Welcome, welcome everyone to the Masterclass for this week.
I'm.
Let's see.
8:00 PM December 21st, 2023.
I'm already confused and I gotta turn to 24 just around the
corner.
This will be our last one for this 2023.
Let's make it a blast and I'm so looking forward to all of these
presentations this evening.
We have some really good ones and umm, let's get going.
1st on the agenda tonight is Brian Weaver.
Are you ready?
I'm ready.
Let me start my stream.
Take it away.
Can everyone see my screen?
Yes it can.
Yeah.
OK, great.
OK.
Good evening everyone.
My name is Brian Weaver, and welcome to this presentation
titled Credential Access, a Pivotal Step in an attacker's
plan.
Plan if you have any questions, feel free to ask them at the end
as there will be a question section.
So let's get started.
This presentation is going to go over multiple different topics,
including a new phrase regarding modern IT infrastructure, common
credential access attacks, as well as mitigations to these
attacks, so a lot to cover, but let's get started.
So first, let's talk about the phrase identity.
Is the new perimeter.
This is a phrase you may see on Asaka and Microsoft websites,
but what does it mean?
Well, what it means is that no longer our companies, depending
only on their internal IT resources.
If we think about it 2025 years ago, everything including web
server, database servers, etcetera were inside the
company's physical infrastructure.
But that's no longer the case with software as a service.
Solutions such as Microsoft 365 and Google Workspace
Infrastructure as a service solutions such as Azure, AWS and
Google Cloud platform as well as cloud storage solutions such as
Box, Dropbox, and OneDrive companies, are becoming
increasingly dependent on these external providers.
But what's the difference between a physical
infrastructure and a software as a service solution?
Well, instead of a physical infrastructure, having security
guards, cameras, etcetera, all you need to get into an AWS
account is an email and a password.
And this is the fundamental reason why attackers will want
to attack these credentials as soon as you get access to email
and password to let's just say the global administrator
account.
You potentially have access to all of the servers on an for an
example and Azure IT infrastructure.
So that is what this presentation is going to
discuss.
The different forms of credential access to tab attacks
described in minors attack framework.
This is not a good going to be an exhaustive list.
Ness attackers are getting very smart these days, but just a
little bit just so we can get an understanding of some of the
common attacks out there.
If anyone wants to see any more information about this, minor
has a great attack framework that is available for anyone to
view.
So the first form of attack is a password cracking attack.
Now, this attack requires that a threat actor has a hash to crack
the passwords of a user.
Now this is an important distinguishment, so let's first
talk about what a hash is.
A hash is a one way cryptographic algorithm that
takes a plaintext for an example password and converts it to an
irreversible string.
The benefit of using a hash it's not encryption in terms of it's,
You bye.
it's not encryption in terms of where you can decrypt and
encrypt over and over again.
But a hash is meant for the secure storage.
For an example, passwords in which let's just say you had a
database administrator, you do not want them to see the
underlying passwords for all the user accounts.
So hashes are a great thing and security, but they also have a
fundamental issue.
Hashes are consistent if you and take the same plaintext, it will
always result in the same hash.
Now if you use the salt, it will randomize it, but it's still not
full proof and this means that an attacker, even though I said
earlier that a hash is a one way cryptographic algorithm and
attacker can just guess and hash this over and over again.
Of course you could do this manually, but it would take a
very prolonged period of time, but with modern it computing you
can attempt 10,000 to 1 billion passwords per second.
So if you have a password that's in the top 10,000, for instance,
potentially your password can be cracked in less than a second or
a few seconds, which is why a password policies which we'll
get into later is such an important aspect.
Now an attacker can also utilize multiple different methods to
crack passwords in order to increase, decrease the amount of
time it takes to crack a password.
First you have dictionary attacks which utilize a list.
This is could be very effective because we know users use the
same passwords.
So if you just get a talked 1000 password lists, you could
potentially crack many passwords just without even having to go
through a longer deal.
However, that's not always successful, so some attackers
will use a brute force attack.
A pure brute force attack which will attempt every single
password possible, so it will start at maybe 1 character and
two characters and it will just keep going.
It can take pretty much an unlimited amount of time if
necessary, and then of course you have a hybrid attack which
will actually use both actually on the right side of your screen
is an actual screenshot that I took all of utilizing a password
cracker named John the Ripper to crack the root password on a
Linux system.
This was actually in Tryhackme and anyone can actually attempt
the same as well.
Now on a completely different end of the spectrum, we have
something called a password spraying attack.
This attack is different than a password cracking attack, and
that you don't need any hashes.
Instead, the attacker is going to exploit the fact that many
users still use common passwords.
According to Norpass, that still with the most common passwords
surprisingly is 123456.
So instead of going through all the exhaustive work, I'm trying
to crack a hash.
Why don't you just attempt the easiest passwords with hundreds
or thousands of users, and potentially one of them will
stick, and that is what attackers will do, and this is
something that is another reason why password spraying is also
very effective is because and attacker will only attempt a few
passwords, maybe a three or five.
The reason for this is that because they're only attempting
a few passwords, it will never alert that an account lockout,
because if you try 20 or 30.
OK, we're gonna lock your account because you're trying
too much, but because you're only trying maybe two or three,
but with thousands of users, you won't.
You won't raise any alarms in.
Potentially you can break into a few accounts, so this is also an
attack that is prevalent and should be watched out for.
If you're a security profession.
Another form of attack is called a credential stuffing attack.
Now this is another one that's also prevalent and was actually
utilized in a recent hack as well.
This attack exploits the problem that many people reuse their
passwords.
We know that over 60% of users reuse passwords and of course
this was a survey so most likely people is more than this, but
people didn't want to admit it.
And what will end up happening is let's just say we have an
example of staples.
Let's just say Staples, which was actually recently hacked,
but nothing regarding passwords.
But let's just say Staples was hacked and in this database an
attacker successfully figures out that John Doe has a password
of 1959.
Well, because we know that 60% of users reuse their passwords
and obviously staples is not the most high value account.
It's what is more valuable is John's email, as if you have
access to someone's email, you could potentially reset all of
their passwords, so the prize is John's Gmail account, but Gmail
hasn't been hacked recently, so the attacker is.
There's no, there's nothing he can do.
Well, actually what he can do is just attempt the same password
from this previous data breach and attempt it on Gmail and this
will actually surprisingly work because we know that people
reuse passwords.
So why go through all the work of trying to hack Gmail when you
can just use a password that's already been breached?
And this is very concerning as there are breaches across the
board and there can be breaches that none of us know about on an
account that we barely even etilize and that same password
we're using for a very high value account, such as banking
or email.
And this is and also it's very dangerous because it doesn't
require any IT infrastructure like any heavy.
Uh heavy computing, for example, to complete as you're just using
a previously discovered password now to prevent this password
reuse, many people recommend the use of a password manager.
However, password managers have their own issues as well.
This is because password managers have deepened their
main authentication method.
Is again an email and a password.
So for instance, if you said OK, I'm gonna move all my passwords
to password manager such as LastPass.
But then you make the password to LastPass very easy, like
password 123 exclamation point it.
You've effectively just made the issue worse.
As of now, if an attacker attacks your password manager,
it has he has access to all of your passwords, not just one
account.
And this credential stuffing attack which we were just
mentioning can also be utilized against password managers.
So password managers are not bad, but you have to make sure
that you're not just reliving the problem.
Instead, use a unique password as long and complicated, so an
attacker cannot guess your password manager password.
And lastly, we we have a completely different form of
attack.
Instead of an active role, you have a passive role.
Keyloggers are software or hardware solutions that will
record every keystroke, uh.
Which potentially can be very detrimental to user security
simply because imagine everything you type is being
recorded.
Social Security numbers.
Passwords, usernames, email, communications, credit card
numbers with the CVV.
All of that will be captured just given enough time, and this
is extremely critical in public computing.
Imagine a library in airport would have shared computer
device.
Most of us are now looking at the USB ports to see if there's
any sort of weird device, and as we see on the screen, this is a
very small USB.
This is a key logger that you can purchase.
This would not seem very suspicious.
It just looks like a normal USB.
Maybe someone left their Logitech keyboard connected?
Nothing.
Not a big deal, but instead it's actually reporting all of your
keystrokes.
So this is another form of attack that also has to be
looked at and also in there is one mitigation that we'll talk
about later in which can help decrease the impact of the key
Walker attack.
So after we discussed these different attacks, let's talk
about 3 mitigations that we can that us we can implement.
If there are us that are going to be a security professionals
in an organization to prevent the widespread attacks that we
just seen before the first one is password policies.
Of course, the most optimal scenario.
Most everything we're talking about today was passwords.
If we could just get rid of passwords, everything would be
pretty much good, but we can't do that right now.
It's not possible.
It's not every not every application can support removing
passwords, so instead organization can move towards
making stronger passwords and we can utilize guidelines from the
National Institute of Standards and Technology which give a few
guidelines on what you should implement for your passwords.
One minimum of eight characters.
This is to prevent a brute force attack.
For example, every character adds more and more complication
as that means more and more potential passwords, which means
a longer time to correct.
Also you have make sure that there are no complexity
requirements.
This is actually strange as you most of us may feel that we've
seen websites where they need 1 #1 letter, one capital and one
symbol, but instead this is can actually one.
It's very predictable, even though everyone knows we're
gonna use it a capital letters gonna make it a little bit more
complicated, but in reality, most of us probably agree that
we put the capital letter in the first in the 1st digit or the
number for an example.
It's very predictable and also what this will make is that any
form of passphrase, for example three random words such as
animation, Parker and Tablet 3 random words, long amount of
characters is gonna make it a little bit more.
It's gonna deter someone from using that as even though that's
a strong password, it's not necessarily now you have to add
a symbol which make a person not wanna use a passphrase.
And the last thing that you would want to make sure any
password policy is that your passwords are compared to a
blacklist, including dictionary words from previous breaches or
just any word that's commonly in the dictionary.
Make sure that none of your users are using it now, as an
organization can implement it.
The next form, of course, is Fido.
Fido is fast ID online.
That's what it stands for, and it's a standard for web
authentication without the need for passwords.
Uh.
If a company can implement this, this is extremely important.
I mean extremely useful as it uses public key cryptography
instead of utilizing passwords, which means it can't be fished,
can't be guessed, and it comes in multiple different form
factors including hardware keys.
As we see on the screen and biometrics, of course, not every
application supports Fido, but if you can implement in your
organization, it'll be a definitely a good step towards a
better security posture.
And lastly, we've probably all now experienced this logging in
to Purdue as they made it mandatory.
As we have multifactor authentication, multifactor
authentication is an important step to potentially and I
emphasize potentially stop and attacker.
Now, why do I say potentially?
Well, because multi factor authentication is is not
You have.
necessarily foolproof.
For example, because not every form of multi factor
authentication is secure, for example email multi factor
authentication is not necessarily the most secure
because imagine if your email account was breached as we just
saw earlier in the credential stuffing attack.
Even though you have multifactor authentication, your codes are
coming straight to the attacker anyway.
It's not.
It's basically useless and what SMS multifactor authentication
there you can.
There's a a way for an attacker to steal your phone number.
They just have to call your.
This is called SIM swapping and you an attacker can call your
mobile provider act like they're you.
Say that I lost my SIM card.
Ship it out to this address and now they have your phone number.
It's so the best way to implement multifactor
authentication is utilizing maybe a hardware key or not
authenticator app which is harder to attack, not impossible
of course, but implementing multifactor authentication can
add another layer of protection, especially against keyloggers as
even if a key logger was to record your password, they
don't.
They can't use the code after the after you've used it.
So can it decrease the impact of an attack?
So and that concludes the presentation.
Was a lot to talk about and not a lot of time, but if anyone has
any questions, this is the question section.
I did have a question.
Great, yes.
So.
With well, with ancient civilizations, we aren't keeping
any passwords or anything.
Instead, we're doing what's called a magic token, which is,
OK.
you know, you just email or you sign in with Google or Facebook
or whatever.
OK.
Umm.
So in that case.
People would want to secure their email.
And the Facebook sign in?
Or Google sign in and it's as far as Google sign in goes.
Is that hackable?
Google.
OK.
You meaning signing into Google?
Well, no.
Well, would just you know.
You you can sign in with Google and you just pick an account and
Correct.
whatnot.
Yes, I I I think I've I understand what you mean in this
case.
What you're you're transferring the responsibility for
authentication from your end over to Google, which means that
it is, which is a good strategy.
The only of course, but what could be attacked is the Gmail
account As for example, if a user uses their Gmail account
and it doesn't have a good password for instance, it
doesn't have multi factor authentication, then that
account itself could be targeted.
So it just transfers the responsibility and and depending
on the circumstances, let's just say Google made a rule that
passwords have to be assertive length.
It may increase the security then if you did it on your own,
but it's still could be attacked like any other account.
It just transfers the responsibility and may make it
less susceptible to a larger attack, cause Google is less
likely to be attacked and maybe a smaller company for instance.
Right.
Yep, I agree.
I wish that more sites would allow you to use phrases that
you come up with to log in with numbers and special characters
and all that.
Umm, there's another school that I am going to that has that
ability and I love it because it's it's not something that
anybody can guess or put into a dictionary like you were saying.
I agree, yes, the a good recommendation is instead of
utilizing a like the standard passwords that password managers
recommend is to utilize.
Actually, password managers have this feature where it will
automatically create like multi word phrases would completely
random dictionary words.
I know bit Warden has that, I think probably 1 password has it
as well and everyone else has a password manager.
Probably you can hold test and I tested this but utilizing three
to four or five words in a random in a word in a row, like
for example keyboard car, hotel, tree is that would be very hard
to guess 5 random words when no relation to each other and it's
Oh yeah.
very it's it's hard to remember but only compared to password
But it would be hard to remember too.
managers where they wanna make it where it's like XYZ
exclamation point hashtag.
It's a little bit easier and that's why utilizing password
Yeah.
manager can allow it to be easily remember.
Yeah, agreed.
I think I saw Charles raise his hand earlier, but I didn't know
if he had a question for me.
We were talking about keyloggers and guessing passwords that way.
Yes.
Have you ever used anything like ohh spybot search and destroy or
anything like that to kill off keyloggers?
Or what's your thoughts on those?
I personally.
I personally not use use it.
That would be very interesting to find out more about it, but
yeah, I've actually never utilized the tool, but I would
definitely if later if you could send me a link to or the name of
it.
So I can look it up later.
That would be great.
All right.
Any more questions for Brian?
Alright, that was great, Brian, excellent job.
Thank you. Thank.
I tell my students all the time the same things.
Everything you covered, I tell them every time because it's
like they'll have a less chance of hacking you if they can't get
through.
If you got something like 123 password, you're the 1st to go.
Let's see.
Charles Westfall, Are you ready?
Yeah, if I can figure out how to get this thing to open up
correctly, I have a video embedded so I'm not sure exactly
how to do that.
So when you share, make sure that you.
Toggle the use your include computer.
Sound you'll want to choose the screen that has your PowerPoint
open.
That way when you hit that, there's a.
If it's embedded, then it'll just go ahead and start.
We'll be able to hear everything.
Can you see my screen with the slide show at all?
Yes.
OK, it'll be later on for the video.
OK.
And they're good.
So when my presentation, I'm gonna talk about quantum
computing in regards to cybersecurity.
My name's Charles Westfall.
The agenda for my presentation is comparing today's
supercomputers against quantum computers with today's
encryption standards.
How quantum computers will help crack normal encryption quantum
computers becoming mainstream?
How quantum computing or computers will help with
cybersecurity, where we stand right now in questions.
Comparing today's supercomputers against quantum computers with
today's encryption standards?
Ohh, comparing the two, if you look at how long it would take a
supercomputer to crack ASE 256, encryption is million to
billions of years.
However, with enough systems linked together, it could bring
down the years that it would take.
But not like quantum computers could.
And so far, according to research, AES 256 is not been
broken with a brute force attack.
They say it's not possible, and even with today's
supercomputers, a single one would need, you know, masses
amounts of time.
He even try a brute force attack on that now with the quantum
computer it would to crack ASE 256 encryption with enough
cubits it would take a few seconds to a few minutes at
most.
To me, that's a scary thought when you compare it to a regular
computer.
Luckily, at this point, most quantum computer possess only a
few dozen qubits, which is not enough to pose a threat to 256
encryption.
Phone Peter, how will they crack normal encryptions using Thors
Shores algorithm shows algorithms.
What kind of creatures used to crack encryptions of today?
Which means before they are mainstream, they'll need to be
new encryption standards created for post quantum computing
world.
This is a graphic of shores algorithm, using it as a brute
force attack.
I'm gonna not gonna say I understand most of it because I
read a little bit out of and it's based on quantum mechanics,
so it's a heavy deal to actually try and learn.
Quantum computers becoming mainstream.
We're looking at how they are right now.
They're doing research.
You know, there's different ideas of when they'll be ready
for consumer sales.
The biggest problems right now are how big they are and how
many stable qubits can be created.
They say the longest or the farthest out that they're gonna
be ready for consumer sales is 2070 before this happens.
They're gonna be a few things that has to happen.
For instance, we need to make have enough stable qubits for
each system.
They need to reduce in size because right now about the size
of a building and the biggest thing is we need to have
encryption standards of protect against quantum computers.
How can quantum computers help with cybersecurity?
The new encryption quantum computing will bring about new
encryption standards such as quantum encryption, according to
Alexander Gillis, Quantum cryptography is a system that is
secure, secure against being compromised without the
knowledge of the sender or receiver.
This is an image of the quantum cryptography explained.
It's like the one they used for regular encryption, showing
Alice and Bob and the encryption how it does it, but this one is
actually all based on quantum computing, so it's quantum
mechanics.
Again, I'm not gonna say I understand much of this yet it's
been very interesting to try and learn about.
And here's the video if it'll play on how quantum cryptography
works.
Math might not offer the security you need, but physics
might.
Classical cryptography that encrypts messages with
mathematical equations is secure enough for classical computing,
but with the emergence of quantum computing, it may not be
enough protection.
That's where quantum cryptography comes in.
It uses physics instead of math.
Here, we'll talk about why quantum cryptography is so
secure.
But despite the advantages, there are still limits and
challenges to quantum cryptography and quantum key
distribution.
Read about how one company these tackling the quantum security
front in the link above or description below.
Quantum cryptography uses particles of light, or photons,
to transmit cryptographic keys over fiber optic wire.
The photons represent binary bits, AKA zeros and ones.
It's a completely secure system because of these properties of
quantum mechanics, particles can exist in more than one place or
state at a time.
A quantum property cannot be observed without changing or
disturbing it and whole particles cannot be copied.
Quantum cryptography follows a model developed in 1984 that
goes like this.
Alice wishes to send Bob a message.
Alice initiates the message, sending Bob a key or stream of
photons, but the photons first pass through a polarizer,
polarizing each photon in a certain state horizontal
vertical diagonal to the right or diagonal to the left.
As Bob receives the photons, he doesn't know the correct
polarization, so he randomly uses one of two beam splitters
to read each photon polarization and decipher the key.
Alice and Bob can then compare the splitter.
They used the photons red with the wrong splitter are discarded
and the remaining sequence is the key.
If there is an eavesdropper present who has the same tools
as Bob, they would not only have the disadvantage of not being
able to compare their results with Alice, but they would also
change the photon positions that Alice and Bob expect to see, so
they would blow their cover.
It's impossible to measure the quantum state of a system
without disturbing it.
In theory, QKD is unhackable after keys are exchanged between
the involved parties.
There is little concern that a malicious actor could decode the
data without the key.
What do you think?
Is quantum cryptography the answer to the quantum computing
threat?
Share your thoughts in the comments and be sure to hit that
like button.
Now where we stand right now, you know, normal computers are
everyday mainstream systems that are used across the globe,
people and and companies.
They started out being as big as a building and within a few
decades or so small they can fit in backpacks, pockets, even on
your wrist to cover a few of the smaller devices.
But and that'll only have took a few decades to happen.
Quantum computers right now they're being developed to where
they can be stable enough.
So right now, there's not enough stable qubits for a computer.
A quantum computer to be fault tolerant enough to be considered
for consumer sales.
And like I said earlier, the best guess right now is the
quantum computer with enough of the stable qubits to pose a
threat to the current encryption is around 2070, so we still have
around 40 years or so before we really have to worry about that.
And right now the most stable quantum computer only has around
60 stable cubits, so they need thousands of stable qubits to
even be a threat to ASE 256.
Any questions?
I'm glad you brought up the fact that how big those are because I
was wondering, this is not gonna be something on everybody's, you
know, and everybody's office anytime soon now.
Oh no, not not for probably a couple of decades after they
Right.
come in.
And I'm thinking when can I get a quantum computer not in my
backyard maybe?
I mean, it's just it's just like with, you know, the old one
original computers came up, there was as big as a building.
Exactly.
Then they went from a big as a building to an entire room
within a couple decades, they were down from that size all the
way down to something you can wear on your wrist.
I mean, it's just.
Yeah.
It's just gonna take a moment.
Yeah, it's just how fast thing is.
A minute or two, right?
I mean.
And if you look at technology at today, how fast it's actually
Exactly what's a decade in IT? Yeah.
changing compared to could pretty much nothing because.
Right.
Changes so fast.
The Yep.
So I guess there's no questions.
Alrighty.
Well, excellent job.
Very good, great information definitely.
Thank you.
Uh.
Let's see.
Blake, Are you ready?
Hello I am.
Alrighty.
OK.
Is that working?
Yes, I can see it.
OK.
This presentation is going to be about the present and future
relationship between AI and CYBERSECURITY.
Uh, the first section will be just quickly about what AI is
and how it works.
The second section will be about uh, current and future
applications of AI for cybersecurity purposes.
Uh third is cyber threats that use AI.
And finally, just some general applications of AI that will
have large effects on security and technology overall.
First, an introduction to AI.
AI is stands for artificial intelligence.
It's a general term that refers to any computer program that
does something that used to be need a human.
Uh, that's not a very useful definition, though, cause that
covers a lot of programs nowadays.
So when you hear AI now usually it's usually going to mean
machine learning.
This is important because it's I can learn which lets it solve a
lot of problems that traditional programs cannot.
So traditional programs have their functionality programmed
in, but AI has its ability to learn programmed in.
So again, it modern AI uses a machine learning to learn and
reinforce the understanding.
It's the backbone of modern AI.
It works by you feed the AI lots and lots of data through various
formats.
It could be a text or images or audio depending on the AI.
I yeah.
Yeah, I will take its best guess it what the.
To take its best guess at classifying the data you give
it, and if it's correct or incorrect depending, it'll go
back through its program and rewrite itself to be more
accurate next time.
So eventually after you train it with lots and lots of training
data, it will get to the point where it can satisfactorily.
Can I solve its problem?
Deep Learning is an expanded version of machine learning that
stacks multiple machine learning models on top of themselves.
And it lets allows it to solve more complicated problems than a
single machine learning model.
So AI is useful because it has the ability to solve problems
that we don't exactly know how to solve ourselves.
I mean, how do we exactly recognize language or recognize
what a cat looks like?
We can't really tell the computer this, so we give the
computer the ability to learn and figure it out itself.
Or say, uh stop sign in the world for a self driving car.
You could try and create a program that would recognize the
sides of the sign, recognize the text.
There are many issues like maybe the sign has faded or it's dark
out or.
Uh, it's far away.
So, since it's a complex problem to recognize this, so we let the
cleaner solve it itself.
Another example of a complicated problem.
The AI is good at solving is language or just working with
language.
Both recognition and generation, because languages have already
more complex, just like image processing.
So this slide is about the artificial side of artificial
intelligence.
Uh, I'm gonna tell this story that I've heard about artificial
intelligence.
There is a study in which a I would look at Test results from
patients and he was looking to diagnose tuberculosis and it did
so with a higher accuracy than actual human doctors.
So clearly the a I found a way to recognize tuberculosis in
these test results that we just didn't know about, right?
Well, after reversing reverse engineering the data and using a
B testing, they found out that the A I was looking at the age
of the machine that did the test and he was just a coincidence
that the older machines would take the results that did test
positive so.
That highlights 2 problems with AI.
1st it's a black box program.
We don't know how AI gets the results.
It gets.
We just know that you have an input.
It figures out something and it gives us the output we want.
So our best bet to try and figure out how the UI works is
you feed it slightly different things.
So this AB testing you change one small thing and the the
input.
See what it means in the output and when enough that you can
figure out how it works.
It's also highlights another issue a I can't it's artificial
it.
It can't make logical leaps like we can you show any human this
data and they'll know that age of the machine doing the test
has no effect of whether the person actually has
tuberculosis.
That's just a a coincidence, but the machine doesn't know that.
It's just another data point, so these problems mean the AI is in
suited for every task and we need to be careful how we use it
and just how we use it as a tool.
So AI has become a hot button topic recently, but it has been
in use for a long time.
I think the most obvious common application we've seen it in is
Google Translate.
Again, you know, working with language.
Another uh common user recommendation engines.
There are things that say, like you may like this on websites
like YouTube or Amazon.
They taken data from across the website.
Data from your action, what you've clicked on.
Uh.
Other users do when they feed that into the AI to generate.
What's most likely that you'll like?
And of course, there's generative AI, which is become
more commonplace with AI chat bots.
GPT image that chat bots as well, and that you're also
seeing cogeneration popping up as well.
And of course, yeah, it can be used in cybersecurity.
Takes us to our next section here.
So one of AI strengths is its ability to continuously learn
from when it's exposed to, umm.
And this works very well for threat detection because it
automatically.
Help itself evolve to recognize new and changing threats.
And this reduces the burden on employees.
It's also already in use detecting financial fraud
because it's good at detecting things that are out of the
ordinary.
The big data is any amount of data.
It's just in a very large amount.
There are things from Internet of Things, devices, online
commerce, and yes, security tools.
Umm, it's very difficult for a human to understand itself.
It's just large data and on the scale that we can view it, it's
not valuable.
So yeah, I can sift through it and generate trends, patterns
that are actually useful to us.
Again, AI continuously learns and updates.
So this is a good for.
Uh signatures recognizing attacks and malware.
So this is a very specifically a benefit for CYBERSECURITY.
I also authentication.
Again, it recognizes passwords well, it recognizes patterns,
and it can be it can be and is used in biometric recognition.
So it is an alternative to passwords.
It's also any kind of pattern could be recognized.
Even their actions, like someone's typing style or how
they move their mouse on the screen, it may be distinct
enough to where it could be used as an authentication method.
Method and just like Brian's.
Uh presentation.
The more alternatives that could get to passwords the better.
And of course, using AI removes human error.
Of course, a isn't perfect as we know, but we can.
Improve the downsides and adjust how we use it to reduced
downsides as well.
Whereas you can never truly remove human air.
And Section 3 is AI in use as a cyber threat.
So AI is already used for cyber attacks, can automatically
discover vulnerable systems and launch attacks against them.
And in an ongoing cyber attack, it can look at the system, look
at the progress made in the cyber attack and generate the
next best step to take for the attacker to continue working
towards their goals. So.
Because they, uh, is used in cyberattacks.
We also need to use it to bolster cyber security controls.
Uh, everyone knows what's fishing is.
It's sending out a ton of convincing looking emails to a
lot of people in order to try to get some of them to click on
them.
Spearfishing is a subset of it in which the emails are
handcrafted to be more convincing and sent to a smaller
group of people for a higher success rate with the eye it
can.
Automatically create these and they can be convincing
personalized with data pulled from all over.
You can use that convincing text and image generation as well,
and it might become more commonplace for more people.
Next is deep fakes.
Everyone's also heard of deep fakes.
I believe uh.
The ability for A to generate people's likenesses, whether
it's their faces or their voices, has many, many malicious
applications that could be used in social engineering attacks.
It could be used against biometric recognition and of
course it could be used to tarnish reputations of people.
And the ultimately ultimately end up in being able to believe
what you see even less on the Internet.
Uh, data poisoning is personally the most interesting part of AI.
Umm, because an AI is so sensitive to it's training data,
that's its entire understanding, quote unquote, of the world.
If this data is compromised and poisoned, then the AI is
completely.
It's it's function is completely altered.
So perhaps chat bot could uh prefer certain opinions could be
used in silencing opinions, a threat detection AI could see
specific cyber attacks is safe to give a a bad actor away in a
self driving car could suddenly stop recognizing stop signs.
Uh, this is.
It's a sensitive process.
There will be a a huge aspect of the supply chain security
subset.
And finally, for the section we have malicious code generation.
Umm, I believe GitHub just recently released their copilot
subscription service, which integrates an AI that generates
some code right into your IDE.
So of course that's a good thing, but it can also be used
to generate malicious code. Umm.
It's likely won't affect you know, the absolute top of cyber
attacks because they already know how to do these things.
But this will only reload the bar even more.
And this final section is General AI driven technologies
that will have a large effect on the world and of course the
security field.
Moore generated I it's recently seen a boom.
It's already being implemented into software development, and
it's going to find its way into other fields too.
At this will increase productivity overall and
consumers will see the and the benefit.
Umm, going to change a lot of interesting self driving
vehicles is of course another aspect that just completely
relies on AI.
Ella completely altered transportation sector, which
will change the economy, and this is also a huge future
landscape for cybersecurity.
The threat of a self driving vehicle becoming compromised is
massive.
They of course rose a giant threat to safety, but likely
self driving vehicles will take over a large section of
shipping, so could see that could have a large effect on
commerce as well.
And finally, cyber warfare.
It's already here.
It already exists and AI will continue to play a role in it as
well.
Uh, it is likely equivalent to cybersecurity, whereas cyber
warfare is a real world equivalent is warfare and
general or your typical cybersecurity thought?
Yeah, it's real world compliment is just crime.
Umm yeah.
And AI will have effects on that, just as it has effects on
cybersecurity.
But I'll also have effects on decision making and once that's
accepted, that could change things as well.
Uh, and that is all for this presentation.
Are there any questions or anything needs to be clarified
and anything you like to add? Of course.
Thanks for this.
Yes, Angela.
Yeah, no questions.
But you know, I use AI all the time in front end development.
Chat GPT for JavaScript, but like I said in the chat, what it
generates you have to debug.
So that goes back to what you said about, like copilot being
potentially able to generate malicious code.
I don't think anybody should be able to use it unless they know
what they're doing.
That is true.
Umm yeah, I use it all the time for image generation.
Umm I have one that generates songs.
Just depending on what you genre you want, I have it for writing.
I have it for almost every aspect of front end development
that you would need, so to me it's a useful tool.
Yeah, definitely.
I'm glad that you get to to worry about the the bad things
It's a tool.
with it.
Great job.
What?
Thank you.
Absolutely.
OK.
So no more questions, alright.
That was awesome.
All right.
We have.
Sean, Are you ready?
I think so.
Can you hear me?
Yes.
OK, let me see.
Window.
I mean.
There we go.
Sheer audio.
Share a tab or screen instead.
Entire screen.
Got it.
Sorry, this is the first time I'm doing this so share your
system goal.
No worries.
OK, I think this is gonna work.
Do you see my screen?
I do.
OK.
Slideshow.
There we go.
Uh, yeah, I'm presenting cloud computing with AWS.
I probably should have called it cloud computing and AWS because
I realized when I was writing this, I'm not gonna be able to
explain AWS unless I explain the fundamentals of cloud computing.
I'm sure there's plenty of people here that don't have a
background in cloud computing, so I structured it where half of
it is going to be basically cloud computing fundamentals and
the other ones are going to be AWS services that you'll use as
a beginner.
So again, my name Sean, and here we go.
See.
There we go.
Agenda cloud computing history, cloud architecture, cloud
models, AWS Overview, compute services, storage services and
database services.
Cloud computing history.
A brief summary.
So what is cloud computing?
Cloud computing is a technology for using the resources of
another device via an interconnect, an Internet
connection, and this can go both ways.
You know, typically when we think of cloud computing, we
think about pulling somebody's resources from a data center to
your computer or, you know, wherever whatever you're running
and it could actually go the other way.
You could actually go peer to peer and share your own
resources, so that's also an option.
I'm just a lot of people don't know that.
Uh.
He uses a combination of X86 architecture mixed with
virtualization, modern hardware, large bandwidth capabilities,
and specialized software to create the capability for cloud
computing to exist.
So before there is really the hardware and the bandwidth
capabilities we already had virtualization, I believe it
came out in a first in an iteration of Windows Server.
I can't really remember.
I think it might have been 2008.
It was somewhere rather 2007.
Umm, where they created software that allowed you to use all of
the resources that you're not using.
So that's basically what what you know and to do that, it
would make nano servers so very low, uh, low, resource intensive
uh servers that you can use to do specific things.
Umm.
Eventually we got high speed Internet and the bandwidth
increased and that's what really allowed us to push and pull the
type of resources that we can now through an Internet
connection.
The cloud is simply a data center filled with servers and
networking equipment.
Specialized software then segments resources from the
hardware in the data center so they can be packaged by a cloud
service for use.
So what this looks like if if you can imagine a data center,
it's just a room full of servers and network gears.
So you got routers, switches, all that stuff and what it does
is they have specialized software that takes resources
from those devices.
Those resources are then consumed by the cloud services.
So when you go, you know, I'll talk about this later.
But when you spin up an AWS cloud instance or virtual
machine from AWS, it's using resources and those resources
are coming from this type of workflow.
Through the cloud.
Ohh though the cloud was technically started by Oracle
introducing software as a service, the cloud as we know it
was created by Amazon when they rolled out infrastructure as a
service.
So no one really thought about cloud computing.
When software is a service came around.
Umm, you know, businesses weren't adopting it in the way
that they were.
Once they can completely replace a lot of their on premise
infrastructure.
So that was such a a huge cost reduction that it didn't really
become this huge thing until Amazon did this.
Any.
Types of cloud computing architecture.
So you have three different types of public cloud, private
cloud and a hybrid cloud.
So a public cloud uses hardware that is stored with other cloud
customers, for example servers and networking equipment.
So like I explained before, data center a cloud is just a giant
data center filled with servers networking equipment.
Now those resources, like I said are segmented.
Now 1 device could could have customers or one device could be
giving resources out to many different customers and that is
why it's public.
You're sharing a device in.
In essence, the good thing about this is that it has really low
overhead costs.
It's a pay as you go model the scalability.
Scalability is extremely high.
You know, there are known, known known limits because no one has,
you know, dropped a trillion dollars to use every single
resource.
And in the AWS data center.
But you know, so for all intensive purposes it's it is
infinite.
And there are security concerns due to the fact that you're
using shared hardware, so a lot of people.
Umm, but namely, the government does not like that, you know,
they're not going to do that.
I work for a large government contractor and they have their
own private clouds and that's mandated.
So if you're going to have anything government proprietary
data, it's gonna be sitting on a private cloud that can get
audited by the government now.
So let's get to the private cloud.
It uses hardware in a data center, a cloud data center
which is allocated to your organization only, which means
you're not sharing that hardware with other people.
In fact, a lot of times you're not sharing that data center
with a lot of people.
You probably will have your own depending on you know how the
size of your organization, but because of this it's extremely
secure.
Uh, and but obviously the the costs are higher and there is
lower scalability because you have a certain amount of
resources, right.
So you have a data center.
You don't have two data centers.
You have one. Unless you want to buy two.
Obviously you can do that, but it doesn't scale fast, so it's
it's not like you can.
It's you.
You can't scale in terms of bursting like you would on a
public cloud, so that's why the hybrid cloud exists.
It's the best of both worlds.
It allows you the flexibility to use public and private clouds
however you see fit.
This means you can mix and match if you want all your data on the
back end sitting in in a private data center, you can do that,
and then all of the front end stuff can be public or mix and
that you know you can do literally whatever you want.
AWS let you do that, so I said.
For example, you can leverage the bursting and scaling of a
public cloud with the heightened security of a private cloud.
And that's what most businesses do.
In fact, most large businesses run the hybrid cloud model.
I think it's something like 80%.
It's probably more now, but the last time I checked it was about
80%.
Again, most large businesses use this model and downside is hot.
The downside is it has a very high complexity, so it's not
easy to set up umm or architect a cloud like this.
It's got a lot of moving parts and you know there's a downside
to that as well, right?
The security downside if there if there's a lot of moving
parts, there's a lot of room for error, but this is the model
that's adopted by most of the large businesses in this
country.
OK, cloud computing models.
So you have software as a service.
I think that was touched on already today platform as a
service and infrastructure as a service software as a service,
as a cloud model which provides a cloud based application to
users.
An example of this is Gmail.
I think somebody, uh noted.
The Google Workspace suite.
That's a great example of which Gmail is now a part of.
Uh, and it has very limited risk to the customer because they
manage pretty much everything.
So if you're the customer, there's not much you have to
worry about in terms of security or anything like that.
Now as we go up from level to level here the the risk to the
customer is going to increase the platform as a service.
It's a cloud model which is which provides a cloud based
virtual computing platform and you typically use this in
development environments or thin client software.
So like a Google Chromebook is a good example of this or any you
know if you want to take a really old laptop and run a
virtual machine on it that that would be a good use case.
And a development environment back in the day, they used to
have a production networks and development networks.
And what that did was it segregated basically all the
resources in your company?
Umm anything on Dev was that's that's where they tested
everything to be moved to the production network and the
production network is just the network that everyone uses.
That's the one that's in production.
Because of that, you know, obviously there's a huge
downsides of that and it's extremely costly to do that.
And there was always security concerns.
But with this this is, you know, a platform as a service.
You can instantly set up whatever type of development
network you want, or whatever type of development platform you
want.
If you want to run a Windows Linux, you know you name it with
all site, all sorts of development tools.
It doesn't matter.
They have them all.
You can just instantly do that, and it's it's very cool cost or
saves companies tons and tons of money.
Now infrastructure as a service.
So infrastructure as a service is what is basically controlled
the least by AWS and the most by you, which means you assume the
most risk.
So AWS cloud model in which you replace your servers and
networking gear with virtualized solutions.
So if you've ever been in a company, you aren't walked in
there network room, you see a bunch of servers, patch panels.
Routers, switches, firewalls, all that stuff is virtualized,
so that's what infrastructure as a service means.
It means you are virtualizing all of that infrastructure.
No, because you're the one configuring it.
Well, you can be they have solutions for that, but umm,
let's say you are taking on the risk of doing all this yourself
using services that you manage.
Uh, there's a huge room for error, but you know, again it
saves companies a ton and ton of money to do this.
So it's it's widely used and it's considered the birth of the
cloud as we know it.
OK, so let's talk about Amazon Web Services.
That's what AWS stands for.
There is the largest third party cloud provider started in 2006,
so they start providing their services to businesses strictly
in about 2006.
I think they opened it up to the public a little bit later.
It has the largest coverage it has over 100 data centers
globally and 99 availability Zones, 400 edge locations, which
are just.
Basically, small data centers that you can use to cache
information.
So if latency is an issue, you use an edge location to cache
some of your stuff that people are going to frequently be
using.
Any data that people are gonna use, all of which can be found
in 245 countries, which is quite a few, so they're the biggest.
Over 200 services, they have over 200 services in their
catalog, which cover every possible use case, including the
new no code field, which is an emergent workflow that harnesses
AI to produce an application without the end user needing to
know any coding language.
So I think somebody talked about this earlier as well.
This is gonna be the norm.
Obviously it's not perfect, but it's it's moving in that
direction.
I think Microsoft Azure has one, but they don't have it quite
like this.
AWS right now has the best services by far where you can.
I mean, you can sit down and make an entire front end, and I
think maybe I'll just do that in in one of the future weeks to
show you guys, but you don't, you don't need to do anything.
You know, if you know how to set up or use the AWS CLI, you can
host a web page pretty quick.
And let's see, it owns 32% of the cloud market share and it
it's about the big Three, which is uh, Amazon AWS, Microsoft
Azure and Google Cloud.
They all are separated by about 10%, so Microsoft is about 20
ish percent and then Google is about 10 and all the rest is
like Oracle and all these other small tiny uh cloud providers.
OK.
And AWS specializes in cop cost optimization and use use case
use case based cloud architecture and that was hard
to say.
So people say that you know each of these.
These cloud companies have benefits over one another, they
say.
Microsoft Azure is the most user friendly.
I definitely don't think so.
I think and it has one of the most convoluted consoles
available.
Umm.
And I think there the benefit, the real benefit of Azure is
they get you on licensing.
So they get you on all the Microsoft licensing they cut you
really good deals to save you money there and Google is used
for startups primarily they they do cost optimization as well.
But they're more focused on a smaller scale.
Uh.
Production and AWS is known again for use case, so they have
the most options in terms of whatever you think of or
whatever you use.
Case that you can possibly come up with in your head.
They have a service for it already.
And you know, I have this big convoluted speech on on how they
kind of map all this out because, you know, there's 200
services.
But I'm basically they have a service for every level of
expertise.
So if you want to.
You know, do everything yourself, but that that they
have a service for that.
If you want to do some things yourself, they have a service
for that.
If you wanna do nothing yourself, they have a service
for that.
And in every single type of use case too, which is why they have
so many services.
So I I have a little video from AWS letting them pitch
themselves to you.
So sit back and relax.
AWS is the world's most comprehensive and broadly
adopted cloud platform.
Millions of customers trust AWS to power their infrastructure
and applications.
Organizations of every type and size are using AWS to lower
costs, become more agile, and innovate faster.
AWS provides on demand delivery of technology services via the
Internet with pay as you go pricing.
You can use these services to build and run virtually any type
of application without upfront cost or ongoing commitments.
You only pay for what you use.
AWS gives you more services and more features within those
services than any other cloud provider.
This makes it faster, easier and more cost effective to move your
existing applications to the cloud and to build anything you
can imagine from infrastructure technologies like compute,
storage and databases to emerging technologies such as
machine learning and artificial intelligence, data lakes and
analytics, an Internet of Things.
Building on AWS means you can choose the right tool for the
job.
For example, AWS offers the widest variety of databases that
are purpose built for different types of applications.
With AWS, you can leverage the latest technologies to
experiment and innovate more quickly.
We are continually accelerating our pace of innovation to invent
entirely new technologies you can use to transform your
business, like pioneering the serverless computing space with
the launch of AWS Lambda, which lets developers run their code
without provisioning or managing servers and AWS built Amazon
Sage Maker, a fully managed machine learning service that
empowers everyday developers and scientists to use machine
learning without any previous experience.
We are constantly expanding our global network of AWS regions.
So you can access AWS services to build and run your
applications from anywhere in the world.
Each of these regions has multiple availability zones that
are physically separated from each other and connected by low
latency, high throughput, and highly redundant networking.
This makes it easy to design and operate applications that are
scalable.
Fault tolerant and highly available, our infrastructure is
built to satisfy the security standards of the most risk
sensitive organizations.
You also have access to the AWS partner network, which has
thousands of systems integrators who specialize in AWS services
and 10s of thousands of independent software vendors who
adapt their technology to work on AWS with the largest
community of customers across every industry, AWS has
unmatched experience and operational expertise you can
depend upon for your most important applications and every
imaginable use case.
Alright, uh, back to the fun stuff.
So now let's talk about some of the services.
So compute services compute is just another fancy word for
computer CPU and RAM resources, so they they separate them into
three different categories.
You have instances which is just their term for virtual machines,
containers and serverless.
So the most basic offering that they have is elastic compute,
cloud EC2 instances and they auto scale automatically.
And they allowed the most customization.
So you can you can do whatever you want with these things, but
you you're gonna be the one doing it now.
If you move to AWS light sail that is already preconfigured,
that's just to get your workload up very quickly, and it also
does it securely.
So it's in a virtual private server and it can't be used for
giant monolithic applications.
That would be EC2 for that.
This is like a medium sized work workload, something nothing too
crazy and then AWS batch.
It just does small batch workloads, but it's fully
managed you you just set it up and that's it.
It does its own thing.
Then you have containers, so if people don't know.
Containers are used by developers to.
Basically, customize whatever type of environment that they
want so you know if you want a snapshot of.
An environment to develop in.
You can do that and it also self contains applications in in
whatever environment you want.
So it's mostly used by as a platform, as a service offering,
and the main services.
So there's there's a lot of services that go with each of
these and I'm only doing the the main ones, just to save some
time, a lot Amazon Elastic Container service.
It supports a Docker containers and it's fully managed, so if
anybody used Docker before, you're probably gonna understand
what this is like as opposed to Kubernetes, which is extremely
complex.
It's open source and it's used for multi Cloud uses so very
very big complex.
You know, like that hybrid model that I was talking about would
they would probably be using this at some point and then you
have AWS FARGATE, which is the serverless option.
I probably should explain what serverless was, but it's
basically infrastructure via code.
You don't have to go into the console, you just write a script
and it does that and you can integrate applications with
that.
And then now we have serverless, so AWS Lambda is their compute
serverless solution.
It's complete serverless compute option with the capabilities.
Of an EC2 instance, so it's it has all of the capabilities of
you know you being able to go into the console and actually
spinning up an instance or even writing a script to do that.
Except it doesn't.
Automatically you don't configure anything.
You don't pick whatever instance size you want.
You don't do any of that.
It determines what you want and then you you get that.
So and it auto scales.
If you need more, you get more, so that's why it's serverless.
You don't control it at all.
You just say I need compute for this and you get that.
OK.
Sorry, services.
Uh block storage block storage is just umm, you know, like the
hard drive on your uh on your computer, you know it it's it's
general purpose and the the services that they use is
elastic block storage or ebbs and EC2 instance store.
So when you spin up an EC2 instance that is going to be the
default storage, it's going to be ebbs.
Or sorry EC2 instance storage which is just EPS.
To be honest, it's low latency, high performance, general
storage.
So nothing specific.
If you just need something very general, this is what you use.
And we also have file system storage, so Amazon EFS, Amazon
FSX.
And I'm just gonna say net on tap or net app on tap open ZFS
at Windows file.
FSX stands for file service file system X because it could be
anything.
This is your purpose built.
Service for every single type of purpose that you have.
Each one of these is a different type of.
Has a different type of use case and I listed a few of them down
there.
You know, obviously if you're using Windows you use Windows
File server.
It it has.
Each of these has specific use cases, applications which need
to share.
Needs shared read write access to a bunch of different VMS.
There's a use case for that in there.
High availability and bursting AI.
I believe that one is the net app on tab one.
Then we have object storage that's AWS 3 buckets.
I'm sure everybody's heard of that.
Read heavy workloads, big data situations, and machine
learning.
It's very versatile.
You can use it for a lot of stuff.
You just probably shouldn't use it for block.
You know, if you're, if you're, if you need to attach a storage
to an instance, you're not gonna use that object.
Storage is for.
You could use that for storing pictures from the website or you
know videos and things like that.
Uh, let's see.
What we got next is database services, and I'm gonna try and
speed it up because it taking forever I relational database.
So to be clear, there's the relational database and all the
rest of the categories are non relational databases of various
types.
Uh, so relational database.
You got Amazon Aurora.
That's a serverless offering, Amazon RDS.
That is the standard relational database.
That's what you're gonna be using, and Amazon Redshift is
for big data data links, things like that.
All options besides redshift are compatible with my SQL and
Postgres SQL key value databases.
This is Amazon Dynamo DB.
It works great for E commerce commerce websites.
That's something like you would use that for like a shopping
cart.
It's great for social media sites using tons of metadata
that we have in memory database.
So Amazon Elastic Cash this I believe is an open source
offering with memcache.
So users when or used when you need faster read speeds and it's
very simple, it's nothing fancy and was on Redis.
However, is the the apex of caching in memory databases.
Uh, it is for giant big data solutions and it is incredibly
fast.
Then you have document database Amazon Documentdb.
It's for storing JSON documents and it works with MongoDB and
it's fully managed, meaning you don't have to do anything.
Summary Cloud computing is the foundational technology of the
foreseeable future.
There would be no AI if there was no cloud computing.
You need it to scale the AI and if for scaling the only way
scaling exists really in a practical way is cloud
computing.
There are private public hybrid cloud models.
There are three categories of services offered software as a
service platform, as a service, infrastructure as a service, and
AWS is the largest and most comprehensive third party cloud
provider I know.
A lot of people don't like them, but they're wrong.
They specialize in use case based cloud computing and cost
optimization.
They have an amazing free tier that I encourage everyone to try
at some point and don't be worried about blowing up your
account.
I blown up a million at least three AWS accounts when I was
learning.
I am a while ago so just all you need is a new.
Just make a new email.
That's it.
That's all you need to do, and you're gonna get another year
for free.
Plus all the other freebies, so I highly recommend it if you're
trying to learn it.
In fact, me and my friend we got together in 2015, we made an
application and sold it and we hosted it on AWS for free and we
barely even knew we were doing that.
That's how easy it is, so I highly recommend it.
Questions.
Well, what's the application you created?
It was called dosey, though it got bought and I believe they
just took.
They just wanted the code pretty much in the use case.
It was called Party Mapper before that, then Dosey Doe and
then I don't know what's called so he bought it outright.
Is.
Android based or?
It was iOS based. Umm.
I want space.
Cool. Nice.
Good job.
On stuff I ohhh.
Wait, I can't see if anyone is let me stop presenting.
Let's see.
Stop sharing.
Here we go.
I use AWS anyways, that's my clients are all on AWS.
We host everything through WS so and that's we we found that
many, many companies.
Umm.
Little does a lot of people know that they go to different
companies to host their clients, and those companies are working
through AWS as a host.
So.
Yeah.
So you're not only paying the, so they're actually doubling you
on hosting.
So if you go to them, they're doubling the price, probably
Umm.
quadrupling the price, because AWS is so inexpensive. So.
Yeah. Yeah, absolutely.
I mean, everybody should should try it at least.
I mean, it's free.
OK.
Umm, the.
You know the stuff that.
Next week.
So I'm I'm working on on a project right now, just putting
up a a serverless application and the only thing that I didn't
do is the front end.
So the front end was all done.
All those those the JavaScript files are there.
I had to modify like a few things, but I mean I got that
thing up.
I I'm almost done.
I'd say it total is probably gonna take me 10 hours and I
mean complete identity Federation, which is something
Angela was talking about earlier in, in terms of security, all of
that is gonna be set up.
So you know that's how good it is.
And yeah, sorry, I like it.
Awesome. Wow.
When, when are you done? 23rd.
I I am done.
No, no, no.
And I think January 16th, it's not like that.
Uh.
OK, OK.
So maybe we can put something together for interns to learn
from to train from on what you know using AWS cause then they
can get on to the AWS free for a year and they can work on the
Yeah.
No, definitely.
project that we come up with.
That sounds good.
Alrighty, awesome.
I like it.
Alright.
Lastly on my list, unless somebody wants to jump in
because I know that I have a couple people that need to make
this U before the 23rd, which is Saturday.
But Derek, Are you ready?
Yes, hello, can you hear me?
I can and I see your slides.
OK.
Yep, so I'm doing mine on sorts.
Different kinds of algorithms that you know, we're using
coding.
Uh, just the agenda, kinda.
Umm ohm, you know, we've pretty much all at this point, have
done some kind of sort, it's a pretty good base for
programming.
We learned to work with tables and arrays and how to manipulate
them.
Uh.
Yeah, like I said, they we work with tables and a rings and you
know, building databases and things like that.
So we can sort data out.
Uh, this is a bubble sort, probably one of the first ones
that we tend to work on here.
Putting on.
It it's probably one of, I guess the more you know kinda quick
sorts, but it still has to go through the process of trying to
find you know which one it is and that does take some time.
Uh quick sorts.
What this does is it kind of splits it.
So this would be like 70 over here and then it splits
everything left would be numbers less than to the right would be
numbers greater than and then it just merges them.
Quick sorts or also card called merge sorts.
I'm sorry.
No, that's not right.
But then they put them together and then they try to figure out
which one.
Uh, you know, ends up being the correct.
Out output ohm and this is a merge sort and that's kind of
what this does as well.
And it also combines them until it comes up with the correct
solution.
Uh, bogosort uh, this is one that I've done before and end up
doing like 31 iterations, one time, 17 another.
It will.
It's also called a permutation sort, and it's got like a pretty
good.
Uh, reputation for being the slowest sort because and most
useless sword as well.
Because every time it does, it basically starts over from one
to zero.
You as you can see here each one it doesn't save any of the data.
It just restarts it and restarts it restarts it till it comes up
with the correct one.
Umm, uh.
Alright, hopefully all got some good information on sorts.
Questions.
Comments. Concerns.
For the layman winner sorts used.
Umm sorts are used like if you want to organize data or uh, you
know, can even be used like an orange G it can be used as it's
got a quite a few different apple.
Ohm.
Uh.
Abilities, but basically I would say you know if you just want to
sort out data or if you wanna find out.
So for instance, if you want to find out how many times it takes
to our, which numbers are divided most by two out of 100?
Umm, it'll come up with the you know, it'll do the computation.
Uh, and then it will output a list until it finally comes up
with an iteration that uh comes up with an order and you can
reverse some.
There's so much you can do with them.
You can.
They're they're almost.
It's an endless possibility.
You can reverse some.
You can give different values.
You can turn a 1 into 100 and 100 into a one.
Umm, so it's really about what information we're trying to find
out.
Cool.
Very good.
Excellent.
Like you, I'm gonna thank you.
Anyone else have any questions for Derek?
Yeah, great job.
All right.
Well, if no one else last chance.
If you want to get this done earlier, instead of waiting
until next year, you can get your.
If you have it done, if you've got it created.
Your presentation tonight, you're welcome to jump in and
get it done.
For another 10 hours.
Right.
You do a whole new teaching thing right now.
Alright, well.
I thank everybody for the wonderful presentations, all the
work that you've done is really appreciated.
It really is.
You guys have done a great job.
Congratulations on getting that done and umm, we are at the end
of the master classes.
I guess for this year, so everybody have a wonderful, umm,
winter break.
Umm and holiday?
For whichever that you.
Umm, they called.
Do whatever holiday that you guys do that you pass umm and
have a great new year and I guess I will be here anyways in
the in the internship no matter what I'm around.
So you guys, we can always holler at each other.
We know how to write in the chat group so umm be safe and want
all of you to come back in good shape and ready and and all
defragged and ready for next year.
Put it back to the back in drive.
Right.
Thanks everybody.
Yeah, I'll be around to softdevs quantum tumors.
Yeah, we're here.
We're always here.
We we are.
We are stuck.
We are fixtures.
I we love it.
We love it, that's why.
Yep. Yep.
Have a great night, everybody.