Oh, welcome.
Welcome everybody to master class this evening, Thursday,
December 14th, 2023.
We're getting close to the end of the year.
Boy, I think we have one more after this one for next week and
looking forward to that one too.
But I am looking forward to everything.
Today we have a great list of.
Speakers this evening, presenters, I did put that in
the chat.
If you want to take a look and see who will be presenting this
evening and we can get started right away if everybody is ready
to listen on and those are ready to present, let's see, I,
Stephen.
Yeah.
Good evening.
Are you ready?
I am ready.
Forest, you'll see.
You'll show us all.
Hopefully that's the whole point of these, aren't they?
Ohh doing it backwards.
No, right.
So OK, yeah, I see your slides.
So are you me one second?
Yep, I see them.
Let me fix this.
OK.
God, who turned out the lights.
Yeah, get your popcorn.
Turn out the lights.
Uh, so let's presented.
And then we will share that screen for the presentation.
We got it.
Already.
He's.
Uh, so my name is Stephen Furlanetto, and I'm going to be
doing my presentation on enhancing asset account security
using a password manager.
So we'll go over some common password issues, some password
security, best practices, basics of password managers, the
benefits of using a password manager, features of some common
features used by a lot of password managers, and then
security concerns with them.
So some of the big, you know, problems people have with
passwords is a lot of them are weak nowadays.
They don't have very.
They're just not very discrete.
There are two descriptive or.
They're using a lot of like dictionary words or names and
dates that are associated with their own personal information.
So something people can try to do is, you know, or they need to
avoid using the dictionary ones and they don't update their
passwords as frequently as they should.
Another common problem is using the same passwords on multiple
different sites so that when they get the password on one you
kind of they got you on everything.
Let's see.
So some of the basic features of password managers is really it's
just software that will generate and store and autofill your
passwords.
It's designed to make secure passwords for you.
That way you don't have to remember making those super long
20 character passwords with a combination of numbers, letters,
uppercase, lowercase and symbols.
Most of the time they do sync on across all any device you use.
So if you have a couple different computers at home, or
if you're trying to do it between, you know a phone and
the computer, all your passwords should share between all the
devices.
A lot of them also have security alerts that you know you can
enable on the dashboard that you'll have on the home page,
which is really nice.
That way, if you know something does happen in your password,
does get leaked on you know the dark web, or is in a known data
breach, you'll get notifications.
That way you can update those passwords and try to save
yourself from being one of the people that are affected by it,
and they also allow you to use MFA for your account, like
through the password manager so that it can act as the third
party authenticator service that you can use as MFA for your
accounts on different websites.
So some of the benefits of password managers is of course
the secure password storage.
The fact that you can create as many passwords as you need on
all the websites you need.
If you have different accounts, depending on what level of
authority or security you need on these, you know each account,
whether it's a normal one and then an admin account, you can
have as many of them in your vault as you need.
Another thing that's kind of nice if you're working.
If you're using a password manager in a like business
setting is you can share your passwords with your coworkers.
So if you're, if there's like a a certain device that you need
to remote into through a browser and you need admin set admin
credentials for it, you just put them in, you know, in the
password manager, and then you just share them that way
everybody will have direct access to them and it's nice and
easy without having to, you know, write on a scribbled it
down on a piece of paper.
And you know, here you go.
It's also pretty interesting that they help with password
fatigue, which is of course getting annoyed with constantly
having to change and update your password every three months
through.
You know the policies that you're companies will have set
in place and then some of the new ones now the password
managers.
Now what they'll do is when you create your account, they give
you a account security key that you would have to use in order
to get your password to recover your master password, which is a
nice extra little bit of security.
That way you don't have to worry about if you do forget it or if
someone is trying to get your password that they can just go
to the website and then try to do the forgot password feature.
So and then some more of their features is, you know, they'll
have the text URL or you know, they can track text, URLs,
emails, everything.
The the the picture there they can generate up to, you know
with, with passwords up to 100 characters, which is excessive,
but at the same time kind of interesting.
Like I mentioned, it does multifactor authentication so
that it can scan the QR code in the website for you and then it
will automatically give you the code and auto fill the code
every time you go to that website, which saves a lot of
time and it's pretty nice.
And another one that I kind of learned about recently was how
they can and they'll answer the security questions for you that
way.
It's not your actual information, so it's not, you
know, where was your mom?
First year, the city?
Your mom was born in.
Well, it's just gonna create a fake one.
That way you don't have to worry about it.
It's going to be safe and secure because it has nothing to do
with you.
It's just a random city or a random string that it shows.
That way you're protected and everything should be OK.
So some of these security best practices for passwords, as
weird as it is, there's two.
Disable the password hints.
Yeah, I know it is nice when you forget what your password is.
Depending on how many you're trying to juggle and work with,
but by having the the hint there, obviously you're just
giving anyone who's trying to crack your passwords.
Telltale sign of.
OK.
So it's, you know, Jean, it's the name of my dog.
So then they'll go and do their social engineering, or they'll
try to, you know, find where you that one time you said your
animal's name and boom, now that you know the password.
Commonly you'll want to update every three to six months.
Six months is a little on the high end, but if you can't do it
every three months, at least a couple times a year.
And it is important to try to use MFA whenever you can in with
your passwords, just to give it that extra security.
It's better to be safe than sorry.
Even if it does take an extra couple minutes.
And of course, never reuse your passwords.
You just it's once you start using it in cycling it through
it may it may work for a little bit but there is a chance that
you'll get caught sometime and obviously never share your
passwords.
For your information, I know I did mention sharing resources
that work, but for your personal information I don't.
Just don't share it.
It's better.
It's safer.
Less issues you have to worry about.
Uh, I didn't struggle a little with trying to find, like a good
example for this.
So if you're not going to use a password manager on the right,
there is some common requirements that's websites
will have for you.
The upper lower case some numbers special characters, but
if you're not, so if you're not going to use a password manager,
you know, make sure you create long passwords with a minimum of
12 characters.
Obviously, the more the better and always be sure to use the
random combination of it, of uppercase, lowercase, numbers
and symbols.
So something that people are there are a lot of companies now
are pushing is to come up with a sentence and either use the
whole sentence as your password or to take save like the first
letter in that set in of each word in the sentence and make
that your password.
That way it's something that's easy to remember for you, but
very hard to guess unless somebody knows the exact
sentence you chose to use for your password.
And then of course, sprinkle in some numbers and symbols along
the way.
And it should make for a fairly a fairly safe password.
And some common security concerns with password managers
is that you know, since all of the your account information
across all the platforms and websites that you would use for
your company, it is all saved in one place.
Uh, it does have a bit of a security concern, but for the
most part they're actually pretty secure.
Between them having the vaults, they encrypt everything before
it even hits their servers, and they don't store that
information.
They tried to make it so that that their passwords are yours
and they don't.
They don't have access to it.
They never see it in plain text, so it's all already encrypted by
the time it hits their servers.
Another one is the fact that they don't back it up for you.
As I just mentioned, since they're not going to save your
passwords or see anything, they're not going to back up
anything because all they have are, you know, some hashes that
are on their servers for them to try to save, which they could
use.
But a lot of a lot of companies just has like a kind of like a
courtesy feature for for the customers.
They do.
Just, you know, we're not gonna back anything up.
Everything's on you, but that doesn't mean that you can't make
your own backup of your password vault, which is pretty nice.
Another one is the device security.
So this is referencing your own devices that are using the
password manager.
It kind of is in tandem with the all information being in one
place, because if there is a vulnerability on your computer
that someone can exploit and then they can get into your
password manager, you know the unfortunately the password
manager has no way to differentiate between it being
you or the bad actor.
So that's another big thing.
And a lot of a lot of the password managers will have MFA
when you're accessing your vault or account through the browser,
but the actual application it has running that you'll sign
into, they don't have MFA.
So that's something that a lot of companies will, you know,
kind of question or at least the IT side of things just because
it can be a little worrying knowing that you have all the
keys to your Kingdom in one place and it's not, it's only
protected by the one master password.
And the final one is what happens when you forget your
master password.
That's something that has deterred people.
There's a few different ways, depending on which one you go
with.
I know, like the LastPass is pretty simple where there's the
ohh I forgot my password link that you just access and then
you answer a couple of security questions and they send you a
link or there's ones like 1 password where they're a little
more.
They try to be a little more secure about it.
Where you will do a similar process where you'll have to go
to trying their recovery page.
You'll have to answer all your security questions.
Give as much information as you can.
Like you know, emails, any people.
Like who?
The admin of the account is and then they'll also make you give
them your account key that they give you when you created the
account, which is an actual file that they want you to upload
that verifies that this is you, the person that created the
account initially before they'll help you reset your password.
So that is another another.
Pretty cool feature that first some security.
And then to tie everything up, I did want to talk about a couple
of real life examples that I found.
Uh, so one was that I guess these were, you know, some
security breaches that happened because of or, you know, poor
and weak passwords.
Ireland's Parliament actually got their emails hacked.
There were quite a few different Members that had very weak
passwords and the attackers just started kind of running through
once they found the naming convention they used for the
emails and they cracked into them.
I couldn't find a lot of information on it just because
I'm pretty sure they don't want to get too much information or
let too much information out, but that was one example.
Another one was when GitHub had a brute force attack back in
2013.
For a while they I mean.
When they did realize what happened and they started
noticing that the accounts were being signed into and reset by
people that didn't match up where they were supposed to be,
all they did was send out emails and say, hey, we think your guys
is a cow got hacked.
You know, please change update your password and verify that
it's you.
And then a final one that kind of was kind of a little bit of
corporate espionage was back in 2021, where Ticketmaster had
some of their uh employees that had worked for for some of their
competitors previously that knew a way to get or to kind of steal
something passwords and then to get into their systems to steal,
you know, some corporate information to share with people
up at Ticketmaster.
So these are just a few reasons why.
If you did have a password manager that was making these,
you know 2030 character passwords for you, then a lot of
these sorts of situations wouldn't be happening because
the time it takes to crack a 30 character code or password with,
you know, mix of uppercase, lowercase is astronomical.
It just it grows exponentially the more you add to it.
So it's a nice it's a nice thing to have.
And then here's some references I have for everything.
And that is all I have.
Thank you guys.
Does anybody have any questions or anything I can answer?
What your standpoint on biometrics?
That that is something that some of them do offer as well.
There was, I think it was called Nord past that that's one of
their biggest things that they try to promote is, you know, in
order for you to sign into your account, they do want you to use
it.
So it is another grade security measure to use and it makes it
very unique because you're the only one with your thumbprint or
something.
Until someone hacks your finger off.
That's what I was assigned to.
You lose that finger.
Yeah.
I used to say that to my kids all the time, I'd say now my
Alright, cool.
thumb is on the phone.
So if you ever need it or anything and I said, but you
know, I would like to wake up with my son, with my thumb still
attached.
Please don't need to, you know, fight me to get to the end of
the phone.
There's nothing in there.
I am much more honest than my children.
That's awesome.
If you bother me, I will cut your heads off and make new
ones.
Ah.
We can do that.
Let me see here.
Somebody had somebody saying about the Google?
Cool.
What was that that they wrote?
That sound Google's password.
Thoughts on Google?
Password generator, yeah.
You can trust Google.
They already know it anyway.
Oh yeah, yeah.
Trust Google the one that tracks all every single thing you do
and sells your information and has a, you know, detailed
Mm-hmm.
And and.
I bet.
That's like saying trust the government.
profile.
I actually bet if you look into that they probably hash their
the password, so nobody probably has access to it except for the
and point services.
I would hope so, but you know, Needless to say, there could be
Yeah.
I would assume so, but.
a database out there of all of these generated passwords, so
hate for them to get hacked and find that database.
I I'm waiting to see what happens with content computing
What?
Of.
that's gonna change the security landscape immensely.
Right.
Well, thank you, Steven for that, because mine happens to be
what does that, 71 quadrillion days or something like that.
I believe that's what it was, yeah.
That's that's my password, so try it.
I dare you if you've got the time.
Old enough time you can crack anything.
There you go.
There's your quantum computing for us was talking about that'll
Yeah, exactly.
crack a lot quicker.
That's it.
Yeah.
Give me give my password.
Say crack this one.
See how long it takes?
Well, you get your 10 hours in every week.
I'll take some of that.
I'm a I'm I'm quite covered with those.
Right.
Ohh yeah.
That's good.
All right, who's next?
At and looking forward to Kyle's, actually I've interested
Can I have Kyle?
on our.
Yeah, Kyle is next.
Uh, yes.
Place.
Hello everyone.
Can you all hear me?
Yes.
Awesome.
Just going to share my screen here.
They some knowledge on us.
I do want to say while Kyle is getting ready, if there's
anybody here that will be leaving on December 19th, I do
have two more spots that we can do tonight.
I did lose 2 spots for this evening that I can fill in if
you would like to.
If you'd like to move to yours to do sooner and get it out of
the way, you're welcome to do so as well.
Like I said, right now we're just short of too.
So if you want to let me know, we'll put we'll add you to it.
All right, Kyle, go right in.
All right.
So hi everyone.
My name is Kyle Habig and I will be presenting on the topic of
generating text documents, graphics and more with R&R
markdown.
There we go.
So to begin, what is our R?
Is an open source programming language that was specifically
designed for statistical analysis and graphical
representation of data.
It provides a framework and environment for statistical
computations and the creation of data visualizations.
The name Jr comes from the initials of its creators, Rossi
Haka and Robert Gentleman, who developed it in the mid 1990s.
Since then, R has gained widespread popularity within the
statistics and data community and is becoming one of the most
widely used statistical software tools.
I thought this slide goes over some of the main features of RR
excels in data processing tasks, allowing users to manipulate,
clean and analyze large amounts of data efficiently.
The use of its many packages can generate a wide range of high
quality graphics that are ready to be used for publications by
visually representing raw data.
Comparing the software to other common statistical tools such as
Excel, RSS capable of handling larger data sets more effect
efficiently, making it ideal for analysis of very large datasets.
And are also supports procedural programming and has a large set
I've built in functions as well as the ability to create your
own functions.
Our studio is a dedicated development environment for our
that also supports Python, and there's also a cloud version
that can be used if that is preferred.
One major advantage advantage of using R&R studio is that
they are free and open source which allows for greater
accessibility and community driven development.
And from this community driven development comes a vast library
of downloadable packages.
These packages can be searched for in the comprehensive R
archive network and anyone is able to create and share new
packages that may be needed to meet any particular project
needs.
Currently, the most recent number I could find is that
there are more than 19,000 packages available and it looks
like I actually didn't update that.
I just looked that up today, so it's gone up a little bit on to
demonstrate some different types of packages.
I've taken some screenshots of visualizations created using
some of the more popular ones on the left.
Here is a bar chart generated using just the base R code and
with this users have the capability to do things like
change colors and labels that are included in the graph.
But if you're wanting to make a more complex visualization, it
will be easier to achieve that by using a package such as the
Ggplot 2 package and the graphic on the right shows a scatter
plot where each element from the colors, groupings, dot density
sizes, and the trend line can all be easily added and edited
to an already generated graphic.
Some more examples of packages include the G Maps package that
uses Google Maps data and allows for data to be plotted over it.
Uh, sorry, I lost my my spot.
Ohh here we go and the generative art package is a just
kind of a cool package that I've found that essentially lets you
draw pictures using math.
And here on the right are just a few that I made while playing
around with that one.
The flow package is a useful package if you want to create
nice and clean looking flow charts and the calendar package
can be used to create calendars.
The sea tool package includes some miscellaneous data.
Utility functions such as splitting samples and
calculating averages over a dynamic window of time.
I used it here to create a GIF of the 1st 20 iterations of the
Mandelbrot set and the Ray Shader package can be used to
produce 2 dimensional and three dimensional visualizations in R.
So moving on to our markdown, our markdown is a type of file
format within our that allows for the entry of both basic and
formatted text in addition to our code, this file type allows
for chunks of code to exist within the document text,
allowing for your creative document to stay organized and
very easy to navigate.
And here I just included a picture of what that might look
like with the shaded regions being areas for code and the non
shaded regions being text and.
Uh formatting syntax.
Our markdown documents are capable of generating output in
the form of PDF documents, HTML, web pages, and word documents.
By default, after doing further research for this presentation,
I found that there are packages that also allow for more file
type outputs such as PowerPoints and Latex documents.
Our studio allows for the use of a reference document as well to
make sure that the style of the produced documents are
consistent.
This allows for markdown to create consistent looking and
structured reports using any newly collected data.
At my current job, we work on many projects that are repeat on
an annual or semester basis.
So this approach for generating our needed data visualizations
has saved us lots of time in the long run.
So to create a template for a document created using our
markdown code must be written to import whatever data set or sets
are being worked with.
This data will need to be formatted most of the time by
cleaning and setting data types and any specific factor levels
that are needed for the data.
Placeholder text can also be added along with any desired
text formatting such as headings or italicizing centering.
All that kind of stuff and a style template can be imported
using an existing Word document or CSS file.
Next code can be written to create any data, visualizations,
manipulations or data tables that are needed to be included.
It is also a good idea to export the new data frame with any
newly created data from any analysis that was done.
Once this is all written, the code can be compiled and a file
will be created.
One of the biggest advantages of using our markdown for
generating reports is its efficiency.
Once the underlying code for visualizations and formatting
syntax is written, are can quickly compile these elements
into the desired desired file format.
This quick turnaround allows for less time to be used on
formatting and generating new visualizations.
On the other hand, the time needed to create the ARM
markdown file in the 1st place can Causeway more time and
resources to be needed up front in order to write all the needed
code and implement the desired formatting.
Additionally, there can also be a learning curve to learn any
new and necessary packages, or just the R language altogether.
Because of this, this approach is not ideal for shorter one
time reports but works better for reports that need to be
generated on a regular basis.
All right.
So to show how quickly this process can work, I'd like to do
a quick demonstration.
I'm going to drop a link into the chat to a Super short survey
and I'll give everyone a minute or two to complete that.
I'm not sure how to open the chat when I'm sharing my screen.
Here we go.
So just take a couple minutes to complete.
It's pretty short.
I love this dude.
You've got me sold on our like ********.
It is.
I love it.
It is.
It is pretty nice and it's free, which is awesome.
I was looking at Python but I was looking at art too and like
our is just your demons.
Your slideshow is blowing me out of the water here.
Well, thank you.
Give a bit more time.
I know in Qualtrics it can take a little bit of time for the
responses to come in too.
Yeah.
Da da da with jeopardy music going on here.
I'm going to get all my answers correct.
Ohh I cheated.
Like left a 13.
Is anyone still feeling that out?
So I have found it takes about 30 seconds or so after
submitting them for them to to come in so.
Refresh one more time.
Let's see if we got anymore.
Alright, this this should work.
So we're just gonna go ahead and export from Qualtrics.
Who?
Being brave with the CSV, she.
I've found CVS.
I know that there are packages that work better for Excel files
but.
Don't know I've I've just used CSV's more so.
I like the Excel because you can clean the data in it, but like
for the most part it's there's really not a huge difference.
You can import to excel as a CSV either way.
Right, right.
And I clicked show in folder but stop popping up.
Said my test file there.
And we'll just name it what it's called in the R file.
Save that switch back to R.
And here we have this, the short arm markdown template.
You can see we have the same setup importing some packages.
And then just kind of cleaning the data, setting it to the
correct data data types that we want and some placeholder text
chunks of code.
But if we go up here to knit to a Word document.
Going to take a couple of seconds to run.
And that should automatically open.
And here we are.
We have a basic structure of this report here with the title.
Different levels of headings.
I just see some placeholder text here and we can see Blues are
pretty popular color among everyone.
And yeah, we can see people's favorite pizza toppings.
Looks like actually mushrooms are more divisive than
pineapples, which is kind of surprising and a nice little
word cloud for Purdue global.
I love the I love the easy math.
That's great.
What am I?
Yeah, and.
What am I?
Choices with big words.
Hair, brain.
Yeah, that that looks great and that is the.
And get back to my PowerPoint and to my presentation.
Does anybody have any questions?
I do actually was Gigi plot is that one of the ones that they
also use in Python?
Is it a similar package for R or is it a separate package?
I actually don't have a ton of Python experience.
I'm taking a Python class next term, so I'd probably be able to
answer better than, but I wonder if they could have been created
by the same group of organization.
That would be interesting to look into.
I do know that Gigi plot uh package within R is one of it's
pretty huge, like it has a lot of subpackages.
An it's possible.
Oh, yeah.
You're demonstration showed that.
Yeah, it's possible that.
Even a Python subpackage could exist within our.
I wouldn't be surprised just with the number of packages that
exist.
Yeah, that would be.
I'm.
I'll have to look into that.
Sure, there's a API somewhere as you get them the communicate
there is for everything else now.
Right, right.
Sold.
No.
Awesome job.
Alright, thank you all.
Yes, great job was fun.
Glad to see other people like pineapple too, so.
Oh, God, yeah.
I'm the only one that liked Orange, though, a little
heartbroken.
My I didn't see orange.
Purple is best.
That's fine.
Umm my God.
Next victim.
Next week, then.
Let's see now, that was a great job.
Eduardo Rivera, Are you ready?
Right on top of it, there we go.
Yes, yes.
Can you hear me fine.
Yes.
Alright, perfect.
Alright.
Hello everyone.
My name is Eduardo Rivera and today I will be presenting
augmented reality in education for PGIP tech.
On December 14th, 2023.
The table will come to this show will begin with defining what
augmented reality is.
How does augmented reality work?
Defining the difference between augmented reality versus virtual
reality, augmented reality in education, and the benefit
augmented reality applications being used in education.
And lastly the conclusion.
Those begin with the finding.
What augmented reality is which I have identified from doing
several research and even though every website has a different,
different definition, augmented reality is defined as technology
that enhances the user experience by overlaying digital
objects in the real world.
So they can go coexist and be viewed in the environment.
You are in augmented reality utilizes the camera sensors and
many computer algorithms so that the information can be perceived
and allow it to interact with the real world.
How does augmented reality work?
Many know what AR is, but do not understand how it works, which
is not too complicated to understand as a AR needs the
device to access like a smartphone to capture the real
world environment with the cameras and it sensors, they are
the the AR then uses computer vision simultaneous
localization, mapping and death tracking for the environment
that objects will be rendered into.
While all of this is happening, there is more than likely a
cloud connection that will get any information from the object
that you want to see in the real world and overlay it in the real
world by using markers and trackers.
Once the cloud overlays the object into the real world to
user can interact with it and real time through various
methods like touch, voice and gestures.
Ohh, there are also two types of augmented reality, with one
being market base which is more limited to mobile devices as it
relies on QR codes and visual markers.
So the experience is activated and it might require a dedicated
application for it to work.
There's also markerless AR, which is location based and
would you use the user's environment and allow for
flexible dynamic experience.
What they are markerless AR also has a few subtypes like
projection based AR, which uses projectors to display RAR on
flat surfaces.
Superimposition based AR is used to partially or fully replace
the real world object when using AR and lastly location based AR
which you just geographic data so that the digital elements are
triggered kind of like Pokémon or the Harry Potter game that
you guys may have played or not played, but pretty sure everyone
has seen Pokémon.
Augmented reality versus virtual reality.
Since I've explained what augmented reality is and how it
works, I will explain the differences between AR and
virtual reality as I believe it is necessary before discussing
augmented reality in education.
First, augmented reality utilizes real world environment.
You are in.
Unlike virtual world, which creates a new virtual
environment for the user to be immersed in virtual reality,
Justin does explanation it seems like it would be ideal for
education, which it is, but the amount of technology device
requirements can get expensive depending on how immersive you
want virtual reality to be.
Their body tracker is gloves, since special headsets, you need
to get fully immersed in the experience.
This can cause a problem as many users will need to get used to
the gear and some might not like wearing the gear.
A lot of the time, augmented reality does not need most of
those devices and can be used with devices like phones,
glasses projections and even tablets.
This is what makes augmented reality better for education and
virtual reality, as it would be easier to introduce at any
educational level and would not be as expensive as virtual
reality to have classrooms be outfitted with all the
requirements if needed.
Augmented reality in education and an educational setting, AR
would bring assistance to the students to do as it would bring
in much more engagement towards a lot of subjects because of the
ability to utilize augmented reality.
It would help.
Everyone collaborate better on topics that can utilize it,
which would motivate them to want to learn more about the
topic.
There are many interactive experiences that students can
engage in emotional skills and while learning in class, like
being able to bring space into reality, examine it animal with,
placing it on the floor and walking around different
different views.
The same would be possible for plants, sea creatures and
different models that would be educational on the class at the
time of learning.
Anatomy of the different animal sea creatures and even humans
would be fun to be able to bring it to life and walk around it
projected model to examine not only that, but augmented reality
consists with distance learning.
It's the situation if the situation calls for it, like
when we had the COVID outbreak, which forced schools to do
distance learning for different time periods.
All educational levels would be benefiting from having A at home
and more than likely there is a mobile device they can use to
experience so.
Currently there are a lot of augmented reality applications.
That is, school can use for example assembler.
Edu allows the student to immerse themselves with 3D
graphics and animations to better understand the topic by
using augmented reality to model objects, code spaces.
Edu is another application that can be used to model objects in
the real world, just like assembler to you.
Monday is a little different, as is an augmented reality language
learning assistant that comes to life to help learn a new
language by bringing certain objects to life and calling them
by the user language 1st and then saying it in the language,
there are wanting to learn.
I wanted to speak about marriage.
Edu last, I think caught my attention with something that
others do not provide, at least through the research that I did,
which is a hands on tool that you can use with their
applications.
The tool is called Emerge Cube and with their applications you
can place what you want to bring to life on the key Abe and be
able to turn the cube to view the augmented reality object
from different angles.
Just by turning your hand, it's not required for their
applications to work, but does give the users the ability to
have the augmented reality come alive in their hands because of
the queue, there are many applications that can be used,
but the one that listed above are the most recommended ones I
saw when doing my research.
I would highly recommend any educational system to begin
using augmented reality with the help of merge Edu because it
gives you the hands on tool.
And As for my conclusion, I believe that augmented reality
should be implemented as many schools that we utilize the
technology.
It helps students learn in the areas of science, technology,
engineering and mathematics, also known as them, it can
provide schools with the opportunity to help those with
special needs by offering augmented reality learning
experiences.
The engagement from augmented reality would help a lot of
students get those interactive experience with the topic being
discussed instead of just mentally visualizing it with the
pictures provided and the books are videos not saying they're
not wonderful or good, but this would help a lot more with those
I like to visualize.
I know the time I've been to school.
I didn't educational level.
I would have been more engaged if we would have utilized this
topic technology especially for space and plants math.
What have you even been a lot more fun as well with the
different shapes and possibilities of being able to
apply certain algorithms to subjects to objects and watch
them through augmented reality?
So if possible, I believe all educational levels should have
augmented reality.
Is there my references and thank you.
There's any questions I would gladly answer them now.
Yeah, I don't have any.
Great job.
Any questions for Eduardo?
I think they're education is already in an augmented reality,
not in a matter of what we want them to be, but in a sense it
kinda is.
I think a lot of the stuff that the schools are starting to
change.
Into that format, realizing that, you know children learn in
different ways, not just with a worksheet, I think they're
really pulling away from that, which is nice.
I see a lot more of them using Umm devices to teach the
children, which is nice, which is good.
Having it more visual, I think.
You know.
Yeah, the, the, the.
The reason I this came to as a topic for me is because I'm
homeschooling my kid right now and like AR has been very great
for that.
I actually recently ordered a merge keep off of Amazon, so I'm
gonna be testing it hopefully after Christmas to see how that
works.
There's a trial that you can do as well with merge, and I'm
hoping that him learning through more visual like the anatomy
plants and like how they're different girls are will help
him understand that a little bit more because right now home
schooling is a little bit difficult as this is the first
time I'm doing it.
And yeah, it's it's it's crazy experience.
Absolutely it is.
It is a lot different, and because they're used to just
like you guys coming from the academic side to an experiential
side, you have to switch that brain over into doing something
a different way now and kind of setting yourself up up to see
things in a different way.
So children who are used to doing worksheets and workbooks
you know now get to do things visually.
They get to do things more with their hands, their movements and
things are changing too.
During COVID I had to get that with my my two kids who were
older.
They weren't small at the time, but it was the same thing.
Getting them used to using Google Classroom instead of, you
know, watching the teacher.
They had their meetings, but I mean, everybody had to change
over, right?
The brain had to change to get used to a new reality and
augmented reality, and that is that is the fact a lot of things
are going to change.
I think it's going to get more in that direction.
Yes, correct.
It does help people with disabilities a lot more and I
think that's starting to really move into really focusing more
in that sense too.
I think being that we are more in this environment like this
helps with the disabilities because we gain add captioning
and we can, you know you can start using more applications
that work in that sense with more hand movements instead of
eye movements or more colorations that work for
everybody too.
So that helps a lot.
This is really good.
Thank you very much for this one.
Also with like UM, so being autistic I have issues with
putting things on my face or things like that.
So the VR would be harder for someone like me than like the
augmented reality, because then you're just using the device.
And again, like you pointed out, people learn differently.
Some are hands on and some are more visual, so there would be
help in both of those.
Exactly.
Absolutely right.
Imagine all the wasted talent we had because they couldn't
conform to the one way they taught you.
Right.
And it really is.
And I've seen that through so many years and getting into
teaching because I was never.
I never thought I would teach, but getting into teaching and
realizing all the students that I have and how some of them just
don't get it.
And I'm like, I wonder why.
And then I realized, wait, what did I learn is I was going
through my degrees, you know, all the different ways that
people learn and realizing how I learned.
I learn as a visual learner.
I don't.
I don't do good with tests.
I never did good with test.
OK, no wonder now I realize that.
OK.
Later on in life, how many people should know that now and
are younger, you know, or before they even get into school?
So a lot of that is just a matter of, you know, us
realizing them.
You can brute force and things.
Absolutely. Yeah.
Just to, you know, reading through a chapter and then
having to read through the chapter again because you you
didn't comprehend what you just read.
Are you zoned off reading it?
It's just, yeah.
Or you zoned off right?
Because it was so boring.
You know, I just. I couldn't.
I'm surprised I got through college as well as I did, but
that was forced.
Like you said, it was brute force.
Absolutely.
Now I do it the way that I know I can, which is nice.
I wish I wish a lot more people understood how they how they
learned it would be a lot easier for them too.
But that was great.
Brought up a great conversation at the end too. Awesome.
Alright, Next up is that Jason.
My turn.
No.
Now, Jayson Samfong, your turn.
Yep, Yep.
Yes, yes, yes.
Ah, I misread.
All right.
Thank you.
Hello.
Alright, let me I thought I had my paper.
Yeah.
And what you see my screen can everybody hear me well?
I can hear you, but I do not.
Cannot see your screen.
Yep, do not see your screen.
OK.
OK, share why I practice this earlier.
Sweet.
So you still can't see it, yes.
Correct.
Ticket, please take it out.
Why is this happening?
Hey, come on.
Here we go.
Let me try again.
Share.
OK.
Content only.
What?
Does everybody see anything still?
Not yet.
Nothing.
No.
Nope.
Nothing.
Ohhh my gosh.
I promise I'm looking really hard for it too.
I know.
I'm I'm digging past all the bubbles.
Oh my goodness.
All the bubble faces.
Ah.
Let's come on.
What is going on?
Should I go out and come back in?
Do you think that will work?
But when you, when you when you open the share, does it say
screen or window on there?
Yeah, it says presenter mode.
Uh, or there we go.
So yeah, choose your screen for the air.
You go. Yep.
Hello.
Nice.
Ohh my gosh.
Alright, there we go.
Yes, I know, Lewis.
Got it.
All right.
OK, OK. Ohh.
Sorry for that guys.
Ohh, let me just right.
Sorry, we get paid by the hour.
A hey.
Ohh man guys, I love it.
Alright, alright.
Well, hello.
I charge by the hour.
Hello PGIP tech.
Yes.
Ohh no.
Well, I'm.
I'm super delighted to address you this evening, guys.
Umm this Matthew that there's a lot of grapes presenters already
and to follow that man tough act man.
My name is Jayson Samfong and I'm eager to share insights into
the critical realm of threat hunting in cybersecurity.
It is a subject that I find both really and engaging.
So what exactly is threat hunting?
When should one embark on a hunting expedition?
Are there specific tools associated with this practice,
and does it fall under the purview of red or blue that
activities these inquiries, among others, have not only
deepened my comprehension, but have also provided a
comprehensive foundation for me to present my discoveries
tonight.
My goal is to instill enthusiasm and motivation in each of us as
we navigate our own respective fields within the realm of
cybersecurity.
Now is as everyone turns their attention to this animated
globe.
Here I'm sure everyone is familiar with that globe.
There it's basically.
It's a representation that encapsulates a live stream of
real time cyber attacks.
Uh.
And while it may induce fear in some, for others, it serves as a
source of motivation.
So I would like to have us all united in a collective effort to
thwart and extinguish the vibrant streaks of those
digitals incursions.
So please follow along with me and let's get on with this.
Left of the boom.
This simple timeline, I know it's super simple timeline, but
it actually it illustrates a successful cyber attack on a
targeted network system.
You know, with the credit to IBM cyber threat hunters for
introducing the concept of the boom, the boom just refers to
the moment when a threat actor hacker gains access to the
targeted network system in the realm of threat hunting.
There are two phases surrounding the boom left of the boom and
right of the boom.
So before the boom left of the boom, the thread after is
initiating the connaissance you know some of these things that I
will express is nothing new to all of us.
That, and in cybersecurity.
But it it compresses activities such as footprinting and
information gathering.
The collected information is typically categorized into three
groups from from the eyes of the hacker network host, and people
involved.
You know, footprinting involves two types.
There's active, which is directly interacting with the
target.
Here's an example using and mapped to scan a network system
and there is passive footprinting which basically is
utilizing publicly available information.
The Internet is pretty much public, so you know you got
social media and all that.
But wherever a target can threat, actor can gather
publicly information about the target is passive, so the
subsequent phase then is scanning, where the hacker.
Interacts with the targeted network system through port
scanning, vulnerability scanning, and network mapping.
You know the goal is to identify open ports, live systems with
various services and operating systems seeking weaknesses or
vulnerabilities for exploitation.
This phase often employs automated tools with the added
objective of assembling valuable information about the targeted
network topology.
You know, this includes routers, firewalls and servers.
Boom.
Right of the boom when boomer occurs, the threat actor races
to gain administrative privileges, providing a pathway
to modify, hide or install data and applications within the
system.
In recent findings, you know, sophisticated hackers aim to
maintain covert connections using children kit using
children's root kits and other malicious files.
The goal is to persistently access the target without the
user's knowledge, allowing to happen to execute planned tasks.
The final step involves covering tracks, once again by modifying,
corrupting or deleting log values, altering register
values, uninstalling applications they use and
deleting created folders.
This comprehensive approach ensures that the intrusion
remains undetected.
And where are detected allowing the threat actor to accomplish
their objectives within the targeted system?
Right.
The mind of a threat hunter from the perspective of a threat
hunter, the boom attack is not just an isolated incident.
Rather, it is a part of a broader sequence of actions
undertaken by attackers both before and after the boom, which
which pretty much I conveyed in my previous slides.
While the network system security may not immediately
recognize the boom when happens, alerts or alarms are generated
to signal the event, the time span between the boom and the
activation of an alert is known as now.
Mean time to identify and according to polynomial Ponemon
Institute, in 2022 this duration averages 200 days and
subsequently it takes approximately another 70 more
days to contain the hackers onslaught, resulting in a total
time frame of 270 days for a single breach.
Now the ability for threat to hunters to predict and test the
bones, thereby reducing the mean time to identify or providing
indications of an impeding attack is crucial.
So let's move on to the hunting page.
Alright, the timeline from a bit left of the boom to the alarm or
alert represents the hunting phase.
Within this phase, there is a reactive investigation which
I'll go more into here detail.
I know we there was a lot of talk earlier about data and
stuff like that, that that too is coming up.
But I'm not as I won't go to him.
Too deep, like these other presenters, but while the hunt
is a proactive measure, anticipating threat actor
activities is where the essence of threat hunting comes into
play.
Developing a hypothesis, even the absence of alarms or alerts,
is essential for better preparedness.
Investigating something that is potentially happening requires a
methodology. Indicators of compromise.
Let me move this.
Let me just yeah.
There we go there in indicators of compromise.
The thing.
Involve gathering in involve gathering information on
activities that create vulnerabilities in the
infrastructure.
So let's just go.
Yeah.
Do a little bit, you know, indicated compromise here.
We got some here, maybe some guys is like doing something
here and here.
There's also indicators of attack, which signify attempts
to breach the system warranting concern.
This also overlaps indicators of compromise, although once again
it is something that cybersecurity should have
knowledge of, but more so to be aware, aware of it.
And so, you know, there's even more things that happen around
them.
So we'll make them triangles.
I'll do some here, some here, some over here.
Come there.
Alright, now look.
Alright.
And so Intel feeds would be, uh provide and Intel feeds provide
insight into common threats faced by other organizations.
Modern cyber security tactics heavily rely on threat
intelligence feeds, which are readily accessible online.
These feeds monitor and document IP addresses.
URLs linked to various cyber threats, including phishing
scams, children attacks, malware, spyware, ransomware and
more.
While the information of these feeds offer can be highly
valuable, the key lies in selecting the right source, and
so you know there's all these feeds going around here that the
threat Hunter needs to be also aware of.
And then the last thing is vulnerability scan on internal
systems to simulate threat actor perspective, enabling in depth
research on potential vulnerabilities.
Embracing these practices aligns with the adversaries.
What the adversaries might do, emphasizing the importance of
proactive defense.
And then in astute threat, Hunter comes along.
And then he he would not see that these incidents are
isolated events, but rather connects these findings,
creating playbooks like a playbook of interconnected
indicators which aid in identifying potential threats
before a boom or another playbook to potentially detect a
boom in progress, or another playbook to reduce the mean time
to identify the creation of these.
The creation of these paybooks utilize tools such as XDR, SIM
Systems, UBA Systems which are right on this next slide here
you know if the ISP century external depicted response
systems, security incidents, and events, management systems, user
behavior analytics systems, and infusing them all.
Hey, come on.
Giving it by the.
Sorry.
Alright, well, maybe it was on the last night.
I'll be anyway, infusing them in it.
Yeah, I I think I skipped apart, no.
Alright.
Well, anyway, I'm just.
I do apologize for that messed up, but there's two things that
that a threat hunter wants to stay clear of, and that is these
two numbers, 270 days and $4.5 million, which is equivalent to
a cost of a single breach leading up till 2023.
And no, now it's time to talk about fun stuff for people.
Ohh there it is.
Shoot, give it to the AI.
There it is.
There's the AI.
My game up alright, so it's all about the data.
I know some people said they love data.
Telemetry telemetry is in in threat hunting refers to
collection and I'm not analysis of data from various sources to
detect and respond to potential security threats.
The specific data involved in telemetry can very can vary
depending on the tools, technologies and the methods
employed in threat hunting.
However, common types of data collected in telemetry for
threat hunting include network telemetry and endpoint
telemetry.
You know network telemetry, you have packet and network net flow
data which is the capturing and analyzing of anomalies in
patterns of behaviors.
Uh communication patterns and anomalies in communication while
endpoint telemetry looks at endpoint blogs, process
execution datas, datas and also file integrity monitoring which
is super important because you know the endpoint.
That's all of our devices and things like that.
And so and to have processes execute you you want to know
what what the those executions are.
And you don't want to not know what executing in your network
system.
And yes, so there was a whole, you know, there's so much,
there's so many data point telemetries into.
Yeah.
For this type of uh and threat hunting, you know application
cloud user and behavior.
Alright, let's move on to something.
I was able to listen to some keynote speakers.
Here we have uh name is David Holzer.
Uh, and I titled this one thing trick.
New name.
Same trick, new name, larger scale.
Get AI.
Alright, so I was able to.
I was able to see this, David Holzer, who was involved in
threat hunting before it was called threat hunting.
He shares his perspective of how things were done in the past and
significance, how things are done today and correlates it
together to make sense of today's vast need to keep up
with scale.
Here's an example.
He was an administrator of an institute if the University of
over 30,000 students, and in that university he ran a 1.5
megabit T1 line out of the university.
My new guys, this is back in 1990, the 1990s, although when
it came to detecting anomalies, threat hunting was not the name
for this yet.
So they called it detecting anomalies.
They used to collect.
Uh, he have to, of course, call a lot of experts some experts to
help him out, although what they did is they collected all the
data in their network.
They also wrote their wrote their own filters and they ran
all the data through the filters.
Now what they're doing is they're filtering out everything
that belonged in in their network, while leaving behind
things that did not belong.
And the point that he was trying to make was, uh, the scale, so
1990.
OK, 1990 is 1.5 there were, you know, were able to manage.
Uh, the the data that they received in their university.
But you look at today, they're running like 100 GB lines, you
know, and he, you know, I took it from his point.
And and he said that it would be just be impossible for just a
team too to be able to take in that data and and make sense of
all that data, hence the hint towards AI and having technology
speed up the processes of what we are able to do because
everything is going fast.
And that's exactly what you know, 300 need to do as well.
And let's get on to the next slide and you know he also
expressed using data to its highest potential.
Now, I didn't really.
You know, I, so I'll just stick with my narration before I go
too far off track, but Trent had threat hunting is a challenge to
continue to learn, ask questions, and make connections
to what data is telling you or what data could represent under
different circumstances in mathematics or science or any or
any way that transformed that data into activity to provide
some application in threat hunting or for the future, or
even the present, but more so for the future.
Reflecting on the same with this same keynote David he shares
about maximizing one's ability to use the data you have in your
own network and how to think poorly defined that data you
have is crucial in new techniques.
You know, he expressed stories about, you know, mathematicians,
mathematicians creating things long time ago.
But long time ago they didn't have use for that, but it was
great that those guys created.
But today we used many of these calculus signs and cosines and
things like that, which I that's way past my my math right there.
But you know, it's all about the the data and and and trying to
reach out to create.
New things from present data or old data.
Alright, let's move along.
So the progression for threat hunters, you know, companies
such like such as Crowd strike, cyber reason, you know, there's
many, many companies out there that are advancing in threat
hunting practices and to reduce the mean time to identify and
mitigate the costs associated with persistent threats.
Typically you know these sophisticated hackers, backed by
substantial resources, governments, institutes,
institutions.
Uh.
Criminal syndicates.
You know, despite the significant progress made by
these companies against persistent threats, today are
notable contributions for each that enhance the field of threat
hunting.
Uh, let's see.
We are coming down to the wire and I'm gonna skip, you know, I
wanna conclude with just.
Yeah, with these quote on the bottom left because earlier we
seen the two numbers 270 days and $4.5 million for a
particular.
Hack.
You know a breach for a company?
Crowdstrike.
They created a no no.
Hey, an application called Falcon Overwatch, which which
I'll read in in there and they they tested it in 2022 to 2023.
So here's the quote.
I'm just going to read them bottom left through the
combination of technology and intelligence.
We raised the cost for these adversaries and continue to do
so.
When we launched this idea under the crowd strike banner, that's
the Falcon Overwatch, we told the world they don't have a
network problem.
They have an adversary problem up at the top.
It says directly identify approximately 1 potential
intrusion intrusion every 7 minutes over the course of a
year.
This adds up to 10s of thousands of instances where human driven
hunting was instrumental in uncovering adversaries actively
seeking to evade economist detection methods.
They're still their findings into the development of hundreds
of new behavioral base preventions.
In practice, this means at least once per day on average.
Talking Overwatch that hunters frontline finders directly
augment the Falcon platform's ability to detect and prevent
the latest threats over the course of the past year alone,
this new behavioral based detection has enabled the Falcon
platform to prevent in additional 1.5 million malicious
events that would have otherwise evaded autonomous detection
methods.
And I'm gonna end with that man.
You know, making them make having it cost more for them and
less for us, you know, and I think here's all my resources
guys, I am concluded at this time that is the end of my
presentation.
If anyone has any questions, please feel free to go ahead and
shout out.
What's the difference between white hat and Red Hat?
Boy, I think you know the answer to that one for us, no.
Uh.
To me, I think in in terms of Red Hat is doing that White hat
is your ethical hacker.
That hack would be, uh, an ethical hacker.
That one does it for the.
Uh.
You know.
Why does she help me?
Help me out there.
I know my brain knows it, but it's not thinking right now.
My personal thought is as ethics is only an issue when someone
ask how you got to the result but.
The IT was that simple.
It it you gotta break the law, right?
Either way, right?
But it's either you're having permission to do so.
Uh.
On both cases, right?
In red and that's where the whole essence of making sure
that your legal team and guiding your eyes and and all your
contracts and that comes into contracts because you know you
gonna have if you're gonna read you read had white hat you're
gonna have to have those things in order as well you know doing
those things as well.
So thanks for your question.
Any other questions?
If not, thank you very much for listening.
Yeah.
Excellent job.
Excellent.
Really good.
No more questions.
All righty.
And in everybody's, we've been waiting for forest.
We're waiting for you.
Unlikely.
For us, we're waiting for you for.
Ohh, that's tech.
That's terrible.
This is I'm actually gonna have to read mine.
Very, very quickly because I overdid it.
UM, so I I did actually.
I didn't I6 Sigma you should not be doing that with Six Sigma
now.
Come on.
That's actually kind of funny.
Uh, so I actually did my project on efficiency by design, and
I know.
there's actually I there's a disclaimer that comes with this
project.
This presentation does not and cannot represent the large
number of ways that we as a IT professionals, can increase the
efficiency of our trades.
This focuses on one aspect we can use, usually in a visually
in a physical environment.
For instance, I reference a book by David Farley towards the end
that I believe one day will serve as a reference for the IT
for the future, such as other books like the Mythical Man
Month by Fred Brooks and code complete by Steve McConnell.
Connell has up until nine.
I highly recommend the 1st as a heavily references the later.
Anyway, my title efficiency by design.
Goal leads to Signet applications that it disciplines
are agenda is we're gonna do an introduction.
We're gonna define, measure, analyze, improve and control.
As to Dominic, it's actually what their whole process is
about.
I actually built an example case based on something that we would
all actually see in our field, and we have seen.
I know we have seen it and then a conclusion.
Nothing super crazy here. OK.
Uh introduction Goleen is a process improvement guide
designed for government manufactured and healthcare
industries.
Many of the topics are easily able to reach it across to our
fields.
I intend to make those connections with examples and
then a process a template motivate you to look further and
increasing efficiency of the error through these and other
methods.
Our future depends on finding and implementing better controls
and all processes that advance our technologies.
And example of this is using deep mind it's Google's AI
branch for neural networking to approve control over nuclear
fusion reactions in a tokamak reactor.
This improvement is designed to help stabilize the reaction so
that we may draw energy from the plasma to create energy density.
We can achieve sustained and controlled fusion reactions for
power generation.
Can provide a more efficient and powerful source of energy with
less input material compared to current energy sources.
This could have sufficient significant one of the days to
learn how to read implications for addressing global energy
need while minimizing resources could deduction and
environmental impact.
Now completely gonna be off the rails that the slides are
completely relevant to what I'm doing and it's first slide.
This introduction delves into a critical organizational
challenge system downtime transcending me, your technical
glitches to impact productivity.
Use your experience and overall financial well being.
That was actually something we just talked about in the last
one.
The description here outlines the process.
The pressing issue of frequent system downtimes and it's far
did I break it and it's far reaching consequences measured
through monthly outages, incident durations and user
feedback.
The importance of addressing this problem is emphasized,
highlighting how disruptions and service directly improved
operational efficiency, decrease user satisfaction and
potentially don't significant financial losses.
3 identified problem categories examples file the challenge
performance issues impacting user experience, security,
security vulnerabilities, posing threats to data integrity and
compatibility issues causing workflow disruptions to
potential data loss.
Together, these facets on the score to multifaceted nature of
Earth and urgency, of tackling the system downtime issue.
This slide explores sniffing it, comprehending and defining
organizational process beyond your problem solving,
emphasizing and creation of a foundation for efficient
operations to continue improvement.
Benefits of this approach are outlined firstly through
documentation and standardization of IT processes,
ensuring consistency and clarity and operations.
Secondly, but so facilitating efficient troubleshooting,
providing a clear path for swift issue identification and
resolution.
And thirdly, enabling systematic improvements in seamless
knowledge transfer within the team.
The breakdown of IT processes and the physical and
transactional categories highlights the tangible and does
the elements crucial for organization organizational
functioning.
The conclusion reinforces that understanding and defining
processes aren't view aquatic exercises, but strategic
endeavors aimed at enhancing operational efficiency,
effective troubleshooting and Foster and continuous
improvement.
And knowledge transfer within the team.
And initial step of the process walk, which is part of the
measure, process.
The team carefully selects a specific process, such as
software deployment, defining clear starting and ending points
for focused examination, equalizing hands on involvement
in the chosen process, the tragic journey aims to gain a
comprehensive understanding of the workflow and identify
potential areas for improvement, creating a process that follows
involving systematic list and and visualization at each step
in the chosen process, serving as a tangible guide during the
hands on examination.
Walking there process entails a methodical exploration where the
team meticulously follows the map sequence, actively
validating its accuracy through observations and questions.
Image to verify alignment with the documented map and identify
areas for improvement.
Summarizing process observations, because pivotal as
a team prove actively updates the process map based on their
frequencies, evaluates and prioritizes benefit waste and
categorize issues by impact, resulting in a revised map
highlighting improvements.
Waste analysis follows systematically for examining
various types of ways and industry, laying the groundwork
for target interventions and efficiency enhancements, and the
concluding phase.
The team reached the benefits of the process simulation, using
keen insights to enhance understanding, streamline
operations and foster continuous cycle of improvement.
This iterative process that observed insights translates an
actual strategies, but we're finding optimizing workflows.
There is actually an acronym for this and I deleted a slide
because it was taking too long, but it's called down time.
It's the various ways that we actually lose time.
It's down.
Facts. Defects.
Overproduction. Waiting.
Non utilized talent, transportation, inventory motion
and extra processing is on the slide.
It's actually really incredible.
If you look into it a little further, the next step of the
phase is finding the root causes.
The focus is identifying the underlying issues that caused
this eruptions emphasizing and move beyond surface level
sentence to address fundamental problems.
The approach is illustrated in the IT context were frequent
system crashes may find their roots and software bug hardware
issues or insufficient testing.
This phase tested stage for targeted interventions by
delving into the core of the issue, shifting from improving
decision making to Ephesus is on enhancing the quality of
decisions through a deep understanding of processes.
Informed decision making is crucial for more effective
problem solving, as seen in the example of strategically
improving cybersecurity measures.
By analyzing the root causes security bridge the phase of
revealing opportunities for improvement underscores the
importance of uncovering where processes can be optimized or
streamlined, turning challenges and opportunities for
innovation.
For instance, analysts might identify opportunities to
automate a lengthy deployment process, reducing both time and
effort both practices for process analysis.
Stress staying within organizational boundaries to
focus on controllable improvements.
Fostering a collaborative problem solving approach.
Additionally, the importance of documenting the analysis process
is highlighted for transparency, replicability, and knowledge
transfer, and fostering a culture retinues improvement.
So the root cause thing is actually just asking 5
questions, and then every question is or every answer is
the next question.
There's a slide for that coming up, though.
Right here, the five wise technique is a straightforward
yet powerful method assigned to unearthed a root cause of the
problem through the repetitive asking of why the focus of the
proach extends beyond merely identifying symptoms.
To look in the fundamental cause behind an issue, episode a
process oriented perspective.
The technique directs attention away from blaming individuals
and instead encourages expiration of cause and effect
relationships.
By repeatedly questioning why this method unveils layer of
causation, enabling a more comprehensive of the issues at
hand and paving the way for targeted solutions.
And this example we see that in every answer from a question
becomes a.
Next question is this used to reach a deeper of the
understanding, this slide actually has a quick scenario
where there's a system downtime.
Why the system go down to server failed?
Why did the server fail?
Overheating.
Due to inadequate cooling and so on and so forth until you get to
the root cause that there was no maintenance schedule in this
phase and the improved phase, the primary goal is to address
root causes and minimize your current problems with an
operations.
Ultimately, enhancing reliability and stability, for
instance, to treating improvements, may include
implementing redundancy to four defy systems against server
failures and sharing them more robust.
Originally an environment moving on that implementing solutions
to your process changes.
Discussions revolve around modifying processes by adding,
deleting, or resequencing steps to maximum efficiency.
When illustrative example involves adjusting the
deployment process to incorporate automation, thereby
reducing manual interaction and improving operational
efficiency.
The presentation introduces 2 key methods for improvements.
The 5S methodology and Quick win solutions, the 5S methodology
and compasses sorting items, arranging them efficiently,
maintaining cleanliness, developing consistent task
implementation and conducting periodic audits for sustained
improvements.
Quick on solutions and contrast.
Focus on simple low less tranges where the media impact involving
procedural to related or communication adjustments.
The subsequent section outlines that how to for implementing
these improvements at the sizing, their early and
consistent application of the file.
That's methodology in both virtual and physical spaces,
yielding benefits such as improved organization, enhanced
efficiency, safety and elevated team morale.
Woo, quick one solutions meanwhile, are implemented by
identifying swift and cost effective changes ranging from
communication channel modifications to process step
revisions.
The comprehensive solution implementation plan details
correlated with efforts with process users.
Task identification responsibility assignment,
setting completion dates, regular progress monitoring and
thorough documentation of results with feedback
collection.
This systematic approach ensures a structured and accountable
implementation of improvements in processes.
The final stage of this process is to control side.
This slide underscores the importance of controlling the
coding documentation process through four key elements.
The initial focus is on creating a detailed SOP for coding
documentation, serving as a standardized reference for all
developers involved in the coding handoff.
The implementation involves including a documentation
checklist and strips for compliance with the SOP
distribute to all the team members.
Anella element aims to provide a visual representation of coding
documentation status, facilitating quick
identification for of any deviations from the established
process.
The implementation involves utilizing a visual board with
color coded markers or track completion to display a real
time dashboard for immediately update.
Subsequently, the objective is to summarize the results of the
improvement project and formalize approval for the new
documentation process actions encompass conducting a project
handoff meeting to discuss outcomes, securing approval from
relevant stakeholders to conclude the project and
ensuring all team members that well informed about sustained
changes.
Lastly, the element focused on monitoring and auditing
emphasizes periodic results to ensure ongoing compliance with
the new documentation process and prompt identification of
emerging issues or deviations.
Additionally, an underscores the establishment of continuous
feedback loop.
Purging team members to contribute feedback on process
effectiveness and incorporating valuable insights in the future
iteration.
That was a lot of information.
So what I did was I put together a small sample that we kind of
went over doing that, but I built it.
So we have an example case we see often a real world
development sample.
We are going to work through the scenario and see how we can
alter the process to be more efficient.
This first slide is.
This is a difficult problem centered on the inefficiencies
and handoff process between developers, primarily attributed
to inadequately designed or missing coding documentation.
The importance of this issue is underscored by US direct impact
on project completion, speed increase, error, likelihood and
communication challenges, impending knowledge transfer
among team members, specifically the defect issue is spotlighted
illustrating instances where code handoff occurs without a
comprehensive understanding of its functionality.
This deficiency not only diminishes the quality of
delivered code, but also extent debugging time, highlighting the
urgent necessity for optimized and efficient handoff process.
This is definitely something we've dealt with here.
The slide this slide delineates the targeted process while
designed specifically for the seamless handoff of Kobe between
developers and initiates, where a crucial step will choosing the
process setting on a handoff, a pivotal phase within a
development workflow.
Subsequently, the creation of a detailed process map portfolios
compassing initial coding documentation, and the
subsequent handoff to another developer.
This visual guide there's a comprehensive reference for the
entire sequence a team embarks on a process walk.
Meticulous adherence to the process map is absurd, with the
keen focus on each state throughout this journey.
Questions are posed to uncover potential delays or challenges,
and comprehending the code the identificational waste
encapsulate the downtime framework, defects waiting time
and extra processing takes center stage episodes in the
critical need to address and rectify these inefficiencies.
This segment employs the five wires technique.
Uncover the root causes behind the incomplete or missing
documentation.
The coding handoff process.
The analysis reveals that developers are not prioritizing
documentation due to a lack of awareness regarding its impact
in the handoff process.
This lack of awareness is traced back to the absence of
standardized document process further attributed to a lack of
guidelines or training for developers, ultimately stemming
from being overlooked in the onboarding process and
conclusion.
The root causes identified is the overall deficiency in
awareness and training on the importance of documentation.
This side introduces the 5S methodology.
A and quick win solutions to adjust the root cause of
complete, incomplete or missing documentation.
The 5S methodology prioritized coding.
Documentation establishes a standardized guidelines.
Lost my place three in the case.
Importance of clear documentation implements a
process and ensures sustainability through regular
training sessions as a quick win solution.
A documentation checklist is proposed for developers to
follow before code handoff the solution.
It would limitation plan boss collaborating with the
development team, creating and distributing.
Documentation guidelines, schedule training sessions and
monitoring adherence to the new process, ensuring a systematic
and sustained enhancement in the coding handoff.
This section outlines the key strategies for enhancing a code
and documentation process.
Standard operating procedures advocate for documenting the
process, integrating a checklist into the coding handoff
procedure, and conducting periodic audits for ongoing
compliance.
Visual management.
Emphasized the implementation of a visual board with color coded
markers providing real time updates on documentation status.
Additionally, the project handoff phase involves
summarizing project results and controls accompanied by thorough
documentation and approval for the newly established process.
These combined approaches ensure a systematic and visually
accessible framework, promoting clarity, compliance and
transparency throughout the code and call it off.
So in the end, by applying dmaic to the issue of poor coding
documentation, we have identified the root cause,
implemented improvements in established controls for
sustained efficiency at the coding handoff process, is now
streamlined, resulting in quicker understanding of code
and reduce debugging time.
Uh, what's next?
With the advancement of AI in the workplace, increasing
efficiency should become much more familiar and accessible to
employees and industries alike.
As more and more companies dive into exploring systems that can
leverage to their advantage, it is important to note that the
tool's AI offers are only as effective as the users are
willing to utilize them.
Read that one slowly.
Again, for me, please.
For instance, we all use chat, GPT or similar tools and
navigate complex topics or streamline the process and as a
result, we've all seen how erroneous that the results can
be.
I urge you to keep this in mind when looking for ways to get
things accomplished and efficient manner in both your
personal professional life.
These are extremely useful tools and can vastly improve the
quality and speed at which tasks are done, but only if carefully
used and never blindly trusted.
Remember the information you teach today will be used to
build future iterations of itself.
We want it to be an accurate and trustworthy tool as we explore
the as we build an explorer for future of the humanity.
In conclusion, we explored the value of bringing efficiency
techniques and processes to the field of Internet technologies
and handle real world example we see often.
I hope that this presentation helps drive forward your ability
to see future interest.
You can issues you can prove upon as we will all need
resources available to continue to advance technologically.
If we bring these processes and combine their engineering
processes such as TDD, separation of concerns and
working iteratively, we believe, I believe we will create a, but
we will create better code faster.
Thank you.
Here is my presentation slide.
I highly recommend modern software engineering as a book.
I actually recommend it for anyone that does anything in IT.
There are some things in there.
I think security professional could get out of there too.
Umm yeah, that's it.
It was long.
Yeah.
Any questions?
Excellent.
Now, excellent job.
Seriously.
Good job.
That was a lot.
Yeah, I was.
I was going really fast, so I was worried I wasn't a bell.
Explain everything as well.
I actually have notes.
I deleted a lot of slides.
I went through it.
I'm like, oh boy.
Yeah, that's not 15 minutes.
No, it's a lot of information.
Yeah, it is.
When it comes to this, you know Six Sigma, there's a lot to, but
I mean and you wanna tell somebody, you wanna explain it
to them? But.
You you do like the the overall thing that I was trying.
Yeah, it is a.
It's a lot of information, but overall like I urge you guys and
there's just more ways like some of what we talked about actually
was talked about earlier in various processes and other
things like it's really important to find ways to do
things efficiency efficiently because there's just as things
get faster and improve, it's actually going to make like IT
security, for instance, like the more efficient we get at finding
a particular set of threats, the less likely they're going to
happen.
And the faster we can block them, and that's just going to
help everybody out going down the road.
Right, yeah.
Yeah.
When it comes down to it, that's what it is, right?
It does take a course of itself, right?
I mean, it really need to take a course into 6 Sigma and all of
this just to be efficient enough.
It's it's.
It's insane.
Actually, I think they're current training course is 32
hours.
I believe it.
I enjoyed it.
I.
I enjoyed it in my class.
I enjoyed it too.
I I don't, it does help.
It was nice.
It does.
It didn't make me anymore efficient cause now I'm just
crazy here, but it at least I know where I'm supposed to be
at.
I mean, a lot of it's common sense, but I like how they laid
it out and that's and it's a system like so like I part of it
Yeah.
was inspired.
I did this because, well, one.
You know we've we've all come in here.
We're rotating door and the documentation could be a little
better from the coding perspective.
That's on us interns, and that's something I'm working on fixing
Yeah.
with ancient Civ right now.
That's actually what we're focusing on this week, but my
work actually implements this and some of the things I notice
is they don't even follow this process correctly is if you're
going to implement this process, I beg you to please involve the
people that actually do the process, don't engineer solution
Yep.
and then force it on people and then be like, well, doesn't it
work?
The papers there don't be that guy, but that's it.
Right.
That's true, absolutely.
Well, great job.
Wonderful. Wonderful.
And finally, Matthew Gomez, Are you ready after all that?
I am ready.
Can everybody hear me as well?
I can.
OK, perfect.
Let me get my screen up.
I can everybody see my presentation as well.
Yes.
Perfect.
Alright, so I'm Matt Gomez.
I'm doing my master class presentation tonight on aviation
cybersecurity risk.
That's kind of a misleading term because it has to do more with
modernization of the national airspace system and current
aircraft.
That is my day job that I do.
I fly helicopters for a living, so I had a good understanding of
kind of the top, the aviation side of this coming into it and
then wanted to get really into the cybersecurity side of it.
As I've started to learn and see some of these threats that are
starting that have the that have already developed and have the
future potential to become even more detrimental as the
modernization process kind of begins, so too far alright.
So start with a little bit of background.
So in order to kind of understand how important the
whole cybersecurity aspect is with aviation, you have to
really kind of look at how important the national airspace
is for the United States and kind of what it encompasses.
So as you can see by the numbers up there, there's 45,000 flights
a day.
That was last year's statistics.
They're just going up again.
This is all statistics from the FAA from 2022.
This year's statistics should be out usually about mid year.
They post what happened during the previous year, about almost
3,000,000 passengers daily.
The national airspace system, that's between like air traffic
controllers, all the network infrastructure people.
Umm, the ground control people and encompass.
This is about 11 million jobs across the United States, so
it's a huge source of income for the US and the aviation industry
as a whole.
You can see the numbers there, but it's over 5,000,000 square
miles of actual land mass, and then another 24 million over the
water.
And there's a lot of other statistics that come with that.
If you're interested in, I recommend looking at the FAA
website.
No, you're the.
Some of them are just like 20,000 / 20,000 public and
private airports, 500 air traffic control towers.
So you can see the the the problem with creating a new
modernized air traffic control system as well as the security
risk.
2nd that will be involved with it.
Alright, so a little bit of history here.
O both the national airspace and aircraft are starting to undergo
an analog to digital transformation.
Analog navigational systems used to be just all ground based, so
if you can picture it's it's like a radio tower on the ground
that transmit a signal and in your aircraft you could tune it
up and that's how you would navigate to it.
That's relatively secure.
Secure because everybody has access to it.
So there's no real way to alter it at all, and the facilities
themselves were guarded, right?
So their offense, they're fenced areas with a bunch of umm, you
know, security and everything else around and regular
maintenance that goes on.
Those have been around since the 20s, and as those are dying,
they're causing it's taking too much money to keep them running.
With the advent of the next big process that became into place
for navigation was which was GPS.
The first one certified in like 1994 and is gradually become the
most predominant uh way that people that pilots and air
traffic controllers are using to locate aircraft and navigate.
So that's it requires like no maintenance because it's
obviously their satellites up in space that require no
maintenance at least behalf on any major corporation here the
government was the ones who launched GPS originally and then
opened it for public use.
Uh radars continuously improved over the decades, and most of
the digital systems are almost all the systems have
transitioned to digital.
So as you can see, that's just for the national airspace side.
As you can see down there on the left hand side, there's the
paper flight strips.
Those paper flight strips have been around forever and they are
still in use today as a as like a tertiary backup to systems
going down.
They're trying to get away from that in its entirely.
That's just one small step of the the digitization of the
national airspace system and the proposed so the proposed
Huh.
electronic flight strip display is what you see there.
It's much easier to read all the same information and everything
Wow.
in there, but all that data can either be manually input or fed
from a system into.
Into the system so that you all the controllers have access to
that and as far as the aircraft goes, so aircraft
instrumentation, if you can see it on the left, there used to be
we call them steam gauges used to be all systems that were read
through like a pedo static tube or some other version of a
system.
And that's completely contained inside the aircraft.
And that so that's where all that information would go before
recently or over for quite a few years now, about 2 decades,
they've been transitioning slowly over to what we like.
Yeah, what's referred to as a glass cockpit, which is a
digital cockpit.
And you can see that.
So all those systems still are still into play.
All the normal aircraft systems are still in play, but those
analog systems and a lot of cases are fed into a digital
converter and then it'll display up on the screen for you there
instead.
So instead of having to have six or seven different instruments
that you have to keep looking around to try to locate what's
going on, it's all nicely displayed on one screen.
Plus, moving maps and approach plates and things along those
lines.
Almost all systems.
So there are usually most aircraft have a redundant
system.
That's completely tied away from the digital side, where it's
still old steam gauges.
So if something was to happen, such as like a like a complete
electrical failure or something along those lines in the
aircraft, you still have those references to go back to.
Alright, so obviously there's advantages and disadvantages to
both the national airspace and aircraft going into this digital
world.
One of them is the the decrease in pilot in ATC workload.
So by digitizing by digitalizing all these all these systems and
allowing computers to take over a lot of it, instead of having
to repeatedly make calls to air like your air traffic controller
or pilots calling the air traffic controller air traffic
controller, calling them, or talking between pilots, most of
the systems nowadays have a digital signal that's sent that
is incorporated into the majority of aircraft now, so
that as you look on your screen, if they're saying, hey, there's
an aircraft you need to be on the lookout for, you can look on
your on your screen.
And even without a radar equipped aircraft, that signals
being sent and it'll pop up on the screen.
So it makes it super easy to identify and locate where
hazards could be.
It's also way faster, way faster and more efficient as opposed,
you know, getting rid of all the cross talking and it increased
situational awareness.
So instead of just the air traffic controllers having a
single radar picture of everything that's going on in
their area, pilots also have a can get that same amount of
information and they can filter through what they want.
We talked about the glass cockpit a little bit earlier and
in that glass cockpit you have layers that you can select or
deselect.
So if the screen is too cluttered, you're trying to
really focus in on one thing.
You can go through layers and kind of deselect the things that
you don't want.
Umm, it's reduced emissions a lot.
There's a lot more information as far as weather and winds and
stuff like that that are that you can get inside the aircraft
now.
So it helps reduce emissions and it helps create better flight
plans and routing so that you're not burning as much gas as you
normally would.
And it is relatively safer for the most part.
It gives everybody a better understanding of what's going
on, but over the last 15 or so years that I've been doing this,
you can definitely see that people, instead of being focused
outside of the aircraft all the times, tend to get focused kind
of inside.
It's just like watching TV at home.
Right, you cannot always have it in the background.
People tend to kind of get focused inside of there, so it's
really important.
That's why most airlines have to pilots is so that if ones
working on flight management systems or something inside the
aircraft, the other one can focus outside on what's going on
around them.
So the big disadvantages now.
So there's a lot of different types of systems they're trying
to incorporate between the universal like radar picture,
all the transponder information, the sending of flight logs
almost completely digitally as opposed to telephonic.
Now a bunch of that stuff is all in there.
Well, in typical government fashion, there's contractors and
other sources from all over the world that are from all over the
world that are that have their hands in the pot, right.
So there's a lot of different systems that are being kind of
built in a bubble almost.
And then those systems at some point gonna have to all be
incorporated together.
And that's why this process is expected to take, I think until
2030 is the forecast right now.
So it's a slow moving process trying to get this all going and
not only is it different types of systems, but there's several
different programming languages.
So CC I've seen on there Python is actually being incorporated
into the entire system now as well as it's 80 or 80 AI.
Of those one I had never heard of before, but that's primarily
what aircraft are programmed, like their flight management
systems to computers on board are focused on that.
It is extremely high financial cost.
This started about four years ago and the forecast by 2030,
when the program is supposed to be complete, is $35 billion.
That's with a B, so it's going to be a good amount of money in
order to get this system up and running.
Uh, and as discussed large, it's a large and diverse architecture
which is going to result in huge amount of complexity.
Alright, so now that we've kind of got the background and how
everything works out of the way, we'll talk about kind of this
the well, the specific risks to aviation personal data.
So there's the passenger government, airline employee
information.
The the goal is to have all this information integrated for
people who have authorization and authentication to be able to
get in there to access this information, but with everything
being integrated like that and with it being built by as many
different personnel and as many different companies as it is,
there's always the the the chance that there is, you know,
a small flaw on somebody's code that leads into somebody else's
and that just continues as we
start to, you know, as this process continues, the
proprietary data, so the aviation industry is a highly,
highly secretive industry for the most part.
Umm, companies that build engines don't want to share
their information with other companies that build engines
because as they get something that's, you know, even if it's
only three or 4% efficiency rating increase that information
3 or 4% per flight over the course of you know 45,000
flights a day equates to millions in into the billions of
dollars.
And that also opens the government up for a lot of risk
as well too, with anything that they have stored in those
systems, they're going to be in kind of a big they, they have
the potential to have some of their information accessed as
well as far as cyber attack goes.
So the distributed denial of service that would also the
aviation runs primarily based off of, you know, redundancy
efficiency and speed, right and accuracy, those are the things
that you need in order to have that many people up in the air
at a time and any kind of delay or denial of that service would
be huge.
And that kind of goes right into ransomware, where ransomware, if
for some reason somebody is able to get in there and shut down
the system, there's there's a huge risk associated with that,
that being that there's, you know, aircraft in the air that
can no longer communicate in worst case scenario and have to
find their own way to the ground after that, uh.
Or that even just certain parameters of it are locked out,
which could really slow down the process and but a lot of people
at risk every day are the risk to supply chain.
So I I couldn't remember the exact number when I looked at
it, but it's into the millions of tons of cargo that are moved
by air every day.
So I think the only industry that moves more cargo regularly
is the trucking industry.
So not having aviation around in order to move that stuff based
off of a cyber attack would significantly cause a huge
increase in cost as well as everybody waiting for their
stuff.
I rolled GPS spoofing into there.
But that's where somebody just takes a signal similar to a GPS
signal that you're supposed to be getting from space and allow
you and allows to pull, give false GPS data, which that could
be.
Also, another huge issue as the aviation has transition
primarily over to almost almost exclusively GPS at this point.
Most of the ground based navigation stuff is gone.
Insider threats always going to be there, new technologies, so
I'll touch on this one just for an extra minute or two cause
this kind of affected us over the last couple of years.
So when 5G came out, there wasn't a lot of discussion with
aviation or a lot of research done with aviation as to how
that was gonna affect it.
And everybody's now it should be all right.
It wasn't really all right.
There's a couple of systems on the aircraft that use the same
about the same bandwidth as signaling to determine like a
radar distance from the ground.
Well, 5G was interfering with that and giving either no
readouts or erroneous readouts at that time.
There are other systems in place to help prevent that from
becoming a big issue, but it caused a it caused a huge issue
and a lot of critical components on the aircraft had to be
updated with new filters or whatever else to fix the
problem, and the one that I found the most interesting
during the research of this was in flight Wi-Fi in the risk that
that pose there was a case about three or four years ago where a
white hat hacker thinks I think it was Jason talked about it
earlier, there was a white hat hacker who got on board an
aircraft and wanted to see if through the in flight Wi-Fi he
was able to access any other sort of information.
And this dude was apparently pretty skilled and was able to
get not only in through the in flight Wi-Fi into the rest of
the systems, but systems that are supposed to be not
integrated into the in flight Wi-Fi.
There were the exact way he got in.
There is still not really explained well, but from what I
read it looks like he was able to get in through components
that were controlling the electrical system because you
need the electricity for the Wi-Fi and then use that to
actually get into a component on the aircraft that controls like
fuel metering to the engine and was able to initiate a climb
from an aircraft in his from the passenger seat by issuing a
climb command in the code.
God.
So that's a that was a pretty big one.
That guy actually went to jail for that, by the way.
So that's that was a huge one.
The FBI investigated it and there's been a lot of other
people who said they were able to access it.
A lot of people and the aviation industry are saying it's not
possible, but there's been quite a few cases recently that said,
yeah, there's there's some pretty significant risk with
just having Wi-Fi on board because it does at some in some
way, it has to tie into the the aircraft systems, even if it's
just through getting power from the generators.
Alright, so the biggest threats, this is just my opinion on what
the biggest threats are.
I believe the biggest threats are gonna be the nation, state
Yeah.
insider threat and activists, hacktivists being the least
Ohh.
amount.
That's all going to be a lot of people who are just trying to
make a name for themselves and prove a point, whether it's
through environmental, environmental agencies or
whatever else insider threat, I believe is probably the most
likely.
And my thought process behind why it is is with as many people
as are gonna have to be involved in this process.
They're gonna.
There's gonna be a chance that somebody is that somebody gets
clearance to something that they shouldn't have.
We would hope that doesn't happen, but if it does, and
depending on their level of access and their level of
knowledge and skill, that could really pose a huge issue with
the upgrade to the national airspace system and then the
next biggest threat would be nation state that would I put
them #2 on the list.
I forgot to reorder these earlier, but they would be #2 on
the list just based off of the fact that if you really wanted
to disrupt, we've talked about the amount of people you know,
almost 3 million people a day that are moved across the United
States and the millions of tons of cargo that are moved based
off of aircraft and the national airspace.
If they really wanted to kind of bring things to a halt in the
United States and slow things down, we'd still always have the
trucks in the trains and everything to move everything.
But that takes a lot longer, so if you wanted to slow things
down or try to cripple things that the nation state actor
would definitely be the one that I would be the most concerned
about.
OK, so mitigation steps you can see them on there, but the best
way to mitigate any of these cybersecurity threats to the
national airspace would be through proper planning and
implementation and updating and auditing of the system.
The incident response plan for this would be critical.
I would not want any part in writing this process because I
could only imagine how in depth and how huge this would have to
be to make things work.
Even if you're looking at just a local standpoint from a small
airport all the way up to the national level, this would be
huge.
It would be quite, quite the battle, I think, to get that all
into place.
We would also have to have multiple redundant systems.
Again, uh, that's going to be we I showed earlier.
How it's a, you know, most of the stuff done digitally, but
they even still have paper.
The paper flight logs that are kept, so we would still have to
have at least multiple redundant systems and even maybe one per
major airport, where if the outside network is attacked they
can shut it down and operate independently locally.
Something along those lines.
Threat detection is going to be another big one.
Being able to identify new threats that are out there, and
the vetting of critical positions that's going to be an
absolute must, making sure you have the the right people in
place that are going to have access to those to that
information and to those systems.
The other one that I think we do a pretty terrible job at is the
trusted information sharing.
We like to keep all of our little secrets to ourselves, but
there's only so much that you can learn on your own without
having to reach out to other people.
So there has to be really well established lanes for sharing
this information and being able to not only receive information
from people, but also be able to give that information back.
Alright, so at the end of all this, is it worth it?
I would say absolutely.
I think the process has been, it's pretty well thought out and
design now they're taking their time implementing it and slow
phases to make sure things are working as we get.
Next thing as we get to the next steps, they're making sure the
previous steps are working and then before they integrate
another steps like an agile process.
They're integrating new steps only after the old steps are
good, and then checking the new steps before they're fully
integrated.
Uh, the risk definitely outweigh the rewards.
I'm sorry the the risks.
The rewards definitely outweigh the risks with this.
It should help reduce a lot of cost and improve efficiency and
make air travel safer and a little more enjoyable for
everybody around.
I have my questions if anybody has them and then I'll pull up
my reference slide if anybody has any questions, feel free.
Thank you.
There's a lot of information, I'm guessing.
A lot of the software that uh air facilities use is very
similar to what the car manufacturers are doing.
There's just no communication between the two of them, so
every airplane's different.
They actually do a pretty good job of sharing overall.
Believe it or not, as far as far as non proprietary stuff.
But yeah, it's the the it's.
I like seeing this, this automated car thing kind of take
place because aircraft have been doing, you know, if you want to
call like flight management or autopilot for for decades now,
right?
It's the safest way to do it for the most part is to let the
computer do the fly in a lot of situations, so it is funny to
see the stuff that they are willing to share.
Sometimes you're like, oh, there's no way that they're
going share that and they will.
And then there are other times you're like they're guaranteed
to do it and they're like, Nope, absolutely is proprietary.
We're not sharing anything.
That's not what the mood takes him, huh?
Yeah, it depends on what the mood takes and what their what
their boss tells them they can share or not.
Course yeah, that was excellent.
Great job.
Lots of information that was a great job.
Yeah, you guys all did a great job.
It's.
Yeah, it's.
I loved you present.
Absolutely.
And I think we all just need to.
That's the next project for the internship is we need to come up
with our beaming machine.
So we don't have to worry about all that, just.
Yeah, I was trying not to freak every.
I had a lot more case studies out there and I was like, I'm
not gonna freak everybody out and make money.
Air travel is still the safest way to go, so it really is, but
Yes. Yeah.
there's just a lot of things everybody's gonna have to work
through.
It is really safe though, and they have so many I've got a
chance to visit Seattle Center.
That's like the big controlling area around Seattle, which is
one of the biggest airports in the United States and the world,
and the redundant systems they have.
There are crazy like even if they lose complete power to the
facility, they have backup generators and those backup
generators have their own backup generators and there's like no
downtime in between.
They just automatically kick on.
It's pretty neat.
They have a lot of stuff in place, so feel comfortable
flying.
Well, then we got we got we need SOP's from them to work on to go
to the next ones.
We need these these standards to go to every, especially in New
That's right.
York and the rest of those.
You know, there's just some of those airports are terrible.
Yeah.
Those they, they have a pretty, pretty well justified, uh, are
pretty well established standard for every airport kind of based
off of their their level of business that they have.
But people execute it in different manners.
Yeah, I'll never fly out of Dallas again.
By the way, that's one of the worst places I've I've delayed
there every time I go so.
I I know.
I yeah, I've been flying.
I would say ever since I was born, because I have your family
in Europe.
So, you know, we've been flying forever and I've never been
afraid of flying till almost most recently.
It's like the people in the plane make me nervous is what's
Yeah, it's not the pilots or the plane, right?
happening now.
It's not even the pilot yet.
It's the people on board, yeah.
It's the people on board make me nervous.
Like who's gonna freak out?
Who's gonna cause a problem?
And who's going to like, you know, make everybody go slower
and and all that it's just it's ridiculous.
Now when I'm back from, you know, back in the 80s when it
was really easy to just sit back, relax, take all the
luggage.
You ever needed you get really good food and you know it was
nice back then when we flew around so.
Took 10 minutes to get through security, yeah.
Yeah, absolutely, yeah.
Ohh, those days this was excellent.
All of you did a great, great job.
Alexis, you're ready to to start the beeping project.
We need a a beaming machine.
Ohh yeah, I was.
I was wondering what what's the beaming machine or like what's
If he, if you're not, if you're not aware some.
the?
I'm so sorry that happened.
Well, some people, you know, there might be younger, not
realize the beam me up Scotty.
Umm, beat me outta here.
Yeah, I know that.
OK.
Yeah, you gotta.
That's that's my humor.
No, I got.
So I mean, I don't even know if I would want to go through that
Yeah, yeah, I got.
anyways.
Just kind of that's scary in itself.
The beaming like like are you?
Be to to beam over somewhere you just like.
You're just.
You're totally.
Like light.
Like teleported, yeah.
You're teleported.
Uh.
Yeah.
Oh.
Thank you.
Oh, OK.
They they actually did successfully get quantum and
The transporter.
take a look to work, which is where two atoms are nowhere near
each other and they actually do the exact same thing.
They actually got that to work very recently.
Particles they got to do it very recently.
What is it called?
Quantum entanglement.
Ohh quantum.
Course course. Yep.
It's sorry.
Didn't mean interrupt quantum entanglement.
I think teleportation is really gonna be a thing.
I don't know if it will be in like my or hour like generation
Right, right.
I, but then again I think it's gonna happen.
Like, maybe that's just me and my dreamer myself, but I think
it's gonna happen soon, like 30 years.
I was young enough.
There's.
I'm younger.
I'm old enough now to know that I thought in the year 2000 we'd
have flying cars as well, and here we are still driving cars.
Right.
Yeah, I know exactly.
We had a lot of, we had a lot of expectations back when we were
younger, but we look at it now and it's like of course I had a
map that used to be on my wall.
That said, in 2000, you know, everything was gonna be flooded
in Florida was gonna be gone to Mississippi.
Would have a a port city and oh I had this.
Yeah.
This map was just incredible.
And what do you call it?
What's the?
The island that's actually in the ocean that's supposed to
come back up Atlantis.
Thank you.
It's.
Awareness.
What's that?
Ohh.
Atlantis was supposed to come back up.
Yes, that was in that map.
That's crazy map.
I remember I remember.
Yeah.
Atlantis was supposed to come back up in Florida, was supposed
Gone.
to be underwater around like, either now or 20 to one. Yeah.
California gone.
Yes, the whole thing.
The thing is, Michael, Skyler or something.
I can't remember the name of the guy that came up with that when
prophet, he says sure, we just liked it in 2000, has been gone
and I'm here in Florida.
Yeah.
Sometimes it feels like it will flood, but it's not going to.
I tell you what, if it does, I live in lower Alabama.
All actually have ocean front property then, so it'll be real
Then yes, you will.
good.
Yeah, that's why I was.
I was hoping that maybe Tallahassee would stay.
As opposed to driving an hour and a half to the beach?
I'll be right there.
That's fair.
That's awesome, right?
That's fair.
I get it now about the teleportation.
Yeah.
There we go.
I get it.
Like if I can use my words, yes, the find my words, I'll say it
Same.
right.
But yes, teleportation machine.
Let's get on with it.
Thank.
Thank you. Yeah.
You better buy a boat.
Thank you everybody.
Everybody did a great job.
Umm, this will go up on UMI getting somebody to go ahead and
put everything up on PGI pods.
I need to meet with them and work with them.
Hopefully I can meet with them tomorrow if they don't already
know what it is to do, I try to give them as much information as
possible ahead of time and hopefully we can get all of
these master classes on PJ pods.
I would also suggest if you want to to take your presentation and
narrate it, put it on LinkedIn, use it as something to get a
job.
I was just thinking, why don't we do that in the 1st place, but
because I want you to be able to answer questions and want you to
be here and I want you to be able to narrate or resent it.
But maybe you should narrate it now and go ahead and use it as
something that you can use in your portfolio for your resume.
Something that will help you because I have had students get
jobs just because of the presentations.
O it is something that we can use as well and we can start UM
giving out to people who, you know, want to see things
happening.
We can present that kind of stuff a little further.
Umm, we'll see.
But I'm trying to dig on, see what I can find.
Thank you everybody for such a great job and great topics.
Umm have a great rest of your evening and a good weekend and I
will see you soon.
Back.
Goodnight.
Thank you.