Umm.
I am Charlene Squires.
Ohh and welcome to our Master class presentation for today,
OK.
Any questions so far?
Any questions OK.
The alright, our first presenter will be Steve Hutchinson.
Are you ready, Steve?
Uh yes.
Excuse me.
Yes, I am.
OK, perfect.
Have at it.
OK.
Shall I screen?
And everyone did clock in right?
I just wanna make sure I get nervous that people forget to
clock in.
Ohm.
Cassie, everything.
Ohh my mic is ready OK.
Ah yes.
Yes.
OK so as I get started, we're gonna take a closer look at my
HTML, CSS, and JavaScript journey, my personal journey.
HTML, CSS, JavaScript is the trio that powers the magic
behind the scenes.
Think of them as the architects.
Quietly working behind the curtain to create the online
world we navigate together, they weave this intricate tab street
that forms the backbone of our digital experiences.
It's pretty cool to think about how these languages collaborate
to build the dynamic landscapes we encounter on the web.
So let's delve into the heart of web development.
So embarking on our journey, we first encounter HTML, a
foundational pillar, and a true backbone of the web.
Acml, or Hypertext Markup Language, is the elemental force
that orchestrates the very structure of digital existence.
Picture it as the architect's blueprint meticulously crafting
the skeletal framework for every web page to a Symphony of tags
and elements.
In essence, HTML is the language spoken by websites to convey
their essence to the browsers.
It weaves a narrative of content using tags as the building
blocks that form the intricate tapestry of information.
These tags defined the structure and hierarchy, creating a
seamless flow of data that underpins the core structure of
every web page.
As we venture further into the realms of web development, our
next protagonist CSS, the enchanting cascading style
sheets.
Think of CSS as the virtuoso artist poised to breathe life
into the structural canvas painted by HTML.
So Jehovah was notified with what you did.
It is the creative force that transcends me.
Functionality orchestrating a Symphony of visual elements that
Yeah, that.
captivate and engage.
CSS is the CSS, is the maestro of presentation and layout,
orchestrating the choreography of elements.
When our website is the magic wand that transformed the raw
structure provided by HTML into visually stunning and cohesive
designs, just as an artist meticulously selects colors and
shapes to create a masterpiece.
CSS adds that extra layer of finesse tile web pages.
And then we have JavaScript or JavaScript.
Uh, the dynamic powerhouse of web development, JavaScript
stands as the unrivaled force breathing life into the static
realms of web pages.
And infusing them with an irresistible fatality.
JavaScript, often hailed as the virtuoso of interactivity,
transcends the boundaries of conventional coding.
Consider JavaScript as the Maestro conducting an orchestra.
Web elements orchestrate in the Symphony of responsiveness and
engagement as proficiency lies in its ability to transform
static web pages into living, grieving entities that respond
to user input with finesse is the magic wand that turns the
digital canvas into an interactive masterpiece, forging
a connection between users and the virtual world as a
programming language, JavaScript powers in array of interactive
features that embellish the web landscape from dynamic content
updates and seamless transitions and user trigger events.
JavaScript is the unsung hero behind the scenes, working
tirelessly to enhance the overall user experience.
So we're going to go into my personal journey into coding.
Well, when I decided to join Purdue, I I didn't know.
I just needed a second job, even though I have a good job, I just
feel like I needed something to bring in extra money and I
didn't know what I wanted to do, but I always had, like, a knack
for computers and coding.
Basically, always wanted to be a hacker in a sense.
Well, ethical hacker, let me put that out there.
And so I signed up for Conan, and I just jumped into Purdue
because it's the first online school, like HIP popping up
during my research.
So I'll share with you a glimpse into the personal odyssey that
defies my coding journey.
It all commenced with a fascination for intricate world
of hacking.
However, as Tom unfolded in my academic pursuits led me to
Purdue, the trajectory, the trajectory of my coding journey
took an unexpected turn, involving into a profound
interest in web development.
The initial stages were not without their challenges, a
landscape of daunting coating obstacles that tested my tested
the metal of my resolve navigate into the complexities of
algorithms and syntax.
I found myself on the precise.
Excuse me, I found myself on a precise of a vast and unexplored
realm.
It was, in effect.
It was in the face of these challenges that I discovered and
innate curiosity propelling me to further explore and
understand the intricacies that lay beneath the surface of lines
of code.
Purdue, with its rich academic environment, became the Crucible
where my fascination transformed into deeper passion for web
development.
The structured learning environment coupled with hands
on experiences provided the fertile ground for my coding
skills.
It was here that I began to realize the profound impact of
coding.
The ability to translate ideas into tangible, interactive
experiences on the digital canvas.
So I didn't like the way that, UM, my web development teacher
was teaching the class, and I felt like I didn't retain enough
information and I'm a person that I don't like to move on
until I understand something.
So I made the mistake of taking the first summer off school to
join on this code Cademy boot camp and.
Even though it wasn't, umm, how could I put it?
It wasn't as as strict as I needed it to be.
It still helped me understand.
It gave me more of a hands on experience, so I signed up for
Code Academy and I started learning HTML and CSS a little
bit more and a little bit of JavaScript.
So in the pursuit of fortify my code and privacy, I am barked on
a transformative chapter.
By enrolling to, decision became a cornerstone in my Conan
journey and my coding journey, marking a pivotal point where
challenges were not just faced but conquered.
And we're frustration.
Metamorphic metamorphed into unwavering determination.
Co Cademy boot camp of learning and skill refinement provided me
with a structural, a structured and immerse immersive
environment to deepen my understanding of code and
principles.
The curriculum, meticulously designed to navigate through the
intricacies and various programming languages and
concept, became the compass guiding me through the vast and
dynamic landscape of coding.
The challenges encountered during the bootcamp were not
mere obstacles, but opportunities for growth.
Each line of code written each problem solved was a step closer
to building confidence in my abilities.
It was a journey of perseverance, where frustration
transformed into a driving force, propelling me forward.
Let's embark on a captivating journey, delving into my venture
into website building.
This what this venture was fueled by a compelling vision,
the creation of an ecommerce site that would not only meet,
but exceed expectations.
Little did I know that this endeavour will become a crucial
Crucible of trial and error, where each challenge was a
stepping stone in the intricate dance of web development.
Inspiration served as the cop has gotten my initial forays
into crafting this digital realm division of an ecommerce site
with its dynamic interface.
And seamless user experience spurred me to traverse the
uncharted territories of coding and design.
However, as with any creative undertaken, the past, the path
was laden with intricacies and coding in particular, provided
to be a formidable challenge.
The journey into website building was a a, let's say with
it was something that I didn't expect to be so vast and
intricate.
Adapting and refining the art web development coding
intricacies became a puzzle.
Wanting to be solved, each line of code and integral piece in
the larger canvas of the envisioned ecommerce site every
hurdle encountered was an opportunity to expand my
knowledge base to adapt my code and methodologies and to refine
the craft of building and immersive digital experience.
So yeah, decided the only way for me to understand the code
and is to practice by building my own website.
So for the fact that I really didn't have that mentor to guide
me in the right direction, I went to YouTube and I started
watching YouTube videos and practicing that way, embarking
on a journey of continuous learning that turned to the vast
expanse of YouTube tutorials to deepen my understanding of web
development, specifically focusing on the creation of an
ecommerce site in this enlightened chapter six part to
tutorial tutorial came became my guide, unraveling the
intricacies of structure and media queries.
And marketing a pivotal step in my evolving proficiency and web
development.
YouTube a treasure trove of educational content, became our
virtual classroom.
The six part tutorial provided a structured road map guiding me
through the intricate process of creating an ecommerce site.
Each segment became a building block.
Adding layers of knowledge to my understanding of web development
structure, the structure, the fundamental backbone of any
website, was dissected and explained.
The Mensa flying, the intricate relationships between HTML
elements and their visual representation on the digital
canvas.
The tutorial meticulously navigated through new and
nuances of organizing content, creating a cohesive flow, and
ensuring a seamless user experience.
In the face of challenges, my journey in web development
marked a crucial milestone.
Mastering HTML as I navigated through code and intricacies,
HTML became the sturdy foundation of the project.
So I'll briefly explain.
Let's briefly explore the HTML elements use, forming the
resilient backbone of the web website structure.
Acml transform from tags and distributes into a dynamic tool,
allowing me to articulate the design vision seamlessly.
Structural elements form elements, dive spans and
semantic elements play this symphonic role in shaping the
user interface, creating a harmonious and visual appealing
structure.
Mastering HTML was not just a technical feat, but it testament
to my resilience, adaption, adaptation and refining the
artistry of web development.
So this this here is the design of the ecommerce site.
I decided to build the evolution of the design was a captivating
narrative of creative transformation.
With each iteration, the visual landscape of the project
underwent a remarkable evolution, guided by a
collaborative spirit with my client, who in this instance was
my girlfriend.
Girlfriend has a candle company and I asked the cannot build her
website for her instead of using instead of her using it.
Something like WordPress to give me the practice that I needed.
The interplay of ideas, feedback and shared inspiration became
the driving force behind the reinforcement of the aesthetic.
It was a journey fueled by mutual commitment to perfection,
with adaptation and meticulous reinforcement.
Were the keystone the design, like a canvas, unfolded and
adapted until it was, until seamlessly embodied the shared
vision that we had set out to achieve.
So I decided to I don't wanna say make the mistake but.
I wanted to create a mega NAV bar and I spent almost two
months, probably longer, trying to make this mechanic ball work
correctly and it it ended up working in through trial and
error.
A lot of errors and it was so frustrating.
UM, I literally felt like NEO in the matrix and these agents just
stopped me from being great.
So, but it's coming along. UM.
So I missed the intricate.
I missed the intricate realm of.
I'm sorry.
Yeah.
So I missed the intricate web development journey.
Notable challenges came to the forefront, casting a spotlight
on the complexities surrounding the mega NAV bar.
This particular design element, known for its intricacy, became
a focal point that demanded a meticulous examination of
details and an elevated level of problem solving problems.
Navigating through the intricacies of the mega naval
wasn't merely a technical challenge, but a testament to
the death, the death of the development journey.
Uh.
OK, sorry.
So tackling.
Tackling JavaScript and the side NAV and the side NAV and CART I
had a big problem with the the side cart because every time at
displayed it, it would push everything over.
So I had to debug and find out where I was making a mistakes
and this I'm not too good at JavaScript so I had to do a lot
of research on what was going on, what was going wrong and
chat.
GPT helped me a lot with finding codings.
Part of the code that I couldn't see what was given a problem and
it ended up working out.
And behold, these are just placeholders just for the
pictures until I get new pictures.
But as you can see, it's starting to shape up and come
out pretty decent. Umm.
Venturing into the realm of JavaScript marked the
transformative phase.
Where I seamlessly integrated dynamic elements such as the
side NAV and and caught into the project.
The process was not merely a coding endeavor, but a
meticulous journey, emphasizing the imperative for ongoing
advancement, enhancement of JavaScript skills that
incorporation of these dynamic elements served as a testament
to the intricate dance between functionality and user
interaction, underlining the need for a continuous commitment
to refunding JavaScript proficiency.
Join me as we.
Yeah, yeah. Finished.
Sorry. OK.
So the journey of hard coding is a testament to the unwavering
belief in one's ability to navigate the intricate landscape
of programming challenges.
It's a narrative of persistence where the code of faces hurdles
head on, armed with the conviction that every line of
code is a step closer to mastery.
The challenges inherent in hard coded are not roadblocks, but
milestones.
In a journey of continuous learning and evolution as one
delves into the complexities of hard coding, each obstacles
become an opportunity to hone problem solving skills and
unravel intricacies of cold logic.
The process is not without its moments of frustration and
uncertainty, but it is within these moments that we, as colors
discover the resilience needed to overcome challenges.
Belief in the ability to decipher the intricacies of hard
coding fuels the determination to to persist, to debug, and to
optimize until the code reflects their vision outcome.
In closing, this expedition into the realm of web development
stands as its transformative odyssey from the initial alloy
of codon to the mastery of HTML, CSS, and JavaScript, the crooks
lions in the ethos ethos of continuous learning and
adaptation, ratitude extends to the mentors, leads, and
colleagues which have been guiding beacons in this journey.
As I conclude this chapter, I extend it and and invitation for
your questions and discussions, inviting you to join me in
navigating the ever exciting world of web development.
Thank you.
Well, that's really nice.
I enjoyed your matrix pictures there because I was a big fan of
matrix.
Yeah, me too.
I'm still a fan.
Yeah.
I still like it.
Yeah.
Yeah, you can still watch it over and over and over, but
anyway, But yeah, coding is not easy.
Umm, I've done some in the past a long time ago, but.
Lately I haven't gotten back into a coding, but I did try
Python a little bit which I liked, but I didn't finish it so
I was like go back to square one again cause by the time I I do
it, I'll forget what I learned, so I have to go back and
relearn.
Yeah, but that's fine.
Yeah, it's been.
It's been a such a challenge, but it's just it's fun when you
I mean.
Mm-hmm.
actually see your visions come to life on a computer.
So it keeps you going.
Ohh definitely definitely there was a class that I took or in my
bathroom when I was doing my bachelors and we had to create
our own website for something.
So what I chose to do was the website for advertising my a
restaurant that I would like to open in my husband's hometown.
So that was kind of cool.
I got to use some, you know, estimate ML and you know CSS and
you know designing it.
Make sure the colors are alright and all that stuff, so I really
enjoyed it.
I really enjoyed it a lot.
Thank you.
OK.
Any questions for Steve?
Guys, you guys are so quiet.
Alright, Alexis, go ahead.
I have.
Hi, good evening everyone.
I'm just quick question now, where can I buy one of your
girlfriends?
Well, first of all, amazing presentation.
I love like the matrix and like entrepreneurship, and I want to
know where can I get more of your girlfriend's candles.
Thank you.
Umm.
Well, I would say that.
Umm you can uh DM me on a private DM and I can let you
know exactly all the flavors sense that she has, and uh,
whatever prices, she'll just mail it out to you.
Sorry.
And yeah, go from there because you don't have a actual a
Cool.
OK.
Thank you.
virtual shop yet.
She do like events and pop ups and stuff like that.
Come.
OK, OK.
Thank you.
Alright. Thanks.
Yeah.
Thank you.
No problem.
Great, great job.
Thanks.
Oh, sorry about that.
And the other questions for Steve.
No.
Nothing but candles.
OK, that's fine.
Alright, so our next speaker tonight is Umm, Nicholas.
Yep, that'll be me.
Wait.
Perfect.
All right.
You're at.
And you all can hear me pretty well.
Yes.
OK.
And you can see my screen now as well, correct?
Yes.
OK, cool.
Cool.
So my presentation is going to be how to take the human out of
human air.
It's just focuses on cybersecurity basics.
It's gonna be a short presentation, honestly, maybe 1
slide.
Who knows?
Doctors kind of hate this one thing that I kind of have a
No.
secret tip for you guys, so ohh here.
Step one.
Ohh no.
OK, step one, just become a robot.
So there's not gonna be any human error if you're a robot,
but on to a more serious note, why are we the weakest link and
cybersecurity?
So according to a data breach incident report, humans account
for 74% of all data breaches.
Why might this happen?
So we can be flippant when it comes to rules and policies, and
we can also believe that we're immune to any trouble that may
happen.
Like.
Oh, that'll never happen to me.
And then, if not, everybody's buying in.
So like say the CEO or like a Vice president doesn't really
believe in attending cybersecurity meetings or
adhering to those rules.
I'm not.
Everybody's gonna buy in as well, especially lower on the
totem.
And then there's also a human nature aspect to it, and a lot
of psychology behind this as well.
So we as people were kind of trusting by nature.
And so we're kind of prone to falling for social engineering
attempts.
Like if somebody says they need help or need something specific,
we typically want to reach out and help them out.
All right.
So how can we become stronger?
Though everything right here is just, this is what we're gonna
talk about later on.
But so to begin, you start off with some trainings and
cybersecurity awareness training.
Umm, after that you go through retraining every four months, I
would say.
And how can you get people to buy in so you can offer
incentives?
So I know when I was at the VA, if we ever completed training or
had no incidents regarding cybersecurity would get 1/2 day.
And you know, everybody likes time off.
Umm.
Simulations as well.
So like you put what you've learned and to practice with
these simulations, like say somebody will send out a fake
email.
Can I have this information?
This is a simulation.
You apply what you've learned and you do what you see fit.
Back to the psychology of cybersecurity, you need to make
it a habit.
We as people, we like to make things convenient or easy, and
sometimes, like the security, is nitty gritty and you have to put
a lot of time in the small details and that comes in the
form of password management as well.
Like, we'll stick to a template.
Typically umm next is authentication and authorization
as well.
That's another thing that you want to make a habit because it
may not be the most convenient thing, and it takes extra steps
and nobody likes extra steps.
And overall this is just going to be understanding human
nature.
Alright, so on to the awareness training and retraining.
O what makes a good training program?
Well, it begins with executive buy in.
So the people at the top have to agree to this training, they'll
fund it.
They'll make sure that you get everything you need to make the
presentation or the training a success and enter the content of
the training you want to identify risks and their
potential impact just to get people to buy in as well.
So you can tell people not to do something, but unless they
really understand why, they're just going to be like, OK, yeah,
I won't do that.
But if they understand what could happen and what stands to
like fall, or what risks per, then they'll have a better
understanding and probably be more reasonable to adhere to
those security policies.
And then you also want to keep everyone engaged.
You can't just have like a death by PowerPoint or like a very
monotone serious talk about why you shouldn't open emails that
ask for your personal information.
And then last but not least, keep up to date on best
practices that don't you know, research something from like 98
where it's like, ohh.
If somebody's trying to dial in like we don't do that anymore.
And then also another thing to think about this, we're all not
all but a majority of us are in cybersecurity here.
So the onus could be on us later on in our careers to give a
presentation like this, or to find out the whys and hows and
keeping people adhering to cybersecurity policies.
And then so how often should you retrain or refresh?
Someones knowledge.
Well, according to a recent study done at the Usenix soups,
it's a security conference.
Four months is typically the sweet spot and how often these
refreshers should be done.
OK.
And aren't you password management?
So this is the big one.
It's really simple.
Everybody knows the template.
You gotta word, then you gotta assemble and then you got some
numbers.
Is that a strong template for a password?
Unfortunately no.
So on the right side of the screen here you'll see an image
by hive systems and this is how long it would take a hacker to
brute force your password and 2023.
So as you can see.
Be lower numbers and the less unique symbols it uses the
easier it is to crack, but once you get higher up, maybe say 12
and then you start adding some numbers, lowercase letters,
symbols, it becomes more complex to brute force, and that's what
you want.
You want a password?
That's hard to crack and it doesn't necessarily have to take
a lot of thought.
You can just.
Vomit onto a Microsoft Word document and create a password
that way, and then there's also like if you can, you can maybe
try and add a space to your password as well, because
typically nobody's gonna brute force or check for a space and a
password.
And, and let's say you don't really want to put in the effort
or you just want to stick to a simple password, or you don't
want to take the time to keep reentering passwords.
You can use the password manager, though they can create
strong passwords for you and you can safely store them and never
have to remember them.
We just have your password manager open when you want to
log in, copy, paste and you're done.
But I mean, that is to say that these are also, uh, susceptible
to getting hacked as well and somebody can get this
information.
But if they really wanted to go that far, maybe they've earned
it at that point.
And then, like I said earlier, you can also just revisit the
Stone Age.
You don't have to use a password manager, you can also just write
it down on a notebook on your person, just alphabet symbol
number soup onto that paper and keep it safe at all times.
All right, authentication and authorization.
Do you have to get a text?
Uh, sometimes you'd want to.
So we all love convenience.
But is that cementing us as a whole as the weakest link and
cybersecurity?
And I think it does play a part.
So setting up multi factor authentication which is just an
extra step after you log in, you guys know it.
A receiving a text, getting a push notification.
It's simple.
You got to do download an app like Google.
Uh, good.
The Google Authenticator?
Umm, some schools use it as well, and then you can also set
up push notifications to it personal device.
I know a lot of banking apps do this.
It's like you can have it send a push notification to a device
that you own, and then there's always the text or the phone
calls as well.
All right, so how can this help?
So if a hacker does have access to your password, well, guess
what?
If you don't have multifactor authentication, they're in and
then they can get access to anything they want on that
account.
And then if you do set it up, this is another thing like the
psychology of it.
It establishes that the user is willing to take the necessary
step necessary steps to not be the weakest link, and we're
going to segue on and to the next slide because this is a
habit you want to establish that habit and understand human
nature.
What's in it for me?
So segueing from the previous slide, it's a habit.
So if we establish something as a habit or more prone to do it,
so practicing stronger cybersecurity often becomes a
habit.
We take the steps.
We're better at cybersecurity.
We may not be the weakest link.
All right, So what else can we do to benefit the human nature
for this?
So we can incentivise people, you know, complete the training
pass simulation.
Not have any incidents, but boom, you get 1/2 day.
Anything really?
Pizza party.
Maybe a rock or something?
Who knows?
And then you also have to make it cool.
You know, make sure everybody's doing it.
Like I said earlier, at the beginning you want the buy in
from the top down.
Because if everybody's taking it serious, you won't have people
lower on the totem pole going well.
So and so doesn't really care, so why should I?
Alright.
And then that just sums up.
So if everybody has bought into it, there's no room for flippant
behavior.
Really, when it comes to cyber threats like, oh, I'm not gonna
fall for this.
This is gonna happen to me.
All right.
Proper browsing etiquette.
Local singles click here, right?
So this should be obvious to everyone at this point, but you
know, don't click on everything you see and this is a really
elementary take on this.
But I think the most serious issue people have with browsing
etiquette at work is using their personal accounts.
So like their email Spotify, I mean maybe Pandora, if they
still use it.
Uh going on Twitter, Facebook, Instagram.
So all those can compromise the network that you're on, because
if you have.
Say you've signed in to Spotify on your work computer.
There are some instances where just because you've signed into
a personal account that the organization has been
compromised and that will be touched up on later and later is
right now.
So in 2022, let's go ahead and employees personal account
compromised, which included VPN credentials so that hacker got
access to the VPN to get on to their Cisco sites.
So now that hacker had access to everything within that
organization and they could, you know, set up shop.
Alright.
And this is the continuation, but this will be including
devices, personal accounts and you so I know some people work
from home and you've heard of bring your own device.
And I think that's always a no go, especially if your work will
monitor what goes on in that device and then in certain
cases, maybe it's a device designated for work and we're
only then maybe that should be fine.
But so say you set U your personal laptop as a bring your
own device.
I would just avoid trying to avoid doing that, because while
you're at work or on your works network, I'm using that device
and anything that's ever been on it.
So like say you've logged into something you've accepted
cookies on some certain website.
Maybe it's something you've missed, but if you're using that
on your work personal network or like they're intranet, you could
be making them susceptible to an attack that you may not be aware
of.
And then also, it's a matter of privacy.
So you don't really want your work to have like access to your
own phone, you know, or your laptop what you're doing, what
you're watching, you know, alright.
And next we report anything fishy.
So this also goes hand in hand with butcher training taught
you.
You'll see what to look out for an email.
And so, like somebody who's asking for something too
personal, you don't know that person.
So need report it.
You'd also check for like fake emails you check for, you know,
anybody suspicious that you don't really see at work.
I know I watched it conference a while ago and it was this guy he
would visit people's workplaces and he would always ask testing
questions about if he could access their computer because he
needed to do something.
And of course, a lot of people willing to help out.
We're like, oh, yeah, sure, no problem.
Go ahead and you know, it's just something you don't do,
especially when you have some amount of privilege and to your
organization because they can gain access to what they
shouldn't have.
And again, this is another psychology behind it.
But do we really want to tell on people, and do we really want to
turn someone in?
And I think this is a something that we should have to get over
because when I was at the VA.
So when you wanna go into the building, you have to scan a
card and then opens the door and the policy was that everybody
has to scan to open the door.
But if you were, say, maybe 20 feet in front of somebody and
you knew there were behind you, you'd scan the door.
It would open up for you.
You look at the person behind you and just walk away and not
holding the door open for them because that's against the
policy and that's one of the things like, you don't want to
be a bad person, but you have to adhere to those policies so you
don't have to always be polite to everyone, especially when it
infringes on those policies.
I'm and like I said, anything suspicious.
Suspicious email.
Suspicious people calls any vendors that are suspicious.
I just make sure to report that to any security analyst and
they'll get in deal with it.
And then again, if something seems out of place, don't be
afraid to call it out.
Don't be afraid to be the bad person, because sometimes that
could help out your company or your organization.
All right.
And 2nd to last slide, a good way to keep this behavior up and
make it a habit is to continuously monitor and
evaluate.
Are you using your best practices?
Are you keeping up with, you know, updating your passwords
using complex passwords using multi factor authentication?
Umm have you had any refreshers in the past four months?
And then there's always, like, have you done something you
shouldn't have?
Like, have you been careful when you've been reading emails,
sending emails out, making sure that the wrong audience doesn't
receive something they should not?
And then also, is that Nigerian Prince really in need of that
pie to save his village?
Right.
And before I go enjoy this segue to my references.
Right.
And any questions?
Good job.
Thank you.
Yeah, I enjoy that.
Put very simply and all, but there were some instances that
reminded me of things like, for instance, I think I shared it in
several security, but.
Umm, a coworker of mine in the one large company.
Uh.
She had her iPod and she plugged it in to her computer, which
almost brought down the whole network because there was a
malware attached.
Ohh yeah yeah, I think that's what.
Yeah, that was really bad.
When I heard about that, I was like, wow.
So when I came in, everyone's like, did you, you know, did you
hear about this or did you hear?
And I was like, no, I haven't.
So they're telling me a story.
I was like, oh, wow.
And she was still there.
And so she heard the stories many times over a bit.
Ohh yeah, the VA is big on that too.
They don't allow you to plug anything in that has its own
Yeah.
memory.
So like if you want to use like a mouse or like I had said you
had to make sure it was like his bare bones as possible.
Umm, I'll definitely, definitely.
And then with the bring your own device of the company I worked
for when they send us home, they gave us their device instead of
our own because if you bring, if you bring your own device, they
will wipe everything out on your computer except, you know,
except the.
I don't know the Windows thing, but yeah, but everything else
Right.
The program file is mostly.
will be wiped.
So it's not something that you really wanna bring your own
device.
Oh yeah, especially with privacy.
I would not want anybody getting access to like conversations I
No.
have with, you know, other people.
Oh, definitely, definitely.
That's why work emails always.
Uh, be careful what you say in those emails, because a couple
of my coworkers got in trouble.
Well, more than two, but they got in trouble and they were
criticizing another worker in the same department and she
found out because somehow she got ahold of the emails and she
printed that, you know, they printed it all out.
Oh wow.
Yeah.
So you're really need to be careful.
Umm, because that actually does happen.
If you criticize anyone, I always tell people do not do
that.
Do it over your personal device.
Be careful what you say.
Well, The thing is they they watch all the emails the company
does, so they read everything.
Oh yeah.
So, but they didn't.
I don't know how it got to the printer.
You know that part I was?
I was gone for like a few days, and so when I came back this I
heard all this rumble rumble in the office and come to find out
that's what happened.
You know, they found out those emails.
So yeah, they got in trouble.
One person, he was a temp and of course guess what happened.
Goodbye, Tim.
Yep.
Yeah.
So he didn't.
He couldn't work for, you know, that company ever again.
So that was on the record.
So that's not good.
But anyway, the other people didn't get, as you know, didn't
get fired by it.
But they were, you know, given a big talking to, I guess, I don't
know, but.
Anyway, I just fly throw that out, so work emails are always
it's, uh, you have to be.
Yeah, work emails always be about work, nothing else.
Work right, but not criticism of work.
You know, if you have to criticize something, don't say
it.
That's my.
Experience anyway.
Don't say it because once you say out loud or type it in your
email format, whatever it can become public.
Right.
Especially like if they can keylog your device as well, they
So.
can see what you typed, even if they didn't have you know
Oh, that'll be bad. Mm-hmm.
expressively like keep it in that document or the email.
True.
Yeah.
So be say something like that.
You might as well do it on your own personal devices and not
work work devices.
Yeah, I I found out.
You know it through experience.
That's, you know, bad way to handle it so.
The new something was gonna happen when they kept
criticizing.
But anyway, long story.
Any maybe questions to do you guys have any questions for Nick
or Nicholas?
No.
OK, going on then our next speaker is Alexis, Are you
ready?
Yes, hello, good evening.
Yes, good, good, good.
Just the the.
I've been looking forward to this one.
The yeah.
I'm so I just give me a thumbs up if you could like or off your
own voice.
As you can see the slide umm and just let me know if you just you
just see the slide like not the not anything else.
All right, cool.
So my Internet.
OK, great.
My Internet is a little weird, so I hope everything goes well.
OK.
So hello everyone.
My name is Alexis and today I will be presenting on the roles
of IT in ecommerce, so I chose this topic because I am
researching how I can integrate entrepreneurship, ecommerce and
cybersecurity into one blend of different experiences and
projects.
I can enjoy throughout my entrepreneurship journey.
For me, it makes the most sense to talk about how cyber security
and ecommerce work alongside each other to contribute to the
various technology environments as well as the business
environments too.
As cybersecurity threats continue to increase, so does
the need for the world of ecommerce to be more aware and
intentional when practicing cybersecurity for their
businesses.
So for the overview, we will be reviewing what ecommerce is, how
information technology and cybersecurity relates to
ecommerce, cyber security risks and ecommerce, mitigating cyber
threats in ecommerce as well as final thoughts on cyber
securities role in ecommerce references and then questions.
Ecommerce.
Let's dive into learning about how ecommerce and IT work
together.
OK, So what is E commerce?
The E&E commerce translates to electronic commerce.
Ecommerce is the ability to purchase and sell online via the
Internet.
Ecommerce is considered to be a globally important key
development in the field of business.
Also, it is the key that changed marketplaces, commercial methods
and economies worldwide over the years, with more digital
enhancements and more digital editions to the ecommerce space,
it has transcended the shopping experience into multiple
versions of virtual virtual platforms to provide virtual
shopping experiences for customers.
Ecommerce is typically favored.
More due to its convenience and ability to be accessed or
practice globally, and it's it's usually favored more than going
shopping in person.
Going to a brick and mortar.
Umm, building.
So how does IT and economic with other?
They are good friends because one cannot work without the
other.
And it's not great without the counterpart, it's digital
electronic counterpart.
It is crucial that cybersecurity systems, softwares and
techniques are employed throughout the protection and
maintenance of ecommerce websites.
It's a must for all ecommerce businesses and or entrepreneurs.
Cyber security is vital for the protection of ecommerce websites
from scams, Packers and any other various cybersecurity
threats.
All businesses should establish a foundational understanding and
how cybersecurity practices and and enhance the security of
other websites.
It's also important that entrepreneurs have their own
website, and this is also include the personal blogs,
personal domains and social media profiles.
So when I say that it's important for entrepreneurs that
they have their own website, I mean, if they have their own
website, they should make sure that they are following the
proper cybersecurity policies and procedures.
If they're not being hosted on a website such as Shopify or Wix,
they just just make sure all the basic components are put in
place.
It shouldn't be too challenging.
Umm, all businesses must ensure they are using the correct
security measures to prevent data breaches from damaging
their reputation.
E-commerce businesses must also know how to properly and
efficiently respond to a security breach, which is why
going over information and presentations like this is
really important.
Cyber risks in ecommerce.
There are a plethora of risks in the landscape of ecommerce.
Some of the threats are fishing, dedos attacks, malware, cross
site scripting, also known as the actual like S, and the 2S S.
And is skimming, so fishing for fishing customers are often
tricked into false instructions, which can lead to data breaches.
And this typically occurs right before malware infection.
So you go furthermore about phishing.
Phishing is one of the main attacks that occur for most
businesses, especially in ecommerce.
Customers of these ecommerce businesses are always at risk
for being targeted by social engineering attacks.
They are the types of attacks that use fraudulent messages to
trick customers into giving their personally identifiable
information, AKA PII, such as account numbers, credit card
numbers and passwords.
Cyber criminals can then use this stolen information to gain
unauthorized access to users accounts, which is kind of
similar to credential stuffing.
Except credential stuffing is more about brute force attacks.
For us, this situation is more about being able to get the
information and on authorized manner.
Also, phishing is typically the precursor to a malware
infection, as I had previously mentioned, distributed denial of
service attacks DDoS attacks are used to disrupt business
ecosystems by overloading their servers with requests.
With multiple requests, the attacks are usually streamed
lined by botnets, so underneath DDoS attacks.
I have botnet core because in this case the botnet machines
are the core of the action.
They're the core of the DDoS attack.
They're like the main.
That's just how I I perceive it to be, and also botnets are the
sole operator for infecting devices on the network, leading
to the target device being overwhelmed with multiple
requests.
Ohh and this can be very bad for ecommerce systems because an
attack like this could result in such extreme laws such as having
to completely shut down an ecommerce website that would be
excruciating if I had an ecommerce website and that
unfortunately happened, you'd have to start all over again and
E giving can lead to fraud.
So I have this ecommerce video here, just a few things that I I
would love to point out before I'll I'll I'll say it before the
video so I'm going to talk.
We're going to stop at certain points, not too long.
We're going to go over phishing ecommerce websites and
organizations and how they will never send a link to their
customers regarding PII.
And then we're also going to review a section about SQL
injections and basically how SQL injections are and increasing
potential threat and more ecommerce businesses must be
informed about these potential threats that may arise, such as
hosting your website via Shopify.
Since Shopify uses my SQL for the databases to store lots of
big data, but I'm going to play the video and let's just give me
a thumbs up.
If you can hear it.
Of course, need to protect.
Great.
So I'm gonna pause it.
Just bear with me.
I'm going to go to.
Umm, I'm going to go here.
This time it's name because.
OK.
So that portion I just have a note that I wanted to say about
that, yeah, if if you are a customer and you're getting an
email from your favorite ecommerce store and they're
asking something about like PII, that that's definitely a scam.
They're never, ever, ever, ever going to reach out to you unless
you yourself went in on your website or on the website and
requested to you say forgot password or forgot email.
That's most like the most realistic time or moment that
you you would get an email from that person.
Now just want to go over SQL injections.
Sequel.
3.
Here.
Get.
For.
Correct.
Present and.
OK.
So I'll I'll stop it right there, because the note that I
have is so like they said, keep an eye out for malicious
activity.
And I think it's crucial for ecommerce businesses to so these
things so they so they know what to look for in terms of the
unusual locations and the multiple shipping addresses.
Moving on to the next few sections.
So now we will be continuing with discussions on mitigating
and minimizing threats as well as why information technology
and cyber security are needed in equal parts.
And I like this gift here.
I think it went really well with the theme.
OK.
So mitigating cyber threats and ecommerce, it is important to
establish traffic and traffic baseline for E commerce
websites.
This means that businesses need to keep an eye out for unusual
activities, just like it was mentioned in the video.
And also here's a screenshot of that complete order.
I just wanted to stop at the multiple shipping addresses
because I don't want to go past the time too much.
Businesses need to keep an eye out for unusual activity, such
as customer creating an order with multiple shipping
addresses, like in the video, third party risk management.
It can be a threat to ecommerce websites because other
suppliers, vendors, etcetera are all potential weaknesses within
the supply chain.
There are security solutions for ecommerce websites to securely
and transparently work with third party businesses.
This.
Online businesses must ensure that they are using the most
updated SSL security certificates SSL/T SLC security
certificates, especially since most ecommerce websites are
going to be processing financial data anyways.
The S and HTTPS provides a higher level of security, hence
via encryption and verification of data transmissions,
organizations are encouraged to practice stronger password
implementations.
So for stronger password implementation, the password
created should be based on what that application is asking, like
in terms of requirements such as recommended characters, letters
or numbers.
Also, backing up ecommerce store data like for instance, if you
have a Shopify store and they have all the database
information stored somewhere and you're the admin and you have
access to it, or if you need to reach out to Shopify.
Either way, you're still going to be able to.
You should still be able to back up your ecommerce store data
just in case something we're gonna happen on the website that
you're hosting.
Hopefully nothing happens, but just in case something were to
happen, you would have your data backed up and that would mean
that you could potentially still keep the reputation of your
ecommerce business, whereas if something were to happen and all
your data is gone like that, that would you would lose a lot
of money.
You would have a negative ROI, it just it wouldn't be good.
This is why I think this is another sector that is slowly
going to be developing more, if not already.
Ecommerce security is really important.
So anyways, backing up ecommerce data is essential so this files
can be stored somewhere.
Saccade somewhere safe in case a data breach happens.
Also educate customers on ecommerce security so customers
just like employees, even though they're both, they're different
and they're the different sides of things they're both needing
to know more about ecommerce security in cybersecurity.
Umm.
And it's a great way to get closer with your customers and
to help them protect their data.
They will know that you were on their side.
Umm also, cyber security awareness training can can be a
part of that too.
You can, as a business owner, maybe send a weekly letter or a
monthly newsletter.
Just just reminding them about the cyber security threats that
that arise, it is recommended to perform ecommerce security
simulations so retail companies can gauge the current security
posture of that organization.
This this is part of the process of of running multiple tests to
examine, review how well the company responds to flaws and
risks in in the defense system that they have in terms of
defense layers, ecommerce security can be enhanced by
employing multiple defense layers.
What does that mean?
That means that you can employ VPN firewalls, 2 factor
authentication and and other layers to protect your ecommerce
business.
So my final thoughts on Cyber Security's role in each others
more concerned on cyber affairs for ecommerce businesses.
So I think that ecommerce businesses should dedicate some
time into investing and learning more about security.
That essentially translates to whoever is the owner of the
ecommerce business.
They're probably going to have to gather and garner another
skill.
They're going to have to understand the foundations of
cybersecurity, especially if they want to survive in the
digital space of selling products online.
They should also learn how they can teach their customers to not
be tricked into giving away their information.
Also, I think it would be a great idea for ecommerce
businesses to pick a day.
Perhaps like I kind of just mentioned before, but more
specifically pick a day out of the month to promote the
importance of knowing the different types of social
engineering attacks that can occur and also talking of they
can also do this through Flyers or through email marketing.
Umm but yes, it's very important that these ecommerce businesses
are more.
Uh, yes. Fraud.
Economic fraud?
They're more specific in terms of, like, hey, like you can your
credit card information can be stolen if you're not careful.
And then that can lead to fraud, just like East skimming.
So with that being said, here are my references and thank you
any questions.
So I raised my hand by mistake, but good job.
It's thank you.
Thank you everyone. Thanks.
And that's good.
That's a good note about the Shopify.
Because if there are, you know their databases.
With SQL it's like not very safe.
Yeah.
Yes.
Yes, exactly.
Umm.
There's still umm, through my research I realized I was like
wow actually like even though Shopify were really great store
and a really great platform is still has a lot of security,
cyber security hurdles to overcome, just like many other
websites.
But yeah, Shopify is still developing.
Mm-hmm. True.
Good to know any questions one.
As a person.
Go ahead, David.
Yes.
Uh, yeah, I and I know I I'd started sort of a years back in
developing a whole, you know website and ecommerce sort of
site on my own.
And and I realize it's a.
It's a mound of of you know, work to even let alone set up
Umm.
all of it, but even to manage all of those things and and
then.
Now that security should be a major concern too, because of
the threats.
I'm just wondering if did you or anyone ohh having concerns about
the services that we sort of like trust to to to sort of
manage now these days like you know the you know services that
what is it platform software whatever and and and and the
fact that if they are all up to date with all their security
measures I know you talked about Shopify I mean is that a concern
is that but anyone.
Yes, umm, I actually am going to go back and look at my
PowerPoint slide because I thought I mentioned it, but I
guess I didn't.
It was something along lines of third party vendors.
Did I mention anything about third party vendors thing?
My brain.
I don't think so.
I'm tired.
Dang.
Well, thank you for asking that question.
I could have.
I'm looking anyway.
I'm not gonna spend the time to look, but yes, I definitely
have.
Express my concerns about like the third party vendors and I'm
really trying to scramble to find it, but I basically just
said something along the lines of like these these companies.
These ecommerce companies are going to also need to be careful
with third party.
Ohh yeah, I did.
I did.
I did mention it.
OK, I said something about third party.
If you just bear with me, I just need to say it out loud.
Third party risk management.
Yeah.
It mitigating cyber cyber threats and ecommerce, I had
said that.
The the third Party risk management can be a threat to
ecommerce websites because other suppliers, vendors and providers
are all potential weaknesses within the supply chain.
So while that is a huge concern, there are security solutions for
that.
I think there's something called like up vendor or something like
that, which is another vendor for third party security
protection.
But I'm I hope I answered your question, but yeah, I'm
definitely concerned about that for sure.
That's good.
Great.
Thank you.
No prob.
Alright.
Any other questions for Alexis?
That's a so quiet.
Wow, client quiet.
It's one of those days, right in the week.
It's like I'm tired, OK?
Yeah, I'm so tired.
I bet.
Alright, our next presenter is David Brown.
Go ahead, David.
OK.
OK, let me do this.
I think.
Umm.
I know I'm sharing my.
Screen.
Green.
Yes, it's coming.
It's coming.
Uhm, we have computer forensic examination and law enforcement.
Is that yours?
Yes.
OK.
I said have that.
There you go.
That's it.
Yeah, well, this is, you know, when you're in the presenter
presenter mode then the the main screen comes up really big.
Nice.
OK, so we're good.
What was that?
OK, cool.
Keep going.
OK, alright people.
My name, again to repeat is David Brown, and I am presenting
to you as we see on this title slide, computer forensics
examination.
So part of it is I think there is we're gonna get to kind of
get an understanding that there are other entities that are
involved and what I put in here in law enforcement and we might
think of us as cybersecurity professionals on one end.
But there is a great deal of this work being done and have
been done, and then the and and needed because of technology
advancements, you know, you hear about DNA and and evidence.
So we're gonna go on to all of that and then connect that with
the justice and how it works in court, how you have to present
that evidence on whether it's digital and what we might think
of when we think of CCSI on television.
Umm.
Physical evidence, Even so, that is all going to be the
connection here.
Digital connected with law enforcement court investigators,
so on and so forth.
Umm.
So let's look at investigation and enforcement.
In an era dominated by technology, digital evidence
serves as a cornerstone in criminal investigations.
And with the surge in cyber crimes, computer forensics plays
a pivotal role in solving cases and and.
Prosecuting offenders, just like any other crime.
Perry.
So those, that's the realm in a of all of this is all
intertwined.
Together.
Uh, the the main message is that computer friends forensics is
the key to unlocking digital mysteries, providing law
enforcement with tools.
Those are critical tools to navigate the complexities of
modern crime.
Even so, we can see how it is needed in that sense as well.
Digital and physical evidence.
Are the tactics used in the crime scene investigation and
the objectives of computer forensics are comparable?
That is, computer forensics uncovers digital evidence,
right?
Ohh.
And get and and it to support investigators.
And physical evidence is gathered to reconstruct events
at a crime scene.
Let me see some of the whether there's the the hard drive on
one hand and.
Might be noted as a bloody knife on the on the other hand, of all
evidence, right?
Uh, the farmer involves gathering digital data, data
from devices and the other on the other side.
Uh collects things such as fingerprints, DNA and and other
objects that we have listed here.
Both utilize essential preservation techniques, which
is the process here that's coming along, and computer
forensics digital evidence is preserved through secure
practices and crime scene investigations preserve physical
evidence to maintain integrity, and you'll hear this word again
as we progress and the presentation.
And that's just like the computer forensics experts and
integrity remembering that we will discuss how the foundation.
Let's see.
Excuse me, the the fundamental investigative concept must
maintain a chain of custody and analyze and examine.
Umm.
Procedures and adhere to legal protocols and standards.
Investigators must maintain the expertise and experience as a
requirement to accomplish these tasks.
OK, that's important.
So we we these are similarities whether it's a digital on the
digital side or this physical side with these investigators
have to go through.
Uh, what is the role of digital evidence?
Vestigation uh digital evidence is now an indispensable tool in
modern investigation, playing a major role in uncovering the
truth and securing justice and the digital landscape.
Every click message and interaction leave a trace.
Offering investigators amound of clues that traditionally may
have been overlooked analyzing digital evidence is the key
component in criminal justice on the investigative.
Or the investigative fields.
The importance is to further outline presentation methods.
What's unlike physical evidence?
They can deteriorate.
Digital data remains relatively stable and can be recovered even
after deletion and we will see some of that later on, and this
analyst of data data digital evidence reveals patterns,
connections, and timelines, helping investigators piece
together the piece of the puzzle so that we can see through the
digital evidence.
There's email.
Right.
We know a lot of it's use utilize this email.
Photos.
Videos.
Social media post can become powerful testimonies that can
strengthen the prosecution when presented.
Effectively in court.
Understanding the proper procedures for collecting these
this umm this material evidence for collecting, preserving and
presenting digital evidence insurers?
It's and this is.
This is another step that investigators have to go through
admissibility in court and deemed it's included or excluded
due to error.
That's an important part of getting to the part where you
need to present this evidence and have it being able to be
presented.
Uh, so this leads us to the types of digital evidence, and
if it didn't, evidence comes in again, various forms providing a
mass amount of information to reconstruct events.
And once again.
We see some of.
Umm, the states.
Now we're getting more into what we need to do to protect this
evidence when we're working in this field as well.
Their entities that are out there that are working on both
sides and our national security can be threatened as well.
Just things that we need to be aware of.
When we're working with this fields.
OK.
So again, what are the types?
It's let me see hard drive here.
Which store vast amounts of data, including documents,
emails, history, system logs and even deleted files that we
talked about.
Imagine a hard drive as a digital storage unit holding
elements of past activity and experiences.
We heard that in some of are other.
Presenters tonight some of you are maybe familiar with some of
these devices.
And may.
Uh, we use them a lot, I'm sure.
Right.
A lot of us.
And we have the cloud storage platforms like Dropbox.
And Google Drive have become digital file cabinet storing
documents, photos and backup of devices.
This information can offer valuable insights into user
behavior and data access.
Once again, another great means.
Of the investigative process.
Right.
Communication sources.
Again, it's repeating all this.
We have emails.
How many of us and how many emails have we sent and and
received over the years?
And we know that emails written messages can they can reveal
intent and connection between other people.
Think of them as digital letters that you might consider private
and personal.
How many of you use WhatsApp?
A platform that offers real time communication.
Exchange, potentially capturing conversations and revealing
sensitive information.
Imagine an intercom.
If if some of you are familiar with that term, recording your
words in text form.
What about?
Social media post.
These public and private interactions can provide
insights into a person's thoughts, relationships, and
activities.
Think of a Community Board, were you post?
Uh, excuse me, where people post, you know, little cards
about wanted items, lost dogs, you know?
And projects that they want completed, for example.
It's all or sources.
That are vital to the investigative process.
Multimedia logs?
Uh.
Involved photos and videos visual captures can provide
evidence of activities and identify individuals and crime
scenes like a digital camera capturing moments in time audio
recordings.
Or another thing, voice messages, phone calls and
recordings from security devices and surveillance cameras can
provide audio evidence of spoken words and conversations.
I think of how my ring camera can pick up and record audio and
video of outside movements and I'm able to go on.
On to my device and look at those things from months back.
How maybe interesting and maybe a little bit troubling in some
ways, is that that all that information is stored.
Alright, because in both ways.
He steps in an examination.
Uh, what are they?
Well, identification, which involves recognizing potential
sources of digital evidence devices, storage, media,
network, etcetera with collection is a step which
involves gathering digital evidence without altering it.
So here we come again to maintaining the evidence
integrity and using forensically sound methods.
This is an important step when it comes to being able to
present this information.
Right.
So what about examination, which involves analyzing the collected
data for relative information by using the forensic tools that
are out there to examine files and system activities for
unusual patterns?
And then we analyze that by interpreting the findings to
draw meaningful conclusions.
The important step also is documentation, which is very
important to being admissible and involves creating detailed
records of the examination process.
The information should include procedures, tools, used,
findings, et cetera.
Then we come to the part where we have to report this
information, which includes communicating findings clearly
and concisely, to generate a comprehensive report detailing
the investigation, evidence, analysts and conclusion.
All right.
Lastly, the results must be presented to relative parties
like the legal teams court or investigation investigators and
most importantly, the eject.
The objective is to ensure that the evidence is admissible in
court, which is enhanced by following legal protocols,
maintaining what you'll hear again, a chain of custody.
All right.
What are the challenges in computer forensics in
combination?
In particular, will concentrate in some way on law enforcement.
What about all the devices?
Aren't there the volume of the of data that's on them?
Consider the staggering amount of data that is stored on a
smartphone.
Right.
Gigabytes of information, if you will.
A computer today can store.
Have you heard?
And I'm sure you have terabytes.
That's a lot of data.
Add this to the complexity formats.
Uh.
And encrypted files to obscure, uh software logs, right?
That's another obstacle.
Encryption, the investigator needs to specialize, needs
specialized tools and knowledge to access.
And interpret different types of data.
When that happens, right?
Moving along here at several information, we can go to old
devices like an old telephone.
Some of you might be familiar with that.
And then so we know the evolution a little bit of how
devices have developed to where we have.
Tom, today even our televisions are pretty advanced as well.
Most of us.
Have in our hands a lot are smartphones.
So we add the fact that the framework around evidence is
constantly changing and requires law enforcement to stay informed
and make adjustments in court accordingly, OK.
Cloud computing is 1 big thing today, moving along today, more
operations are headed to the cloud, which can present a
jurisdictional and access issues with data stored on cloud
platforms.
The impact can transfer to major difficulties.
That is in obtaining and preserving cloud based evidence
for legal purposes, OK.
But if we talk about before, which is an important element
here, is chain of custody.
Most of you may be aware of the CIA triad.
Which is a the guiding model pretty much in information
security.
The ICIA stands for confidentiality, integrity and
availability.
Yes, uh.
Personal and sensitive information must remain
confidential.
I mean, that's clear, right?
And protected from unwanted sources for various reasons.
Legal.
Moral.
Ethical for customers data must be available when needed.
That's availability, part of it, right?
For what we are now, we need to shine the light on integrity,
integrity, the integrity component which is the main
ingredient in the chain of custody scheme.
What is the chain of custody and digital forensics?
Hmm.
His primarily ensures evidence integrity.
It is the meticulous documentation of every step from
the moment digital evidence is seized to its presentation in
court.
So these are all the connections that need to be made for those
purposes.
Moving along, I make sure I'm not going over here overcoming
challenges.
Uh in computer forensics.
The digital crime scene.
And where we are, the digital crime scene so.
Let's say let's go, then move on to taming the the digital
avalanche.
What are the challenges?
The data volume we said and then complexity modern devices hold
terabytes of data, requiring investigators to navigate a sea
of information and provide relative and relevant evidence.
We have some solutions, tools, techniques, specialized software
that will help filter and organize these devices and
analyze them effectively, shift sifting through.
Uh, the relevant cluster to unearth the hidden clues?
Checking or cracking?
Where are we cracking the encryption fortress?
OK.
We know that the challenge is encrypted data, locked treasure
chest of information that can hold key evidence, but present a
significant battle solution.
Perhaps is a multifaceted 1.
Investigators utilize a combination of techniques,
dictionary and brute force attack, systematically guessing
passwords and trying every possible combination to unlock
that data.
Let's move on here.
We need to stay ahead of all of these and embrace and in
innovation as a solution, continuously learning and
collaborating or key.
I know that we talked about in other presentations tonight
training.
That's a big part, and the individual training and and
certification regularly attending workshops and
acquiring certifications to stay updated on the latest forensic
tools and techniques.
Collaboration is huge.
Open source tools.
Are you utilizing free and community developed tools or
other ways to help with these challenges?
Uh building?
A bridge of trust.
OK, the legal landscape.
What is that?
Navigating through a legal and ethical concern.
Miscibility of evidence?
Uh, there are concerns with that 4th amendment and data privacy
concerns.
We gotta be careful.
What information we present and if we're not violating any of
those 4th Amendment rights, privacy rights, search warrants
and seizure, these are protocols.
Those are are just, I mean, when law enforcement having to get
involved, digital forensic experts, all of these people
need to follow these procedures when these information needs to
be presented.
So that is the real connection here.
The chain of custody and data integrity once again, that must
be maintained throughout, where we're not altering that data in
any way.
So it might be deemed inadmissible.
Uh, what are the ethical concerns?
Privacy and intrusion.
Intentional overreach some people might do that be a
violation of their personal data balancing crime investigation
with citizen liberties.
OK, being transparent and accountable and handling
sensitive data bias and discrimination, we've heard
those terms before.
Human biases influencing and interpreting and analyzing.
We need to be aware of these things that AI is a big concern
these days about whoever develops that AI technology or
device are they are they subject to these ohh biases and
discrimination.
Regulations.
OK.
And moving forward with balancing interest, OK.
Collaboration and transparency is good.
It's huge, engaging public discourse and stakeholder
dialogues, building trust through clear guidelines and
communication.
Collaborating with technologists and legal experts, these are all
very good ways of overcoming our challenges.
Standardizing protocols and training.
Yes, investing in technology and innovation.
All right.
That's that's a real important part of what we need to do, case
studies.
There are several and I when I was looking in my research and I
went over and one that's called bringing down the Silk Road,
which was in 19 in 2013.
Umm.
Meticulous analyst.
Of bitcom transactions and IP addresses led to the dismantling
of the infamous online black market Silk Road.
This landmark case demonstrated how digital footprints can
expose even the most hidden criminal operations.
Others that I've gone over a light that a lot in my research,
in which a little bit troubling to me, but hopefully we can and
make some leeway with our advances in technology and
evidence and digital evidence these days.
And that is combating child exploitations.
Computer forensics is a vital tool in combating Child
Exploitation and trafficking.
Investigators can use specialized software to track
online predators, analyze child abuse imagery, and identify
victims, leading to rescues and prosecutions.
Yes.
What is exploring the future of computer forensics and law
enforcement?
What is that entail with our crystal ball that we might bring
up?
Let's look quickly here at the technical landscape.
Artificial intelligence we talked about, I mentioned
earlier BASS data sets and identification of subtle
patterns, automated threat detection.
All these things, potential ethical concerns and bias risk
we talked about that I, uh, Internet of Things, challenges
and securing and extracting data from diverse systems.
A new avenues for evidence collection and analyst with all
these devices?
New devices.
The mounds of connected devices we have fridgerators television,
a lot of things we have are are alarm systems, are are security
lights OK, blockchain technology.
But I won't go into all of this just to move on here.
What are the?
Rising challenges and opportunities and data privacy
concerns.
Yeah, we talked about that.
It evolving encryption techniques, quantum computing,
posing potential threat to current encryption standards.
So it's all coming to us these days.
These are the challenges and what how do we overcome it?
Investing in post quantum.
Cryptology, cryptography and innovative description methods
right collaboration is huge.
Let's continue to do that as we learn about these processes
shaping the future.
Where are we there when we talk about shaping the future
international cooperation and standardization has been in
place and is known to be of some effect in doing this at the call
frameworks and ethical trust.
Establishing that developing clear ethical guidelines for
responsible and transparent forensic practices, engaging in
public dialogue and building trust with citizens, ensuring
accountability and oversight in forensic actions.
And that's a gone through.
I hope I did spend too much time, but do we have any
questions?
I guess I'll stop.
Sharing.
Good job.
Bigger understandable.
Thank you.
Donde logical to me.
Good job.
Yeah.
Anyone have any questions for David?
No.
No, no questions.
OK.
I guess no questions.
David.
But I do like forensics.
But my instructor told us well, if you don't have any criminal,
you know criminology background.
Then you'll be discouraged from doing forensics.
So I thought ohh I guess I can't, but you know, that
doesn't mean you can't.
You never know what you who you are encounter and if you are
interested in that field, you know, go for it.
Uh.
I worked in in and and I and.
It's interesting enough to me.
I have some interest in that.
Ah.
At least it seemed it exciting to me to to sort of break umm
Uh-huh.
the evidence.
Evidential pieces apart and kind of delve into it.
I I I was a probation officer in my past also, so yeah.
Ohh where you?
Ohh great great.
Well, you have some background.
That's so that's fine.
But yeah, I've always been intrigued with the, you know,
Somebody.
the code codes and finding secret messages that that part I
really like.
Umm so I got into stenography.
I think that's how you pronounce it.
I'm not sure you know where they have hidden pictures or hidden
text in the pictures of that type of thing, but I do like the
coding part.
You know what? Cryptography.
That was fast.
Yeah, that was fascinating for me to find that out.
Yeah.
And I learned about a little bit of that more in in my class
Uh-huh.
studies coming to Purdue.
Ohh hmm.
That's interesting.
Wow, the hidden messages.
Yeah.
Yes, I really like that a lot cause then it was.
I remember one assignment we had, and yeah, it was really
hard to find the information.
I mean, what they were looking for, but I took a while.
It took a while for me to do it, but I I worked on it and worked
on it until I actually found those.
The secret message in it.
So it was an.
So.
It's a nice feeling going ohh, I got it.
I got it.
Yeah.
Because, you know, I hate it when I have exercise to do and
for the assignment, and I can't figure it out right away.
And so it was challenging, but I really enjoyed it when I got it
so.
Ohh cool.
The warding?
Yeah, but the hard part for forensics is, though, is let's
say, you know, you have someone from China or Russian, you know,
trying to do something bad in the US ohm that makes it really
more difficult because not only you're talking about a foreigner
of trying to do something bad in the US, but you need cooperation
from the the country.
So if it's from Russia, you'll have to get the Russian, you
know, administrators to, you know, let you infant know about
the information or whatever, you know, stuff like that.
So that would be a a difficulty.
And so I'm glad I'm not in that part of it, because that I would
not be able to, you know, figure out how to get there.
Although you know people have done it.
Ohh yeah, those those jurisdictional even challenges,
Umm. Right.
right?
Even that law enforcement has to go through, you know, they
Yep, definitely.
right.
You can't just go to Canada and say that I'm gonna, right?
Uh, right.
Right.
Because then you have to go through the channels.
You know, talk to the Canadian officials and all that before
Steven.
getting your man or girl.
Right.
Well, you even think about, like the let's law enforcement
example, but it I think it transfers to a lot of where a
local jurisdiction in the state who trumps the state and who
trumps the FBI.
Right, a federal agency.
Right, I know.
So they don't.
They can't.
Federal agency comes in and takes over something, right?
Mm-hmm.
Ohh definitely and things change.
So you know, it's hard to keep track sometimes.
Who's in charge of what?
You know, it's hard to hard.
It's difficult.
OK.
So it sounds like we have our last presenter.
Umm, that's a Yao's recording.
We were supposed to do that last week.
Or was it last week, something like that?
OK, no questions.
Good job, though, OK? Uh-huh.
Cancel, but it's not, though I have to own.
Go to my seminar.
Sorry to interrupt, but I have to go to my seminar, but thank
Ohh, that's fine.
you for everything.
Alright, take care, Alexis.
You too.
Thanks. Bye.
Bye.
All right, so let me present.
So one moment while I get that set up.
Screen.
Window.
Or is it this one, this one?
I think we did that one.
We hit this one and share.
OK.
Can you see my screen?
Yes.
Yes, OK.
And let me start and then let me know if you do not hear, they
should.
OK, but let me try this.
Unleashing the power of cloud navigating modern solution.
So, OK, exploring the future of cloud computing.
That would have shown to cloud computing.
Good evening everyone.
Today you will embark on the journey into the transformative
world of cloud company.
Our plantation, unleashing the power of a clock, let me gain
more than solution M's to explore the evolution and impact
of cloud technology on the modern business landscape.
Cloud computing is not just a technology shift.
It's a revolution that empowers organizations with scalable and
flexible solution to meet their dynamic business meet.
Cloud service models.
Let's start by understanding the various service model offering
by cloud computing infrastructures.
As your service platform as a service and software as a
service, each model provides a different level of assertion in
management.
That's what stability.
Choosing your wife service model is crucial for allowing.
Cloud sauces.
This is this is peak business requirements.
Cloud deployment models.
Nice.
Let's explore the different.
Deployment wouldn't public cloud.
Private cloud, hybrid cloud and metal cloud.
Each deployment model has its own set of advantage and
consideration.
If you're seeing factor shows US security control and
scalability.
The flexibility to choose the right deployment model enables
organization to tell the class as easy to unique business
needs.
No.
Benefits of global company the abduction of cloud comparing
brings about in the house and the benefit including cost,
efficiency and scalability and flexibility and change.
Security support for collaborative.
Remote work.
Be home, school savings.
Cloud computing fosters I reality and innovation,
performing the way organization operates and in our.
Cloud security best practices security is a paramount concern.
Is a in the cloud implementing Morbius part.
This shows us it. Uh, Christian.
I did not teach you and access management and regular audits
assures a security cloud environment.
Security is a shape, personality and other thing.
Best practice is scripture for to safeguarding data and
infrastructure.
In the cloud.
Global lative declarative.
Cloud native technologies shuts up containers.
Docker orchestration trust us, the Kubernetes and said, and
seven nights comparing on power developer to build and deploy
application which are greater efficiency and scalability,
scalability.
I'm blessing cloudy to you, technology and OPS organization
to arms of a full potential of cloud for application
development.
And deployment.
OK, study successful cloud implementation.
Let's start closer.
Look at really wall is simple.
I will organization that have a successful implement cloud
solutions.
This case study provide inside in the best parties challenge
face and transformative impact of cloud technology.
Learning from successful implementation help us in the
strain.
How organization leverage the cloud to drive inhibition and
achieve business of SUBJECTIVES?
Feature trains in cloud company as we look to the future, civil
trains are shopping with linkage of cloud company age, comparing
AI and machine learning integration and the potential of
qualifying tomorrow.
Competing in the cloud are key.
Area to watch.
Staying informed me about emergency, straining or sures.
I'm going to show you mine at the forefront.
Offer technological innovation in the cloud.
Conclusion.
In conclusion, we cloud is now just technology.
It's a catalyze for in the vision and confirmation as we
navigate the evolving landscape of cloud computing.
Let's embrace.
It is potential to his sharp industries and drive progress.
Question 16.
Well, he money.
Uh, I would like to open the floor for question.
Feel free to ask about my any aspect of cloud Company and he
late topic.
Your engagement is crucial to making this session and wishing
seem for everyone.
Closing.
Thank you for joining me on this exploration of cloud company.
I look forward to to Dell to delve deeper into this topic.
During the master class.
Those smiley faces of my research.
Cool.
Any questions?
I guess I can't answer for him, but.
I do remember that, umm topic we had to do.
Similar, we had to talk about cloud computing.
I remember doing one of my presentations from one of my
classes.
All right, Annie. Uh.
Comments. Comments.
No questions, no hope, but I'm just teasing.
All right, so everyone did a good job.
And.
I do like some of the umm pictures that y'all had on his
slides.
Look really intriguing or interesting.
Uh to have there.
Alright, so no questions or comments, huh?
Alright, so I guess you can go because we're done early because
we we did have a couple slots open that anyone wanna do
another the presentation.
Because I noticed there are some more that joined us, so I
thought maybe I'll give you know say that.
So just that because, umm, I think Marjorie asked about if
there was anyone who wanted to, you know, come in today and do
their presentation, then they don't have to do it at a later
time.
It's up to you.
So no, no other presentations.
OK, well, I'm gonna end it then, and you can just are dismissed.
If you are stick around, that's fine.