Joel did a great job and thank you for sharing all that
information with us.
You're welcome.
Have a great night, everybody.
The night the job, Margaret.
Thank you for trying.
Yeah.
Well, it's not.