Welcome everybody to our January 4th master class.
And first up, we have Sean Govazy.
It is a a recorded presentation, so we'll go ahead and get
started.
What?
Ohh on.
I broke it.
I don't know how it works.
Down in the right hand corner there should be like a little
icon that looks like a book you know goes into presentation
mode.
Nick at the bottom of your part of your taskbar.
Passport.
Or you can go to slight at the top and slide show.
Should say from beginning.
Just hit from beginning.
Yep, that'll work also.
OK, cool.
Can everybody see it?
Ohh yeah.
We can still see it in the in the regular mode.
OK, cool.
I'm going to hit plaques.
I don't know how to make it stop once I started so.
I'm go ahead and stop sharing for a second, then go to the the
full mode.
The big inside your scar.
It's it's breaking.
It is just breaking itself I think, because it won't stop
playing.
Or.
Did you want me to go ahead and start it?
OK.
Are you sharing?
Cause I can't see anything.
No.
OK, I'll share it and then start it over.
OK.
Thank you, Zoe.
Problem.
We're not getting any sound.
If there is a sound.
OK, hold on.
You can't hear anything.
Yes, we can.
No.
OK.
When you first hit share on teams, did you hit the share
audio as well?
I didn't.
I don't know how to do this guys, I'm learning something
OK.
Yeah, no worries.
really new tonight.
This is great.
Well, you're learning.
We're learning.
OK, time to start over.
Yeah, just under.
Everybody.
Yeah, everybody goes through this the first time, trust me.
Hey, at least I'm doing it now and not in like a real life job
That's.
where people are like you should know how to do this.
And just say.
It's very true.
OK, so you've got the right screen up now, but if you didn't
share one the audio one you did it, you'll have to stop the
share and then share with audio that screen.
So what is artificial intelligence?
That is a great question and AI can be defined as machines that
There we go.
We got it.
are able to simulate human intelligence through carrying
out functions that we normally perform using our brains to do
so.
AI is essentially mimics the way we recognize and carry out
thoughts to translate them into feasible actions.
Some examples of application include chat bots, virtual
assistants, social media algorithms, as well as facial
recognition technology.
AI can make educated guesses on outcomes based on their analysis
of data inputs that they process rapidly to determine
conclusions.
The user algorithms to serve as rules that allow them to convert
their Fed data into usable information in order to be
useful.
How artificial intelligence works.
You can see a diagram with the process here.
It first receives an input.
It then begins to learn patterns in order to create algorithms or
rules.
After that, it makes predictions using those rules and made and
finally performs tasks by processing all of the data into
information that becomes a feasible output.
Here are three types of AI, each succeeding the last, and
measures of intelligence, the first one being machine
learning, which involves the usage of data and algorithms in
order to be able to imitate human behavior effectively.
Next we have neural networks, which are subsets of machine
learning that imitates human neural nodes by using artificial
neurons, simulating the brain's functions.
It has also referred to as deep learning.
The final one we have here is expert systems being the most
advanced out of three, you can simulate a human experts
decision regarding a certain field or particular subject and
it performs complex problem solving and doing so.
AI.
I don't think they're sound for this slide.
OK, you can.
Are you, are you advancing it each time?
Or is it automatic?
Yeah, yeah, it makes me advance at each time.
OK.
OK, well, go ahead.
OK, even though this one doesn't have audio.
Yeah.
Correct.
AI technology segments in the field of IT, we primarily
concern ourselves with two types of AI technology.
First one being machine learning, which uses large
amounts of data as a baseline of reference to learn to perform
tasks faster and more accurately.
Deep learning AI uses various media such as text, sound and
images in order to execute tasks effectively.
Chat bots, facial recognition and translators such as Google
Translate are all examples of deep learning technology
application.
You give them images, sound or text as input and they respond
with an output based on what was sent based on the service.
Two other segments that are listed below include natural
language processing, which recognizes applies human
language as well as computer vision that uses visual media to
make suggestions or actions.
Examples include virtual assistance and driverless cars,
as well as emotional recommendation on both of these.
Here's a short video.
It's a Ted talk by Brianna Brownell discussing how AI
learns.
Today, artificial intelligence helps doctors diagnose patients.
Pilots fly commercial aircraft, and city planners predict
traffic.
But no matter what these AI's are doing, the computer
scientists who designed them likely don't know exactly how
they're doing it.
This is because artificial intelligence is often self
taught, working off a simple set of instructions to create a
unique array of rules and strategies.
So how exactly does a machine learning?
There are many different ways to build self teaching programs,
but they all rely on the three basic types of machine learning,
unsupervised learning, supervised learning, and
reinforcement learning.
To see these in action, let's imagine researchers are trying
to pull information from a set of medical data containing
thousands of patient profiles.
First up, unsupervised learning.
This approach would be ideal for analyzing all the profiles to
find general similarities and useful patterns.
Maybe certain patients have similar disease presentations or
perhaps a treatment produces specific sets of side effects.
This broad pattern seeking approach can be used to identify
similarities between patient profiles and find emerging
patterns, all without human guidance.
But let's imagine doctors are looking for something more
specific.
These physicians want to create an algorithm for diagnosing a
particular condition.
They begin by collecting two sets of data, medical images and
test results from both healthy patients and those diagnosed
with the condition.
Then they input this data into a program designed to identify
features shared by the sick patients, but not the healthy
patients.
Based on how frequently it sees certain features, the program
will assign values to those features, diagnostic
significance, generating an algorithm for diagnosing future
patients.
However, unlike unsupervised learning, doctors and computer
science does have an active role in what happens next.
Doctors will make the final diagnosis and check the accuracy
of the algorithms prediction.
Then computer scientists can use the updated data sets to adjust
the programs parameters and improve its accuracy.
This hands on approach is called supervised learning.
Now let's say these doctors want to design another algorithm to
recommend treatment plans, since these plans will be implemented
in stages and they may change depending on each individual's
response to treatment, the doctors decide to use
reinforcement learning.
This program uses an iterative approach to gather feedback
about which medications, dosages and treatments are most
effective.
Then it compares that data against each patient's profile
to create their unique optimal treatment plan.
As the treatments progress and the program receives more
feedback, it can constantly update the plan for each
patient.
None of these three techniques are inherently smarter than any
other.
While some require more or less human intervention, they all
have their own strengths and weaknesses, which make them best
suited for certain tasks.
However, by using them together, researchers can build complex AI
systems where individual programs can supervise and teach
each other.
For example, when our unsupervised learning program
finds groups of patients that are similar, it could send that
data to a connected supervised learning program.
That program could then incorporate this information
into its predictions.
Or perhaps dozens of reinforcement learning programs
might simulate potential patient outcomes to collect feedback
about different treatment plans.
There are numerous ways to create these machine learning
systems, and perhaps the most promising models are those that
mimic the relationship between neurons in the brain.
These artificial neural networks can use millions of connections
to tackle difficult tasks like image recognition, speech
recognition and even language translation.
However, the more self directed these models become, the harder
it is for computer scientists to determine how these self taught
algorithms arrive at their solution.
Researchers are already looking at ways to make machine learning
more transparent, but as AI becomes more involved in our
everyday lives, these enigmatic decisions have increasingly
large impact on our work, health, and safety.
So as machines continue learning to investigate, negotiate and
communicate, we must also consider how to teach them to
teach each other to operate ethically.
Today's computers can pilot spacecraft and perform surgery,
but according to computer scientist Alan Turing, the real
test of a computer's intelligence is basic small
talk.
Check out this video to find out why.
Here are three levels or stages of artificial intelligence that
progress in complexity of intelligent behavior.
Stage one is artificial.
Narrow intelligence also knows machine learning mentioned
previously and is proficient in one area of particular interest
and focusing on that.
That associate problem with that area, examples of applied
machine learning that we all recognize today include Siri,
Alexa, and Cortana, Digital assistance on our cell phones or
smartphones, and various Internet of Things devices.
Stage two is known as artificial general intelligence or machine
intelligence, which occurs when a computer becomes as
intelligent as a human and practicality.
This gives it the ability to execute human like tasks with
little to no effort and fast results.
Finally, artificial superintelligence is recognized
as machine consciousness.
At this point, the air machine has surpassed human brain
processing capabilities and about every aspect, and could be
applied in all fields nearly.
I could feel I could spell a new kind of intelligence across the
table quote by Gary Kasparov, who became the First World chess
champion to lose to a computer.
He lost a chess match to an IBM supercomputer named Deep Blue.
On May 11th, 1997.
Here is the significance of how I will change IT.
Yeah, we'll change IT by being able to increase productivity
and lessen the amount of human personnel needed for a
repetitive oriented jobs such as inspecting paperwork like
resumes or forms for keywords or phrases.
They also removed the element of error as they are much more
accurate and less prone to making mistakes whilst
performing detailed oriented tasks.
Predictions using data input can help advise companies and making
influential decisions ahead of time due to superior analytic
capabilities.
Big tech companies such as Google and Bing have implemented
advanced AI into their services, such as Chat, GPT, a natural
language processing tool that can provide detailed brainstorm
ideas for projects.
Benefits of AI within it?
Yeah, excells and departments for attention to details
required, such as diagnosing cancers and other hidden
diseases that are abstract in nature.
Eyes are consistent in giving results that are correct or
mostly so, such as language translation.
They don't have to sleep or eat and drink, so are able to be on
the clock all the time whilst human employees have breaks to
take and set hours of operations or shifts which allows AI to
serve as virtual agents 24/7.
Around the day, there are also effective in tailoring services
to individual users to promote products or keep them on social
media apps for longer amounts of time.
Using algorithms based on what users like.
Applying AI to IT, here are some sectors where AI is applicable.
Quality assurance and software testing.
Yeah, I can reduce human error and test times while detecting
problems easily and as soon as they arise or even before they
arise.
Service management.
Yeah, I can assure prompt delivery service as well as
lowered costs for resources.
Process automation involves repetitive tasks and action.
Reduce manual labor as well as costs here and enhance business
function through analysis of trends.
Quality assurance this dives deeper into the ways A I can
guarantee quality insurance one way one way is app testing.
Yeah, I can use location device and demographics criteria to
make tests suites based on users behaviors to improve application
functions as well as customer satisfaction.
Social media analysis allows large data to be broken down in
order to potentially foresee future market trends and even
predict future user behaviors in order to retain their attention
longer on applications.
Defect analysis allows detection of errors or vulnerability along
with solution generation.
Efficiency analysis supports quality assurance engineers and
making more informed decisions through providing them with
multisource research researched info.
Going into service management, hey, I can provide a self
solving service desk for troubleshooting tickets as an
automated IT support provider here.
It is able to study company input data.
Suggest real user solutions based on ticket database as well
as track user behavior and present self help options.
Machine learning and deep learning allow and recognizing
same issues from the past and providing solutions based on
older requests, business strategy and operational efforts
are also influenced in this area by AI.
Thank you all for attending my master class.
I appreciate your time.
Let me know if there are any questions.
OK.
Good job, Zoe.
It's.
Did you take your Sean for that? Alright presentation?
Sorry, there's a train running right past me.
Of course I'm outside.
I'm Zoe.
Do you wanna go ahead and get yours ready?
Yeah.
OK.
How do I work this?
OK, this is going to be stupid question #2 how do you work
PowerPoint?
So you can do the same thing with your with yours, do the
slideshow and then beginning.
So it starts over here and then.
Because it keeps throwing this screen.
Yeah, you you probably need to stop sharing and then have the
the large screen and then reshare and share that screen.
If you've got multiple screens.
Ah, OK, there we go.
There you go.
Good job.
OK, so now that we have all my technical issues out of the way.
I'm doing my presentation on just different hats of a hacker.
So why is it important to know this information?
Knowing the different types of hackers out in the world and
their capabilities can help in understanding different attack
methods and how to avoid those attacks.
It also brings an understanding to basic motives of the
attacker.
Just because not everybody has the same motives.
Umm, the different hat colors?
These are the more known ones.
Is the white hat, blue hat, Gray hat, Red Hat, Black Hat and the
green hat hackers.
And they all kind of do different things while also
doing the same thing.
So the most known hackers and their motives.
So the white hat hackers are the good guys.
They're the ones that are hired by companies.
Do testing and always have owners permission to use the
systems.
There are more known for being ethical and they stay within
legal parameters.
The Black Hat hackers, those are the really bad guys.
So those are the ones that are hacking for financial gain.
Achieve goals usually work for the black market.
Most of these guys are using their skills to exploit
individuals and companies and they never have permission for
access and it is always illegal what they do.
Grey Hat hackers do walk a fine line on the law.
They do certain things that'll draw attention to
vulnerabilities.
And then they'll offer services to fix those vulnerabilities.
And they do bad things by penetrating the systems.
They don't usually do harm to the system, but you shouldn't be
accessing people's stuffed without permission.
Kind of the standpoint.
Though lesser known hackers and their motives, so you have your
green hat hackers, these are the newbie hackers.
They don't know much about what they're doing and aren't aware
of potential consequences of their actions.
Typically they don't know how to repair damage they cause.
Sometimes they care, and sometimes they don't care about
the damages that they have caused they.
Usually don't do things illegally unless.
They usually do things illegally, unless they're
approved to do it by the system owner they're attempting to
hack, which are usually when they're doing training.
Red Hat hackers.
These are what I called the not so bad guys going after the
really bad guys.
Their actions, while Noble, are hardly ever ethical, and they
take illegal routes to complete their tasks, which usually
include like hacktivists, umm, people that.
Try to exploit the bad guys like the worst guys and then the blue
hat hackers.
There's two personalities.
There's the ones that are hired by companies to test outside
vulnerabilities for new products or before they release a
different part of a product.
And then personality, two, usually they have their own
motives and take personal revenge, and most of the time
what they're doing is also illegal.
So a little more into like the two personalities of the blue
hat.
So you'll hear one personality being called outside security
professionals.
Typically, their thought of as an outside contracted employee,
a company will invite this hacker to test this system.
They're going to be updating or new system.
They're releasing this allows for contract work to be
happening, so you know if you go on indeed you'll see like
contract work for penetration testing.
These are the people that they're talking about, and then
the revenge seekers.
These people take revenge for a person and employer.
Really.
Anybody they feel is done wrong, and sometimes they'll use
malware to cause damage to the systems, even if they don't
really want any like gain from it other than to just do harm.
So it's not very fun.
So one thing that's kind of more common is a script Kitty.
So the difference between a green hat and a script Kitty is
a green hat hacker, somebody that is trying to learn how to
hack, and they aren't usually trying to do it illegally or
cause damage.
And when they do cause damage or they find out about it, most of
the time can't speak for everyone.
They wanna fix it and they want to discover issues they've
caused.
How to avoid them that kind of stuff?
Script kitties, they don't usually care about damage they
caused.
They'll purchase pieces of code or malware to launch attacks to
systems they really just do it to show off and obtain
attention.
They don't have any other purpose other than to look cool.
So that's they're kind of usually bunched together, which
is why I'm separating them because they are not the same
thing.
Other common types of hackers are hardware hackers, network
hackers, and social engineering hackers.
Hardware hackers.
It's anybody attempting to get inside of a digital
infrastructure by manipulating a device or server physically, and
network hacker obtains access to a system wirelessly by entering
the network through a series of attacks and then a social
engineering hacker.
These are the ones that are going to be more internal
threats because they'll be people that are individuals or
groups that tricks others into giving them information to
access a system or break through a firewall.
So not only could they be doing it by sending you a weird
message on Facebook and you reply to it and click on it or
anything like that, but it could also be somebody that you scan
your card, walk into a building and they walk in with you.
And that is another way that people will just use social
engineering as an attack.
So ways to protect yourself.
Passwords use a strong password and change them.
Often you don't have to change them.
You know every week, but every couple months would be good and
most companies will also send alerts to their employees to
change your passwords.
Any suspicious activity you want to investigate, and if you're
able to report it like at work, do that because that means it's
not just an attack on you, but your work network and avoid any
questionable websites and don't click on emails that look
suspicious like phishing emails.
Antivirus is a really big one.
You can use antivirus systems on all technology to help avoid
cyber attacks so that anywhere from smartphones to tablets and
computers, a big one that I found out recently was these new
leap pad devices that kids have that actually they can like go
on to the Internet.
I learned that from one of my nannying jobs, so that was an
interesting one.
They put antivirus on it.
So the summary with technology taking in the world by storm
there and now more cyber threats than ever before, part of
staying protected is learning what the threats are that are
out there.
Basically, stay informed and stay safe.
And that is all.
Thank you.
Nice job.
One thing I didn't know was the green hat.
I did not.
I did not know that that that was the thing I knew the other
ones, but good knowledge.
Thank you.
Yeah.
What's up, Kayla?
This is our hand.
So I have a question.
Yes, there's no hands.
OK.
OK, cool.
OK.
Well, good job.
Yeah.
Thank you.
It looks like on the the sheet, the last person also has a
recording.
I'm do you see that also, Zoe?
Yeah.
OK.
Can you help me with that one?
When we get there?
Yeah, actually that.
OK, see, now you're a pro.
So you you got this, see.
I believe camera is next be ready.
Yep.
Hope everybody's ready for containers, not sure how
familiar everybody is.
Everybody see my screen alright.
Yes, we can.
Perfect.
So containers.
Are a standardized unit of software for packaging code and
it's dependencies.
Together, they're lightweight standalone executable packages
of software.
They include all the dependencies like code, runtime,
system tools, system libraries and settings, and they're
considered a form of operating system virtualization that split
the OS into two main parts, which is the application code
and dependencies, as well as the operating system kernel.
Then images become containers at runtime and multiple containers
can then be deployed as one or more clusters and containers are
well known for being able to isolate software from the
infrastructure that way.
And here we've got a couple different we've got three
different containerization services and an orchestration
service.
Uh, we have Docker, which was launched in 2013 and really
brought most of the attention to containerization, nay expanded
on concepts from Linux like Cgroups, namespaces and jails.
They use images such as copy on write snapshots, snapshots.
And actually, Docker donated runtime code called Run C, which
is written in Go Lang to the Open Container Initiative to
establish standardization.
But it does lack general window support.
From there, the Open Container Initiative acts as the baseline
runtime that creates and runs your containers.
And there's also the container runtime interface, which focuses
on orchestration.
A docker has they used to use Docker Shim, but it's more
recently been replaced by container and then Red Hat
actually offers an alternative called Brio CRI Dash O which is
a lightweight alternative to Docker and is an implementation
of the Kubernetes container runtime interface.
What?
Go back real quick.
We've got LXC which is Linux containers.
It's an open source vendor, neutral container runtime, and
it actually operates under the hood of Docker and behind the
scenes.
And then we have rocket, which is a security first container
system which seeks to address underlying issues with
containers like cross contamination, which we'll get
into in a little bit here and does not actually allow insecure
functionality unless the user explicitly enables it.
But it's no longer actively developed on GitHub, but it can
be forked and developed individual needs and another.
Sort of highlight of it is that there's no central Damon.
There's it uses pods which are typically several containers and
they run directly as isolated Unix processes and then
Kubernetes is an orchestration platform which recognizes
multiple runtime environments like Docker and managers
considerations like infrastructure resources such as
CPU, storage and networking, and it allows for easier automation
and scaling.
But it does have a bit of a learning curve.
From there, we kind of get into the comparison of virtual
machines versus containers.
Which virtual machines are an abstraction of physical
hardware, including a full copy of the operating system, which
you can see across here?
Also includes applications, necessary binaries and.
It provides abstraction as well as emulation, but virtual
machines are much denser and typically take 10s of gigabytes.
Containers on the other hand, virtualize the software level.
And reside just above the host operating system and the
containers will actually share the host operating system.
They isolate processes and the user space, and more often than
not, they're typically only 10s of megabytes in size, but
they're not quite the same as virtualization.
VM provide servers and computers where containers provide
applications as instances without emulation.
Some of the benefits are that they're pretty portable.
Containers are like small pluggable units.
They're pretty well suited to microservice architecture.
They're designed to be platform independent so they can run on
Linux or Windows.
They're also very scalable due to their lightweight, they can
spin up and down pretty quickly and with orchestration like
Kubernetes you can automate spinning up more or spinning
down containers to allow for load balancing as needed during
high volume times you get isolation with containers
running in their own environment.
Each container has its own file system, network stack and
processes, and they allow for project abstraction.
So you can separate, say application development and
infrastructure development to allow both sides to work
independently without negatively impacting the other and breaking
the others code.
They're very consistent.
Once you create an image, you can then transfer that image
across different platforms and run it regardless of the base
operating system and allow for a smoother transition between
development and production.
And due to their lightweight, they're very efficient.
They have a particularly low CPU compute and memory utilization
and and since they share the host operating system, you don't
have to dedicate, say, with virtual machines.
How you devote a certain number of cores and a certain amount of
memory.
You can run several containers and they'll all live off of the
host operating system and only take what they need.
Some of the drawbacks, though, is security wise.
Even though they're isolated, they still share the same host
kernel, so any vulnerabilities that exist for the the host can
still affect the containers, and from there, once it containers
compromised, there's the risk of the compromise breaking out and
affecting other containers or the host itself.
Uh, there's a a few mitigations you can use like trusted images,
limiting features, access privileges, limiting which ports
are exposed, and even limiting the ability to change it
container once it's been launched.
There's a few other steps you can take, like creating separate
virtual networks for containers, and generally the best practices
to use thin, short lived containers and to replace those
containers.
Once you implement a change.
That said, as much benefit as they bring, they can be kind of
complex to learn at first, particularly orchestration.
They're very difficult in large scale environments without
orchestration and in production environments you may need
hundreds to thousands of separate containers to meet
business needs.
But a few of the options for orchestration are Docker
compose, which is focused on one host running multiple
containers.
You have Docker swarm which runs multiple containers across
multiple hosts and you have Kubernetes which has more of a
focus on extensibility and provides more granular control.
Storage wise they're stateless by default, so there's no
permanent storage or preservation of state.
Anytime you spin it back down, all your data is lost for that
session, but you can add persistent volumes in order to
store data such as if you're running a database in a
container.
Networking typically requires a bit of careful planning and
management, particularly when communicating across multiple
hosts and environments and compatibility wise containers
are specific to their runtime applications packaged in one
container format may not run on a different runtime, but there
are some conversion tools available.
And then some common uses.
These are all different vendors that use.
They're all Docker partners, so some common uses are serverless
open source frameworks.
Uh, you have lift and shift operations where you companies
focus on migrating legacy applications to modern
environments. But it doesn't.
That doesn't typically take full advantage of the benefits
offered by modular container based architecture.
There is refactoring where you completely rework a program into
a container.
Native development.
And then there's a full container native development.
And another common use is for continuous integration and
deployment which supports streamline builds, tests and
deployments from the same images.
It facilitates easier version controls and allows for faster
change implementation like additional features or security
fixes without necessarily sacrificing the quality offered.
The quality of service and containerized infrastructure can
help companies to bridge the gap to reaching enterprise level
microservices.
And getting started, you'll choose your runtime.
So in my case I used Docker desktop and you each runtime
will provide their own instructions for how you get it
set up and getting started.
And from there you can check out a image registry such as Docker
Hub which provides thousands of different container images.
So you've got busy box, you have Python, there's Mongo DB and you
can actually even run Docker within Docker containers.
If you're doing Docker development.
And oftentimes, such as with this Apache instance, they
provide all the instructions you need to where you can just copy
paste and get a container up and running.
And then each image registry like Docker Hub has O repository
which is the specific location of the image within the registry
and contains the latest image as well as version history.
From there, you're ready to start building your image.
So in this case I took the previous code that was on the
Apache Instance and I used a template website from I believe
it's.
CSS.
I'll.
I'll come back to that, but we have the Docker file which.
You can follow the instructions from the page on Docker hub to
create and then you execute the corresponding build command.
If you end up with any errors, you can typically Google or
find.
Find from the error code itself exactly what the problem is, and
then once you get it set up and you get the container built, you
can configure your final details such as the specific container
name for that instance which host ports you wanna expose.
If you have any persistent volumes or environmental
variables.
And once you've done all that, you can run and now you've got a
website that's ready to go.
Perfect in the container and you can run it locally or you can
distribute it across multiple systems such as Azure or Amazon
Web Services and now anybody can access it.
And that's it.
Anybody have any questions?
Great job.
Thank you.
Anybody have anybody have any questions?
Go ahead, Giselle.
Yeah, I was.
I took a class of containers awhile ago and I I was very
confused.
It it's like so it's very hard to understand.
Umm, when I think of containers is there like the like.
It works kind of like the cloud.
Yeah, containers are most often seen in cloud deployments cause
you can create the same application that can run across
different servers.
So when you access a website for example, you might not be
accessing the same server every time.
You might be accessing a container that's running that
website on any number of different servers.
OK. OK.
Thank you.
Great job though.
Yeah, no problem.
Thank you.
Nice job and I think I took you guys out of order.
So I guess we'll go back to Trevor.
Ohh, that was Trevor.
Wait and that order is the order right on the thing.
I think we've been following the order.
I.
OK.
Can miss up, sorry.
And next next to me.
Yep, you're next.
OK.
OK, let me share my screen first too.
Is screen screens here.
Screw you.
Turn screen.
Where is nuts saying the entire screen is screen?
1.
Can you see my screen?
Yes, we can.
OK.
Can you hear me?
Yes, we can.
OK, hello.
OK, now I'm going to start now.
Uh post uh.
I wanted to express my sincere gratitude to the management
team, team leads and all those associated with this course.
I'm thankful for being assigned the presentation on January
25th, leveraging the winter break, I dedicated my time to in
depth research starting from his class.
I'm excited to share that I have completed the presentation ahead
of schedule and I'm ready to present it two weeks earlier.
I trust the presentation will provide a valuable understanding
of protecting children's privacy rights online and the need for
it governance.
Ohh, I'd give a little small background for the topics right
now.
I divided this topics into parts.
Like protecting children?
Privacy rights online.
A complete start is involving awareness and education is
necessary to address the essential aspect of safeguarding
children's privacy online, partially educating parents and
guardians about the significance of online privacy for children
is essential.
Uh, this this involves imparting knowledge about the potential
risks and threats prevalent in the digital space.
To empower parents further, the promotion and encouragement of
parental control tools and setting of device and online
platform becomes essential, providing accessible.
Cam can I can?
Can I interrupt for just a second?
I don't think we're seeing your slides.
We can just see the the front the introduction.
Ohh, just I'm telling.
Can you go?
Yeah.
Just I'm talking about the I I don't have.
OK.
But we're not seeing.
Yeah, we're not seeing the presentation view.
Can you go to slide show up at the top and go to beginning and
then we'll be able to see the full the full slide.
Uh.
But you cannot see, no, this is.
That's what I meant.
Yeah, but we're in the we're in the creating mode instead of the
presentation mode.
Ohh.
Up at the top there, that says slide show on the.
It's just to say, OK.
On the left on the top.
And then of should see slide show.
So that's so, yes.
There you go.
Yeah.
And then it'll say from the beginning on the left, once you
click on it, you should see from the beginning.
From the beginning.
I can see the from the beginning here.
Where did that button?
Hmm.
Slide so here, OK.
There you go.
Now on the left hand side of the of the toolbar you should see
from beginning there you go.
Uh.
OK and.
Now is OK.
Yeah, it's, it's it's fine.
You can go ahead.
OK.
Yeah.
Just I'm talking about the topics, OK.
And the Paris understanding, and if it's effectively implement
Yep.
control over their children online activities at once,
advocating for, creating and enforcing is appropriate content
guidelines is important.
This ensure that platform prioritized filtering content
suitable for different age groups formatting or save her
online environment.
Additionally, organizing workshop for children to educate
them about online safety practices and collaborating with
school and communities to integrate with search education
into the curriculum, forms and proactive approach to our first
hearing or secure digital space for the younger generation.
And the need for IT governance organization most established
and strictly enforce strong data protection policies to
strengthen the security and integrity of sensitive
information, particularly that of minors.
This involves inserting, ensuring compliance with data
protection regulation and standard, thereby creating a
safeguard against but dential privacy breaches conducting
regular risks.
Assessment in Paramount to identify weakness.
I just system organization which can mitigate the risks and
enhance overall cyber security strength by implementing who are
active measures.
Employee training is an essential component involving
staff, education and IT security protocols and best practices for
stirring accuser of cyber security awareness within the
organization.
Ensure that every team members actively contribute to the
protection of sensitive data.
Establishing a comprehensive incident response plan is
essential for promptly everything and mitigating a
cyber security incident.
Regular testing and update of this plan are imperative to add
up to the evolving landscape of cyber threats.
Collaborating with law enforcement agencies and
regularity bodies is another essential aspect of effective IT
governance.
This collaborative effort addresses cyber security, cyber
crime and insure ongoing complaints with evolving
regulation, staying informed about legal development related
to IT governance, complete the holistic approach to
safeguarding data and maintaining a strong cyber
security position.
So this is the topics.
OK, now are you going to?
What is the children's online?
It is going directly.
OK.
And the second slide.
OK.
Faust, there is a small video and after that I'll discuss
about this one.
What is the Children's Online Privacy Protection Act of 1998,
or copper?
In this video, we will try to understand that that you leads
online Privacy Protection Act of 1998 is a United States federal
law.
The Children's Online Privacy Protection Act of 1998, or
COPPA, protects the privacy of children aged less than 13
years, has fought the Children's Online Privacy Protection Act of
1998 or COPPA.
He company needs to post its privacy policy online if a
company is collecting data from children younger than 13 years,
then the company needs to obtain parental consent.
You pay company is collecting data from children less than 13
years.
Then the company needs to notify the parents about the
information being collected.
Your company that collects personal data of children under
13 years can retain the collected data as long as
necessary to fulfill the purpose and then delete it afterward.
You pay company or organization college data from children
younger than 13 years and does not comply with the Children's
Online Privacy Protection Act of 1998.
The impact may be severe.
For example, in 2016 you will learn mobile advertising company
cracked the location data of children younger than 13 years
using its advertising software and failed to comply with the
Children's Online Privacy protection.
Backup 9098 are copper.
As a result, the company had to face a hefty fine.
So although children under 13 years can give their personal
information with their parents consent, some companies disallow
children under 13 years from using their services altogether
because of the cost.
And work involved in complying with the law.
I hope this helps.
Interesting viewers who want to know more, please visit the
website of the security body already.
OK, so protecting children's privacy rights online and the
need for IT?
Governments and the first understanding online privacy so
online privacy is a fundamental right to control the information
shared and determine who can access it and when using the
Internet.
This right is especially critical for children.
Is their data can be exploited for harmful purposes, including
identity theft, cyber bullying and exposure to inappropriate
content in today's digital age, rotating children's online
privacy is challenging at essential children's.
Increasing Internet use for education, entertainment and
social interaction requires strong measures through the
formulation of policies, practices and technologies.
IT governance plays a vital role in justifying the privacy risks
children face online.
Next.
Study.
Umm.
What is the Children's online privacy?
When it comes to information that companies collect online
from kids under 13, parents should be in control.
That's the thinking behind the Children's Online Privacy
Protection Act and the COPPA rule.
The rule has been in place for years, but the Federal Trade
Commission, the nation's Consumer Protection Agency, has
revised COPPA to keep pace with technology.
If your company has been complying with COPPA, the basic
still apply.
You still have to give notice to parents and get their verifiable
consent before you collect, use or disclose personal information
from children under 13.
You still have to keep kids information secure and the
revised copper rule retains safe Harbor provisions so that groups
can submit programs for FTC approval.
But five key changes to Kappa take effect July 1st, 2013.
Here's what your business needs to know.
I'm Peter McGee, an attorney with the FTC.
So what's new about Coppa?
The first important change is that the FTC has revised some
definitions to expand who's covered by Kappa and the kinds
of information that require companies to comply with the
rule.
The rule has always applied.
If you operate a website and online service or an app
directed to children under 13, it also applies if you have a
site, a service, or an app directed to a general audience
and you have actual knowledge that you're collecting personal
information online from kids in that under 13 age group
revisions to the rule make it clear that Kappa also covers an
operator of a child directed site or service where it allows
outside services like plugins or advertising networks to collect
personal information from visitors.
In addition, if a plug in or ad network has actual knowledge
that it's collecting personal information through a child
directed site or service, the plug in or AD network is covered
by COPPA 2.
The upshot?
The rule applies to companies that may be new to COPPA
compliance.
The FTC also has revised the definition of the types of
information COPPA covers.
The rule has always applied.
If companies collect certain kinds of personal information
from kids under 13, like their first and last name, home
address, phone number and email address, online contact
information, or a screen or user name that functions as online
contact information.
But the FTC has clarified that definition.
The copper rule covers geolocation information that can
identify a street name and the city or town, and we've expanded
the rule to include photos, videos, and audio files that
contain a kids image or voice as well, something else covered.
Under the revised copper rule, persistent identifiers that can
be used to recognize a user over time and across different sites
or online services.
But there's a notable exception here.
Kappas, parental notice and consent requirements don't apply
if the identifier is used just to support your sites internal
operations.
Take a look at the rule for more about the meaning of internal
operations in this context.
Another change to COPPA relates to what operators need to tell
parents.
It's still the law that you have to notify parents directly and
get their verifiable consent before collecting personal
information online from their kids.
But now you need to know to put certain key pieces of
information up front within the.
Notice you send you want to read the rule for the specifics, but
the big picture is that it's not enough just to give parents a
link to something on your side and expect them to figure things
out for themselves.
This change will make it easier for parents to get the important
details they need when they need them.
The rule also streamlines what you have to include in your
online privacy policy about your information practices.
The third change involves new ways to get the parental consent
copper requires in addition to the methods already in the rule,
including FTC approved Safe Harbor programs.
Copping now gives businesses more ways to get a parents OK.
For example, electronic scans of signed consent forms, video
conferencing, the use of government issued ID's and
alternative payment systems, assuming they meet the same
stringent criteria as credit cards.
The sliding scale mechanism of parental consent, often called
email plus, is still an acceptable method for operators
that collect personal information just for their own
internal use.
Technology changes quickly, so to encourage innovation in this
area, the revised rule sets up a voluntary process for businesses
to get FTC approval for other methods of parental consent.
The 4th change strengthens provisions for keeping kids
information confidential and secure.
Under the revised rule, operators must take reasonable
steps to make sure that before releasing information to service
providers or other third parties, those companies are
capable of maintaining the confidentiality, security and
integrity of the information.
It's not enough if they just talk to talk.
You also need to get assurances they'll follow through under
COPPA.
You can retain kids personal information only as long as it's
reasonably necessary, and when you dispose of it, you have to
take reasonable steps to protect against unauthorized access.
The 5th change to coppa deals with additional monitoring of
self regulatory safe harbors.
The new rule strengthens the FTC's oversight of Safe Harbor
programs that requires them to audit members and report the
combined results of those audits.
To the FTC every year.
OK.
Yeah, I divided the song key aspect of protecting children's
privacy rights online and the need for INTERNS.
So #1, y'all framework and regulation children's online
privacy protests and eight copper government worldwide have
recognized the importance of protecting children online and
have implemented various law and regulation.
For example, in the United States, the Children's Online
Privacy Protection Act, COPPA says, rule for collecting
personal information from children under 13.
And IT governments health organizations comply with this
regulation by implementing and enforcing policies that align
with legal requirement.
Next.
My 2 aspect #2 is verification and parental consent.
IT governance framework and include measures for age
verification and obtaining parental consent before
collecting personal information from children.
These ensure that parents know and agree to their child's
online activities and #3 education and earnest IT.
Government should focus on educating parents, guardians and
children about the importance of online privacy.
This includes raising awareness about potential risks,
responsible online behavior and the significance of protecting
personal information and help the sort video.
Today is my birthday.
I'm gonna post a story.
Let's meet outside school.
Happy birthday.
Selfie. Yeah.
Hey guys.
Let's shoot some hoops basketball court at 4.
But.
I'll be waiting for you at my place to celebrate.
This is my address and my phone number.
Happy birthday, David.
You're very popular, aren't you?
You have lots of friends.
You use chats and social media all the time.
They know everything about you.
What you like when your birthday is?
Who?
Your friends are the sport you play, but they could also know
your phone number and where you live.
Have you ever thought that what you share online could be read
by someone that is not so much of a friend?
Always remember to take great care with the personal
information and photos that you share online.
Share with care.
Now let's go celebrate.
Your friends are waiting for you.
Remember.
Pictures and information that you post or send can be easily
reshared by others, so they could remain online for a very
long time.
Be careful when posting.
Don't share phone numbers, addresses or personal details.
This information could be misused by others.
Always check your privacy settings of the apps you use.
It's important to know what people can see or who can
contact you.
When signing into a website or social media, ask an adult for
help and advice.
Choose a difficult password and share it only with your parents.
Take great care with everything you share online.
If you have any doubts, always ask an adult for help.
No #4 aspect privacy by design.
Implementing privacy by design principle is essential in IT
governance.
This involves integrating privacy consideration into
developing online platform and services, ensuring privacy is
not an addition.
Our #5 aspect, data minimizing and purpose limitation.
IT governance should in in force principle of data minimization
and purpose limitation only the minimum amount of personal
information necessary for a specific purpose.
Should be collected and that data should not be used for
other purpose without of purple consent and number security
measures.
Strong cyber security majors are essential for protecting
children's personal information.
IT Government should mandate the implementation of encryption.
Secure data histories and access controls to prevent all
authorized access to sensitive information.
Next.
I'll 7 monitoring and compliance audits, regular monitoring and
compliance audits are essential.
Our component of IT governance organizations should regularly
access their practices, ensure ongoing compliance with privacy
regulation and standards.
#8 international collaboration, even the global laser of the
Internet International collaboration is imported.
IT governance should facilitate cooperation between
organization, government and NGO's to address cross border
privacy issue and share best practices.
In conclusion, protecting children's online privacy
requires a comprehensive approach involving legal
compliance, technological measures, education and
contribution.
Uh, continuous monitoring IT.
Governance is the foundation for implementing and sustaining
effective privacy protection mechanism in the digital land.
I'll learn.
Privacy requires a comprehensive approach involving.
I think this is the last.
Yeah, they should be the last.
Thank you.
Thank you very much.
Good job.
Is.
That's an interesting stuff there.
Yeah, it's very interesting.
It's a broad things go and it is useful topics also.
Right, right.
Any questions?
OK, good job.
Alright, Giselle, you're up.
OK.
And then many.
Let me go ahead and share my screen.
Can you see my screen?
Not yet.
OK.
OK, now we can see it.
OK.
So my topic is artificial intelligence system for dental
diagnosis with civility 3D scan.
OK, my agenda is as follow.
What is ASCA combine compute tomography and how it works?
When and why in CBCT importance of CBCT in dentistry, artificial
intelligence has impacted dentist life with the city,
technology and CBCT images versus 2D X ray.
Introduction radiology plays a crucial role in the dental
patients diagnostic evaluation ever since CT was introduced as
a clinical technique, there has been interest in 3D diagnostic
imaging of the jaws.
The application of this technology in the dental field
has been restricted due to its high dosage, relatively costly
and restricted availability to hospitals and medical radiology
offices.
What is a civil city and how it works?
So my next slide will I presented a video so you can
explain to you guys better and more much understanding.
Photography or CBCT is a medical imaging device that generates 3
dimensional images based on a cone shaped X ray beam centered
You can barely hear.
It can hear it, but fairly.
on a stationary sensor that performs OK let me see way.
What's that?
They have.
This produces a series of two dimensional images which are
reconstructed in 3D using a specific computer program.
This technique allows for greater detail and a lower
absorbed dose of radiation compared with that of
conventional medical CT scan.
The CBCT scans allow us to view slices of the teeth and
supporting structures in three separate plan the sagittal
plane, where we're moving from ear to ear.
The coronal plane, where we're moving from the back of the head
to the nose.
In the axial plane, where in this case we're moving from the
chin up to the top of the.
These images allow us to diagnose and treat more
accurately, efficiently and effectively than ever before.
Photography or CBCT, is a medical.
OK, so basically UM, the video that I just showed you guys will
basically explain a little bit of this that I'm going to say
right now in case it didn't hear much.
Umm is a form of diagnostic imaging test called a comb beam
compute tomography.
Create comprehensive 3 dimensional pictures of the body
interior components using sophisticated computer
technology and cone shaped X ray beams.
Doctors may identify and arrange therapies for a variety of
medical issues with the use of city scans, which are safe,
noninvasive and somewhat rapid.
Test orthopedics, dentistry and other medical specialties that
need precise imaging of tiny body parts.
Frequently employed CT scans the CBCT systems rotate around the
patient in approximately 30 seconds, capturing data using a
cone shaped xray beans.
When and why CBC team umm doctors require CBCT scan when
standard 2 dimensional dental X rays are insufficient.
Dental CBCT is is employed compare to compare to a
traditional city scan.
CBCT offers clinic clinicians more comprehensive 3D images of
the face with less radiation exposure.
This might be useful for some diseases evaluation, diagnosis,
and treatment planning.
The importance of service city in dentistry.
Hey Siva City scan uses a particular type of imaging
technology to capture 150 plus images of your mouth at
different angles.
This images are then digitally compiled into one three
dimensional images.
Over here in this picture that I am pointing to, this is a AI
generated.
In this case, the patient needed implants on on their bone, and
the doctor use it.
Use the generated AI so a little help so they can tell the doctor
where to place the implants, where you have enough bones and
it's more accurate on this image over here.
There's are implants, and this doctor didn't use the 3D CBCT
scan, and he assumed that this patient had enough bone over
here.
So he placed an implant here, but he what?
He didn't know.
Was that the implant was going to collapse and going to fail
because the bone was not very strong there.
So as you can see here, the implant is sideways, so it
failed.
On this.
Images that I'm showing you here should this patient save this
tooth?
So this is a 2D image X ray image and this is the 3D imaging
over here in the tool.
The imaging, when a doctor says to the xray umm, right here they
can see that something is going on.
What? What?
I dentist.
Look for on the X ray is dark shadows.
Dark shadows means infection, and it can mean fractures and
things like that.
So over here you can see that there's something going on here
because it's a little dark, but that's it.
Nothing else with the 3D imaging AI generated, you can see more
clearly here that this patient has a infection here going
alongside of the road, which can mean a fracture which can mean a
restriction on the teeth.
And in this case, this patient is going to need an extraction,
and it's not saying it's not worth saving the tooth, which in
this to the imaging, they couldn't diagnose that.
So if the if the patient would save the tool with a root canal,
it might be felt in the future.
In these images, should this patient save the tooth?
So right here again, we're looking for dark shadows in
these two.
The image you can hardly see their shadows here.
You can probably see something here and and that's it.
So there's nothing going like if the dentist sees this, they
they're gonna be say, OK, something is going on here, but
it we're not.
We're not clear enough unless we have a CBCT scan, which in this
case over here you can see the dark shadow really clearly
because of the help with the AI.
So the answer is yes.
Umm, the doctor decided to save this tooth.
He went back to look at the scan and he decided that he was not a
fracture and it could be saved.
So after the root Canal was done, this was the pre op of the
imaging and this was the six months after.
So over here you can see six months after that there's bone
generated in around the roots, which means the infection is
gone and it's healing.
Artificial intelligence has impacted dentist life with the
CBC technology.
AI plays a very important role when treatment planning for
patients needs and desire.
Using the CBC to scan the advantage, the advancements of
science and technology has brought innovations in the
dental field.
Both diagnosis and treatment have been dramatically changed
by the invasion of imaging technology.
Cone beam computed tomography enables 3D as skeletal dental
analysis for dental for treatment plans in orthodontics,
prosthodontics, periodontics, and orthognathic surgery.
In summary, it is viral to any clinician to remain in touch
with latest innovation in the field of 1's experience
expertise and apply the same for the benefit of patient care and
be ready and willing to accept new trends.
CBCT is one such recent advancement in the field of
dentistry.
Which one should learn and adapt into clinical practice?
Thank you.
Hope you guys enjoyed the presentation.
Any questions?
Great job.
Very interesting.
I learned so much in these sessions, I swear.
So.
Ahead.
I was gonna say so.
How?
How was the AI working?
Is this a regression?
A clustering.
What exactly are they doing?
Because this is is a stack of 2D images and so I'm very curious
What?
about how this is actually going on.
So the the AI comes to work when for diagnostic purposes.
So if a patient comes in the office and with a 2D imaging,
they can only see a 2 dimensional image which is a
flat image with the 3D.
Right, right.
But what you explained was, is that this is a collection.
The tomography is a collection of 2D images that are stacked to
create a a a pseudo 3D rendering and so and so.
Yes.
My question is, is So what is in then inputted into the AI?
I'm I'm probably getting more detail here than you probably
are.
Felt familiar with, but I'm interested in this.
So.
So yeah, so the AI, my understanding of the AI because
I work in the dental field.
So when we trim and planning for a patient, umm, the AI, we get
the AI generates the treatment for the patient.
Like implants, extractions, broke canals and other
treatments that you guys might be familiar with.
Or not, but the AI helps the dentist generate a better
trimming planning.
That's that's all about the AI and the Civic City scan.
That's my understanding of the of of the two.
Yeah. So.
Do you know if it was a supervised or unsupervised
learning?
I don't know if they were supervised or unsupervised
learning.
I don't know that part, but all I know.
OK, it's.
Yeah, but all I know is that our dentist and a lot of dentists
out there, they use the AI system for diagnosis.
Yeah, I imagine it was probably supervised.
Landon.
Do you mean like?
I'm.
Was the machine learning how to develop the AI resolution so?
Yeah.
Yeah, well, how did it know what to do?
And that's my question.
I'm assuming is supervised.
I'm gonna go.
I'm gonna go ahead and do my research on that, but I'm
assuming it's supervised because when it when it comes to health
That's what I would assume.
and and getting a diagnostic for a patient and you know life for
death, I'm assuming that if you're counting with an with a
CBC discount for diagnosis, I'm in so many supervised.
Great talk.
Thank you.
Thank you very much.
Good job.
Thank you.
OK.
So we have one more.
OK, so nothing.
Nikki.
Nikki, you're here, right?
You finish your class.
Yes, we finished orientation and everybody is here.
OK.
She should be here.
OK, awesome.
Ohh wait, hold on.
I'm here.
Awesome.
I'm so we still have Landry's presentation.
I'm Zoe.
Could you present landrys?
Yes, I can.
Awesome.
See now that you're the expert, we're gonna go to you now.
You know, I wouldn't call myself that, but.
Yeah.
Also, Professor Landon, to answer your question on that
machine because I have had many scans with of that particular
machine.
Uh, they're very supervised as far as determining the overall
procedure that needs to be done.
And then with the technology involved, it crashes all the
time because it's still so new.
But whenever it scans your mouth, it gives like a 3D model
as well that you can look in like a system kind of like CAD
and look at it like that.
Yeah.
So yeah, so the supervision aspect was here is a 3D model
and this was the outcome and that's supervised otherwise
unsupervised machine learning is going to be.
Here's a bunch of things you figure out the rules, computer.
Yeah, like I know they.
So I I imagine it was probably supervised because that would
make sense in the healthcare profession.
Yeah.
Because when I had it done, they had to take measurements of like
my jaw and stuff like that before they could.
And then they're gonna need to know.
You know what, they're any issues in order to put you into
a what can what group you had to be in the learning data set.
Exactly.
Exactly, yes.
Yeah.
And then they knock you out and do their job.
Which was my favorite part.
And yeah.
Well, that's not the AI doing that yet.
No, that is the lovely doctor.
Yet wait till the robot start doing that.
Yeah, maybe.
Thank you for your input, sorry.
Yeah, another problem.
Alright, I'm gonna start this next one.
And like 2 seconds after my dog stopped sparking.
Hello everyone.
My topic tonight is about artificial intelligence, or AI.
In automotive industry, I'm going to focus on understanding
autonomous vehicle.
How would the process and autonomous vehicle perception in
understanding of the vehicle environment, localization and
No, we can't.
We can't hear the sound.
mapping in autonomous vehicle prediction and assessment of
I can hear it.
I hear it.
risks on the road security measures and Emergency
Management?
Real time adaptation and learning, AIC and regulation
consideration.
Understanding autonomous vehicles.
Safe driving vehicle vehicle capable of navigating and
operating.
We found human intervention this vehicle use a combination of
sensors such as camera rather GPS, advanced control system
often integrate with artificial intelligence, agreed to perceive
their surrounding and make decision based on them.
Self driving vehicle are becoming more popular this day.
Understanding this role of fairly it's very important since
our vision is a critical process in autonomous vehicle that
involve integrating data from multiple sensors.
You have to create a comprehensive and and accurate
representation of this vehicle surrounding.
AI based sensor technique help the vehicle generally the real
time understanding is running.
Data processing is important in AI using include direct
cleaning, which involve assuring the integrity of leader set good
quality, thereby identify missing data and yet to generate
reliable and accurate sensor reading.
There are also must be normalized of all repetition of
data.
Scaling have also to avoid bias in data that could impact the
accuracy of the fusion process.
There are also must be good quality helped to verify the
accuracy and reliability of sensor data, including error
detection.
Error correction and validation check to assure that only high
quality data is used for fusion process.
Error analysis is helped to implement or correction
technique to minimize accuracy and a shoulder to demense later
accuracy represent the real war and violent.
Inception and the standing of the vehicle environment.
Yeah, I algorithm enable automatic vehicle to recognize
and enterprise various element of the environment including
other vehicle, pedestrian or traffic sign, advanced
computing, computer vision and deep learning technique are used
to detect, classify and track object allowing the vehicle to
make informed decision based on in perception of the
environment.
Object detection and classification.
The vehicle can reconnect.
Nice object on the road.
AI based computer vision accurate is used to detect and
classify various objects near the vehicle which may order.
They called pedestrian and this thing different type of object
structure, but Destrehan agorism and based on deep learning make
is possible to detect pedestrian or cyclists to guarantee the
safety of Rd user predict their movement and adjust vehicle
driving behaviour accordingly.
Localization and mapping in autonomous vehicles localization
and mapping are essential component of autonomous vehicle
system and then playing vehicle to navigate and operate
accurately in complex and dynamic environment.
They allow autonomous vehicle to determine the position, create
detail map on the environment, the integration of data from
various sensors such as GPS.
I have to accumulate determine the position and orientation of
the vehicle in relation to his surrounding.
Yeah, based 3D reconstruction.
This thing use that data from DEF camera to create detail and
accurate three their representation, allowing the
vehicle to navigate.
Interact with an environment.
Location of difficult environments such as the tunnel
or arial prohibited by GPS.
I have my ping capability in various environmental condition.
Position and assessment of risk on the road.
Predicting and assessing potential risk that may be
present on the road is essential for autonomous vehicle systems.
Did anybody vehicle to anticipate and react to the
potential risk and danger, predict the behaviour of the
other vehicle or pedestrian?
This position includes trajectory prediction to use of
AI, make it possible to anticipate the future trajectory
and behavior of the other vehicle.
Pedestrian.
Yeah, do autonomous vehicle anomaly detection anomaly
detection algorithm helped identify and classify
circumstances of abnormal behavior in the driving
environment.
Adaptive risk strategies.
Integration of adaptive risk mitigation strategy allow the
vehicle to dynamically adjust its driving behavior.
Security measures and Emergency Management.
Yeah, I plays in important role in implementing safety critical
system to deal with when expected breakdown or emergency
and prioritize passenger safety.
This measure involve emergency and their interventions.
The vehicle can react quickly to unforeseen events, such as
sudden obstacles, sensor failure or adverse weather condition
breakdown and control.
The system to guarantee the safety of the passenger and the
roles user system hacking, implementing, airs based cyber
security measure to protect vehicle control system from
internal trade and their potential hacking are showing
their integrity and security of vehicle operation.
Real time adaptation and learning the continuous
improvement of autonomous vehicles system allowing vehicle
to dynamically adjust the driving capability based on real
time data and user feedback.
Machine learning technique on about atmospherical to adapt and
changing driving condition changing a lot densification of
Rd, condition, travel time, traffic congestion.
User feedback and preferences.
Many autonomous car like Tesla use user feedback and
preferences to personalize the driving experience and adapt to
the user specific requirements and driving styles, creating
personalized driving profile to improve performance.
Passenger comfort and satisfaction.
Adaptive control system self driving cars have adaptive
control system that adjust vehicle control.
Parameterize, such as steering, acceleration, and braking.
Ethical and regulatory concern of AI driving autonomous
vehicles.
Safe driving car race complex question related to decision
making in critical situations.
Attribution of responsibilities, data privacy and cybersecurity
among the concern we have, I got to meet.
Yes, it is important to assure the fair treatment of all Rd
user, autonomous vehicle dealer security.
It is important that these cars have comprehensive and effective
cybersecurity protocol to identify potential
vulnerabilities and mitigate risk.
Thank you.
I stopped.
Very good.
So anybody have any questions?
Charles.
You have a question. Ohh.
Sorry, hit the wrong button.
My my computer lagged when I went to hit something.
OK.
OK, Nikki, you ready?
Yes, ma'am.
All right, go for it.
Can everybody see my screen?
Yep.
What's your can?
Yes.
All right, perfect.
Hey.
Hello everyone.
My name is Nikki Lindorff and I am here to discuss the
importance of cybersecurity policies for enterprise
resilience.
First, let's take a look at cybersecurity in general and why
it's so important.
The world has become increasingly interconnected
through technology, making organizations and individuals
vulnerable to cyber threats.
Cybersecurity and robust security policies are important
for their role in things like protecting sensitive data,
business, businesses and individuals store vast amounts
of sensitive information online, including personal data,
financial records and intellectual property.
Robust security measures protect this information from
unauthorized access, theft and misuse.
It can also help with preventing financial losses.
Cyber attacks can result in significant financial losses for
organizations including theft of funds, ransom demands and costs
associated with fixing the damage caused.
Strong security policies can minimize the risk of financial
loss due to cyber incidents.
Safeguarding reputation and customer trust.
A cybersecurity breach can severely damage an organizations
reputation, eroding customer trust and leading to a loss of
business.
Implementing robust security policies demonstrates a
commitment to protecting customer data and maintaining a
secure environment, enhancing trust among stakeholders.
It can also help with ensuring regulatory compliance.
There are various laws and regulations require
organizations to protect sensitive information such as
personally identifiable information or PII, Healthcare
records, and financial data security policies can help
organizations meet regulatory requirements, reducing the risk
of legal penalties.
And reputational damage can also help business continuity.
Cyber attacks, including ransomware and distributed
denial of service attacks, can disrupt an organization's
operations, leading to downtime, loss of productivity, and
potentially halting critical services.
Strong security measures help mitigate such disruptions and
ensure business continuity can also guard against intellectual
theft.
Many organizations rely on intellectual property as a
competitive advantage.
These security policies would protect against industrial
espionage, trade, secret theft, and unauthorized access to
valuable intellectual assets.
Finally, they can help adapt to evolving threats.
The cyber threat landscape continuously evolves with new
methods and techniques emerging regularly by implementing robust
security policies, organizations can stay vigilant, detect
emerging threats, and adapt defenses accordingly to mitigate
risk effectively.
And we discussed that the threat landscape is always evolving,
but what does that mean?
The current cybersecurity landscape is characterized by an
ever evolving and increasingly sophisticated threat landscape,
with cyber attacks becoming more frequent, complex and damaging.
So here's a few key aspects to keep in mind.
Cyber threats are on the rise.
The number of sophistication, the number and sophistication of
cyber threats continue to increase.
Organizations face a wide range of threats, including malware,
ransomware, phishing, social engineering, insider threats,
and advanced persistent threats.
There's also targeted attacks on organizations.
Attackers are targeting organizations of all sizes and
across all industries, including government entities and health
care providers.
There's nation state sponsored attacks and cyber criminal
groups that frequently target high value organizations to
steal sensitive data, disrupt operation or gain unauthorized
access.
Rapidly evolving attack techniques.
Cyber criminals constantly develop new attack techniques to
bypass security measures.
The use of artificial intelligence, machine learning
and automation and cybercrime allows attackers to detect
vulnerabilities, exploit them, and launch attacks at a scale
and speed previously unseen.
Another key aspect is supply chain attacks.
Cyber criminals are targeting the supply chain to compromise
trusted vendors to gain unauthorized access to the
target organization.
These attacks have severe consequences as they exploit the
trust between organizations and their partners, enabling
attackers to infiltrate multiple targets.
We also face cloud security challenges as organizations
increasingly rely on cloud services and infrastructure.
There are new security challenges.
Securing cloud environments requires effective configuration
management, access control, data protection and continuous
monitoring to mitigate and ensure to mitigate risks and
ensured the security of data.
The Internet of Things has also introduced.
New cyber security risks many IO T devices lack robust security
features, making them incredibly vulnerable to compromise.
Attackers can exploit these devices to gain unauthorized
access to networks or to launch DDoS attacks.
There's also data breaches and privacy concerns.
Data breaches continue to plague organizations, resulting in the
exposure of personal and sensitive information.
As a result, privacy concerns and data protection regulations,
such as the general Data Protection Regulation or GDP R
and the California Consumer Privacy Act, or CCPA, have
become prominent.
There's also a significant shortage of skilled
cybersecurity professionals worldwide.
The increasing demand for skilled individuals outpaces the
supply, making it challenging for organizations to build and
maintain effective cybersecurity teams.
Finally, the importance of a proactive defense, the reactive
approach to cybersecurity, is no longer sufficient.
Organizations must adopt A proactive defense strategy,
implementing robust security measures such as threat
intelligence, continuous monitoring, penetration testing,
user awareness and training, and incident response planning.
Let's take a look at some statistics.
We have seen a general trend of increased cyber crime complaints
and monetary losses reported to the FBI over the past five
years.
As we can see from the chart provided from security weekly,
even though there was a slight decline in complaints of
cybercrime recorded with the FBI from 2021 to 2022, you can see
that 847,000 versus 800,000.
The monetary losses increased from 7 billion to over 10
billion just in that one year.
This discrepancy might be due to the tendency of companies to
just pay the ransoms to restore systems for these larger
companies, that's often the easiest way to restore access
quickly.
Implementing comprehensive cybersecurity policies offers
several benefits to organizations.
Here's some of the key advantages the protection of
sensitive data cybersecurity policies can help safeguard
sensitive information like customer data and intellectual
property or financial records.
By implementing these policies and security measures,
organizations can prevent unauthorized access, data
breaches, and the theft or misuse of sensitive data.
Adaptability to evolving threats.
Comprehensive cybersecurity policies help organization stay
vigilant and adaptable to emerging threats.
I continually evaluating and updating security measures.
Organizations can mitigate those risks associated with new cyber
threats and adapt their defenses accordingly.
It also leads to increased business opportunities,
demonstrating strong security measures can give organizations
a competitive advantage, clients, partners and customers
prioritize working with organizations that prioritize
security and protect their interests.
Implementing comprehensive cybersecurity policies can even
open up new business opportunities, partnerships and
collaborations.
Compliance with regulations.
Cybersecurity policies can help organizations meet regulatory
requirements.
Many industries have specific regulations governing the
protection of sensitive data, such as PII, health care
records, and financial data.
By implementing the appropriate security measures, organizations
can ensure compliance, avoid penalties, and build a
reputation as a trusted and responsible entity.
Finally, the mitigation of financial losses.
Cyber security incidents have devastating financial
implications for organization, including theft of funds, loss
of business due to reputational damage, legal fees, regulatory
fines and however much they had to pay to get their data back.
Comprehensive cybersecurity policies can minimize the risk
of financial losses by reducing the likelihood and impact of a
cyberattack.
Conversely, inadequate cyber security measures can have
severe consequences for organizations.
Here are some of the potential outcomes for not prioritizing
cybersecurity.
The first one, data breaches inadequate security can lead to
data breaches where unauthorized individuals gain access to
sensitive information.
This can result in reputational damage, legal repercussion,
financial losses and regulatory fines.
Operational disruptions.
Cybersecurity incidents can disrupt business operations,
leading to downtime, loss of productivity and service
disruptions.
Ransomware attacks, DDoS attacks or other malicious activities
can render systems or networks unavailable, causing significant
financial losses.
Reputational damage or cybersecurity practices can
damage an organization's reputation in the industry and
marketplace.
A data breach or insecurity or a security incident can tarnish
and organizations reputation and erode customer trust.
The loss of customer confidence can lead to negative reviews and
decrease sales.
Rebuilding trust and reputation can be a costly and
time-consuming process, and this can lead to lost business
opportunities, decreased customer confidence and
challenges attracting new clients or partners.
There's also legal liabilities and regulatory penalties.
Inadequate cyber security can result in legal liabilities if
customer or employee data is compromised.
I don't know how many of you remember the target breach, but
I think I still get free credit monitoring from that breach.
Organizations may face lawsuits, liability claims, and potential
financial damage.
Additionally, failing to protect sensitive customer data can lead
to lawsuits from affected individuals seeking compensation
for damages caused by the security breach.
Finally, financial losses.
Cyber security incidents are costly.
Organizations may face financial losses due to the initial theft,
the disruption of operation, loss of business, and costs
associated with the incident response, remediation and
recovery.
A robust security policy framework encompasses several
fundamental elements.
These elements include policy development where you establish
a clear and comprehensive cybersecurity policy, which is
crucial for guiding the organizations security practices
and ensuring consistency throughout the organization.
Risk management, a cybersecurity policy framework, should include
a risk management strategy that identifies and prioritizes
potential risks, vulnerabilities, and threats.
This involves conducting regular risk assessments, implementing
appropriate controls and establishing incident response
and recovery procedures.
Implementing strong access controls ensures that only
authorized individuals can access sensitive resources and
data.
Another fundamental element is data protection, a cybersecurity
policy framework should address the protection of sensitive
data.
This may include encrypting data both in transit and at rest,
establishing data classification guidelines, implementing secure
data storage and backup procedures, and defining
appropriate data handling and disposal methods.
Incident response the policy framework should clearly define
the organization's incident response procedures.
This includes establishing an incident reporting mechanism,
defining roles and responsibilities, conducting
forensic investigations and establishing communication
channels with relevant stakeholders.
Employee training and awareness is incredibly important,
providing regular training and awareness programs helps educate
employees about cyber security risks and best practices.
This includes educating employees about phishing
attacks, social engineering techniques, password hygiene,
secure browsing habits, and the importance of reporting
suspicious activity.
Security monitoring and detection.
Establishing a robust security monitoring capability allows
organizations to detect and respond to potential security
incidents in a timely manner.
This includes the implementation of intrusion detection and
prevention systems, security information and event
management.
Seem tools and continuous threat monitoring, incident reporting
and communication are also very important.
Clearly defining the reporting and communication procedures for
security incidents is critical.
The policy framework should outline how incidents are
reported internally and externally, who the stakeholders
are and when and how to communicate with affected
parties.
Compliance and regulatory requirements.
Organizations must comply with industry specific regulations
and standards related to cybersecurity, as cybersecurity
framework should include measures to address and comply
with regular with relevant regulations such as the GDPR or
the payment card industry data security standard.
Or hippa.
And finally, regular review and improvement.
A robust cybersecurity policy framework should include
provisions for regular review, evaluation and improvement of
the policies and procedures.
This ensures that the framework remains up to date and aligned
with any changing security risks and industry best practices.
Speaking of industry best practices, there are many
resources available to companies to give guidance on policy
creations.
For example, the NIST SP 800 series is an excellent resource
for policies and cybersecurity.
In fact, as you can see here, the nest SP-800-12 revision 1
provides instructions on how to create policies, what they
should cover, and gives recommendations on what policies
companies should consider using.
As you can see from the images here, NIST discusses a strong
overarching policy combined with several smaller issue specific
policies that go into more granular detail.
They also recommend reviewing the policies on a regular basis
and updating as needed.
The issues specific policy is should cover every technology
the company utilizes, so let's go over a couple of policies
that companies can adopt to strengthen their security
posture.
There are several recommended policies that organizations
should have in place to strengthen their cybersecurity
posture in no specific order.
These policies include an acceptable use policy.
This policy outlines the acceptable and expected use of
organizations, technology resources, including computers,
networks, Internet access software, any other technology.
It establishes a guideline for employees, contractors and other
authorized users to ensure appropriate and secure use of
these resources.
Password policies set guidelines for creating and managing strong
and secure passwords.
It typically includes requirements such as password
complexity, minimum length, regular password changes.
And prohibits the sharing of passwords.
A data classification policy defines how an organization's
data should be categorized based on its sensitivity criticality.
And establishes guidelines for handling and protecting
different levels of sensitive information, including personal
data, confidential business data and classified or regulated
data.
A mobile device policy addresses the use of personal and company
owned mobile devices such as smartphones and tablets within
the organization.
It outlined security requirements such as enabling
device encryption, implementing data backup and remote wipe
capabilities.
And incident response policy provides guidance on how the
organization should respond to and manage security incidents
and breaches.
It defines the roles and responsibilities, incident,
escalation procedures, communication channels and
outlines the steps for incident containment.
A security awareness training policy outlines the
organizations commitment to providing ongoing cyber security
awareness and training programs to all employees.
It can mandate regular training sessions, awareness campaigns
and simulated phishing exercises to educate employees about
current threats and best practices.
A.
Bring your own device policy governs the use of personally
owned devices in the workplace and outlined security
requirements for employees who choose to use their own devices
for work purposes.
A remote access policy addresses the secure access to
organizations resources by remote employees or external
contractors.
It defines the security requirements for remote access,
such as the use of a virtual private network, multi factor
authentication or secure data transmission protocols.
Data privacy policy establishes guidelines for ensuring
compliance with privacy regulations and protecting
personal information collected by the organization.
It outlines the controls, procedures and safeguards
required to handle store, transmit and disclose personal
data appropriately.
Finally, vendor management policy.
This policy defines the requirements for assessing and
managing the cybersecurity risks associated with third party
vendors.
It outlines the criteria for vendor selection, security
assessments, contractual obligations and ongoing
monitoring of vendor security practices.
Here are some helpful places to find additional information
about the topics that we have discussed today.
And thank you everyone.
Feel free to reach out to me via email listed here.
I will.
I can provide a copy of the presentation if anybody needs.
And does anybody have any questions?
Nice job, Nikki.
That was really good.
I'm teaching the cybersecurity class right now Google class,
and that all that information that would be great help.
So good job.
Does anyone have any questions?
It was actually.
Go ahead, go ahead.
It was going to be a plans and policies, but it got to be a
little bit too long.
Yeah, lots of information, right?
Yeah, I timed myself on the first four slides and I was
like, oh, goodness, I'm going to have to cut something.
Well, great job.
Great job, everyone.
Tonight.
I'm I wanna welcome the new interns that came with you.
Right.
Nikki, I can't see.
I'm on my phone.
Yes, a lot of them came over.
Alright, I'm so welcome everyone.
I think all of us in here were where you were at right now.
For me, it was six years ago.
I just stuck around.
I loved it so much, but my name's Marcia.
And you'll be seeing me in chat, and I wanna welcome everyone.
And I'm sure the orientation was great.
And I'm sure Nikki gave you lots of great information, but you
have team leads and chat to help with any of your questions.
I'm so please feel free to reach out.
Don't be scared.
Everybody, everybody is nervous in the beginning and by the
third week you're completely got this and you'll you'll say, I
don't know what I was confused about.
So it happens to everyone. Uh.
That is all we have for tonight.
And unless somebody has something they want to add.
OK.
All right.
Well, everyone have a great night.
We will resume our regularly scheduled meetings next week.
Umm.
So see you back here or not back here.
But on Tuesday, we have our Monday you have your department
meetings Tuesday.
We have our AHOD on so everyone have a great night and we'll see
you soon.
Thanks everyone.
Have a good night.