Hello everyone and welcome to master class this Thursday
night.
I'm March 14th, 2024.
We have quite a few presentations this evening and
such great topics that are coming U too.
I'm hoping that you everybody's going to enjoy themselves to
night watching and listening.
I'm gonna pull up the first one by Raya and she's going to speak
through the phone while I resent. Uh.
Get it ready.
And we moved one thing over here and present that.
Yeah.
Share that out.
Yeah.
OK, now.
Can you see the screen?
Yeah, I can.
All right.
OK.
So hello guys.
So my name is Riya Vyas and currently I'm a senior at in
Bachelor of Cybersecurity.
So today I'm gonna talk about virtual and augmented reality.
So set.
OK, so for the agenda of my presentation is firstly, I would
like to talk about what is virtual reality and augmented
reality and afterwards we will see the difference between both
of them and later on we will see how the market is going towards
this kind of technology, which is like a market prediction,
what kind of future scopes there are and then conclusion, next
slide please.
OK, so what's your reality?
So what's your reality?
And is an artificial computer generated simulation or
recreation of a real life environment or situation it
imminent the user by making them feel like they are experiencing
the simulated real reality?
Reality first hand primarily by simulating that vision and
hearing.
Virtual reality is a possible through a coding language known
as a VRML virtual reality modeling language.
We are ML can be used to create a series of images and specify
what types of interactions are possible for them.
Next slide please.
OK, so this is about augmented reality.
Augmented reality is a technology that layers computer
generated and how enhancements atop and existing reality
augmented reality is a developed in apps and use on a mobile
device to blend digital components into the real world.
And we can take the example of online shopping like the real
products are maybe in the shop and they show you.
But virtually like how it will look like now also in the real
estate business, people are buying their house by using this
kind of technology.
Logy.
Where they are living very far, but the real estate agent show
you the virtual reality of the house and you feel like you are
really actually existing in that house.
Augmented reality technology is used to display score overlays
on Telecasters Sports games and pop out reading emails, photos
or text messages.
Let leaders of the tech industry are also using augmented reality
to do amazing and reverse reversionary things with the
holograms and more motion activated commands.
Next slide please.
So here we will talk about what is the difference between
virtual reality and augmented reality.
One of the biggest confusion in this augmented world is it
different between virtual reality and augmented reality.
Both are getting so much attention by media and various
world organizations and they are because they are upholding
promises of tremendous growth in upcoming future.
So let's talk about this virtual reality versus augmented reality
different.
Next slide, please.
So augmented reality and hunters experiences by adding virtual
components.
Contradictory virtual reality creates its own reality that is
completely computer generated.
Virtual reality is usually delivered to the user through a
head mounted or handheld controller, like.
If you see the apples product, which is for gaming.
He was an animal.
Or when he found him, he wanted him to kill him, to away with
him.
He talked about anxiety that he had.
That is the mentioned here.
First wanted to notice what they.
Hello.
Hello, can you hear me?
I think you got it going.
Yeah, someone I think.
Somebody was on.
You got it.
Go ahead.
OK, so augmented reality is a being used more and more in
mobile devices such as laptops, smartphones and tablet.
So let's see what are the features of augmented reality?
So images are created using applications that makes US
virtual content and real life content together.
On the other side, with the virtual reality creation of an
actual world, not just an some content on the augmented reality
side, users are able to do this difference between the two.
But on the virtual reality side, some short of virtual reality
headset is a required so you have to have some kind of
device.
That way you can feel the virtual reality, which is the
content base on the augmented reality side.
Users remain in the real world where you feel by virtual
environment, but you are staying in the real world environment,
but on the virtual reality side you are going on the different
kind of computer generated world where you feel different kind of
experience which is not real, but it's just a computer
generated by various kind of coding languages.
Can I have the next slide please?
OK, so sometime they might ask you like is it possible that
virtual reality and augmented reality work together?
And the answer is yes, they can work together.
The mostly use of this technologies are in the medical
field.
The where they work together to make the various kind of remote
surgery possible, so here we will talk about how they work
together.
It is not always virtual reality and augmented reality are
different.
They do not always operate independently of one another, in
fact, are often blended together to generate and even more.
Yeah, amazing experiences.
Virtual reality and augmented reality are a great example of
experiences and interaction excluded by the desire to become
immense in a simulated land for entertainment and play, or to
add a new dimension of interaction between digital
device and the real world device.
So both leverages same type of technology to enhance users
experience.
They are mostly used for medical treatment facilities like remote
medical surgeries, which is possible just by using both of
the Technology.
Both are usable for entertainment purpose like
gaming and 24 those messages system.
Both technologies are useful for your physiological conditions,
such as a PTSD, which is a post traumatic stress disorder.
So mostly this vote Technology are very popular in a medical
field currently, but we as the world is growing on the growth
of this technology is tremendous.
So in the upcoming time we are expecting more and more use in
education system as well.
And I have the next slide please.
OK, so there this is the new topic which is called as a mixed
reality where you work together with a virtual and augmented
reality you can interact with the virtual environment by fully
submerging the the merging yourself in the simulated world
around you thanks to mixed reality, real and virtual
elements are combined to create a new experience in a mixed
reality where physical and digital elements interact in the
real time.
Yeah, I have the next slide please.
Did this are the future where the virtual reality virtual
reality and augmented reality are getting a tremendous growth?
The first one is a manufacturing where people are trying to gain
the virtual experience via using various kind of digital product
and trying to research on a manufacturing basis.
So that so that they can reduce the expenses of traveling on the
second hand, the shopping experience, you can just shop by
staying at home and getting the same experience you are getting
when you go shopping out out of your home.
And the most important use of this technology are in the
medical field where the remote surgeries are happening.
The doctor is staying very far away from the patient, but they
are getting the same experience as they are really doing the
surgery on the hospital and on the gamings on the the most
popular things right now going as of Apple product which is
give which is giving you a really good entertainment help
and the educational system is increasing.
It's development in a virtual and augmented reality so that
students can learn more and more about the (IT technologies.
Next slide please.
Thank you guys any questions?
Excellent job.
That was very good.
I learned some things.
Thank you so much.
Yeah, this thing I I really feel thrilled when when I was
researching about this Technology.
I feel this will be a very really good for the upcoming
generation when they are actually learning and they can
touch, they can feel whatever technology they are learning so
it will be really good.
Yeah, exactly.
Like when I was learning the some kind of technologies we
could just imagine.
But in their education system, they can really feel it.
Like how there's gonna be work, you know?
Yeah. Yep.
Definitely some of the movies also show about this kind of
technology if you see.
I know there's definitely the there's the one and I I don't
think it's the apple one.
I think it's the the.
Umm.
I think the Apple launches product for a gaming only.
It's like a digital gaming, but there are some.
There are some movies about like you can feel the real world by
just staying home, and I think I see one movie which is like a
Right, yeah.
they are just using like a digital products and they are
just going back in the dinosaur world and all that stuff.
I know it looks great.
It was amazing though.
I know it really does look great.
That's the.
Yeah.
I mean, there's so many things we can do with it, absolutely.
Yeah, I'm.
I'm sure they're coming.
Well, this is good.
I think Envidia is also working on this kind of technology as
well.
Yes, I can't wait.
Yeah.
I'm looking forward to it, absolutely.
Definitely.
Yeah, I think there is a NVIDIA CEO is presenting some kind of
conference on AI and I don't know what is the day 18I.
Oh wow. OK.
I hope everyone can join it, just like a free and it's really
good to learn about AI.
So if you get get a chance just to like visit it.
I I'm I'm sure it will be really helpful for learning AI.
Yeah, if you find the if you find the link, put it up in the
quantum teaming and we'll go there.
It's definitely something, or even in the organization
announcements.
Yeah, I would.
I would have been under share hold detail about that.
Yeah.
OK.
Yeah, because especially that it's it's NVIDIA and you know,
I thank you so.
NVIDIA is probably one of the best when it comes to.
Yeah, AI.
The You know graphics, so it's definitely something I wanna
Ohh yeah definitely.
learn.
Yeah, I wanna see what they gotta talk about.
So I'm sure that's probably be pretty good.
OK.
Sure.
I will.
I will share the details about that conference, so if anybody
Perfect.
get a chance, it will be really helpful session for sure.
Yes, awesome.
Thank you guys.
Well, great job, great job.
Thank you so much.
OK, our next presenter, I do not see Edgar.
Umm, it's said it was recorded.
It is not recorded.
I checked again and I downloaded it again.
So I'm not sure.
I, sharlene, if you can come.
Umm, he's he.
He said that he was.
Supposed he was going to uh.
He said that if it was at the beginning of the meeting, but
OK.
he's not here, so I'm kind of surprised at that because that's
Yeah.
So we're just gonna keep moving along.
why he told me.
Alright, Jesse, Are you ready?
Well.
I'm as ready as I'll as I'll ever be, I guess.
All righty, go ahead and share your screen.
OK, one second.
Don't forget to toggle the use your computer sound in case you
have something you want us to listen to.
OK.
No, that's wrong.
I'm so sorry.
I'm.
I'm really sorry.
It's not letting me present it for some reason.
Umm.
Is there I I uploaded it to my presentations folder.
Is there any way we could?
You I think you can't.
Do it.
You can open it from your presentations folder and then
share it that way because you're going to choose whichever.
Screen you're using for that to resent it with.
Great.
Trying to share it through teams with not working.
Can you all see that?
OK.
Yep, we can see it.
OK.
Get it?
You can click at the bottom that looks like a TV that's next to
the book.
To the right.
Right.
Yeah.
There, there you go. Perfect.
Sorry. OK.
OK, sorry about that.
Uh, so evening everyone.
My name's Jesse.
I'm in the cyber security department and I'm gonna be
doing my presentation over the history of pentesting.
However, my my goal for this presentation is not totally
provide a look at how pin to not only go over the history of PEN
testing, but also to provide a look at how PIN testing has
become a staple and the cybersecurity world, and why
it's important to have pen testers.
And I'll even go over the process of doing a pin test
towards the end.
Go.
So before I go over, you know, the history of it, I think it's
important to understand what is pen testing. Umm.
So pen testing is a combination of the words penetration and
testing on which is essentially been testing is the security
method in which an expert attempts to find a weakness or
an exploit in its target.
And so this could mean many different things.
So a person could testimony abilities against something
until they are able to actually breakthrough.
Or in this case, you know penetrate for the rest of this
presentation, though, and usually in day to day when you
hear someone use the term pen test, they're gonna be referring
to the form of ethical hacking.
And this can include specific machines or networks as a whole.
Either way, the goal of a pen tester is to find a weakness in
a system so they can better inform others how to protect the
system.
I'd also like to point out that when it comes to PIN testing,
the human element is the most important.
Machines and programs can do what they're made to do and do
what they've been program to do, but at the end of the day, it's
the mind of a pen tester that can use those tools to think
outside the box and get them to do things that they couldn't do
on their own.
So how pen testing began.
So the concept of penetration testing has been around since
human beings first began trying to understand their enemies,
thought processes, believe it or not, ancient armies all over the
world.
Would utilize, you know, mock battles and even games to try
and understand their enemies and find vulnerabilities to create
better attacks.
Umm, some could even argue that chest could be considered a form
of Pinter testing.
Pause when you play chess.
You know you're searching for a weakness in your opponent to
defense, to eventually flip it on its head and gain advantage.
However, in the cyber world, the first real I the first real
iteration of PEN testing is thought to have occurred in the
1960s on the growing tech industry at the time.
Realize that having multiple users on a single system could
pose a risk to the security of the system.
This realization brought on the introduction of Tiger teams,
which were tech experts that work for the military and the
government, and they would they would basically help them with
their computer systems.
In 1971, the United States Air Force ordered these tiger teams
to perform security tests on time shared computer system.
The 80s.
So in 1984, the US Navy got in on the ethical hacking action on
a team of Navy Seals, worked to evaluate how easily terrorists
could access different naval bases, computer system.
Around the same time, the US government was starting to come
down on illegal hackers and out in the normal world, as more
computers are being created and utilized more cycle, more cyber
criminals, we're emerging from the woodwork.
So the defining result of this crackdown on illegal hacking
produced the computer fraud and Abuse Act.
This act helped define what is considered illegal computer use
and what guidelines a hacker could use to perform legal hack,
essentially meaning that if you hack into something that is not
rightfully yours without permission, you are an illegal
hacker often referred to as a Black Hat hacker.
However, if you do have permission and this can be
stated in a document or a verbal agreement, you are legally that
you are legally hacking someone else's system and you could be
referred to as a white hacker.
In testing into the 90, so in the 1990s, this is the time when
it was pretty much clear that computers were going to become a
staple and they weren't going away anytime soon.
Everyone who didn't have a computer wanted one.
I don't really know that.
That's just what I learned from research I wasn't around here in
that time.
And so as as computers were on the rise and their uses were
getting more advanced than what they were before the Black Hat
hackers also became more advanced.
Not only this, but with more resources we saw arise in the
amount of cyber attacks in 1995.
Dan Farmer wrote a paper titled Improving The Security of Your
site by breaking into it.
Essentially what this paper did was it went into what a pen
tester was and how detrimental having a pin test could be.
Farmer described the emergence or yeah, the emergence of the
Uber hacker or Uber cracker.
And this was a hacker who had pushed their skill sets beyond
the ordinary and had learned to develop his own hacking
programs.
This person could discover bugs in the most advanced security
systems and could get in and out of a system without leaving a
trace.
Farmers showed the importance of a systems of a system owner
looking at his own systems in the way a hacker might, thus
laying the groundwork for contemporary penetration.
This is what led to pin testers gaining more traction and work.
People and companies wanted to know if their systems were safe
and what was one of the best ways to know that higher pen
tester to break in your system and tell you what it's lacking.
The 2000s.
So after the scare of why 2K and when everyone thought the
computers were gonna take over the world and it didn't,
everyone basically knew that computers were the future and
there was no stopping at most.
Households had a computer and even schools had them as well.
Everyone was using them, so in 2003 the OWASP Testing Guide was
created.
OWASP stands for open Web application Application Security
project.
The testing guide that was created was the first real set
of processes and procedures created for a contested follow
with the creation of this testing guide.
Pen testing is officially recognized as a real profession
with substance and a demand for White hat hackers with
penetration testing skills was on the rise.
Today.
In today's world, as we all know, or we wouldn't be here,
computers are everywhere and can do almost everything.
But unfortunately with that, this means that cyber criminals
have more tools and more ways to gain access and exploit our
systems and networks.
And this sounds like bad news to most people, and it is, however,
to a pen tester.
This could be a good thing, as now their skill set is needed
more than ever and this can lead to more jobs opening up for pen
testers and with copious amounts of resources available today,
more and more people can learn to be an ethical hacker.
But why is pentesting so important?
Pentesting is important in today's world because of the
many avenues that the cyber world benefits from Pinterest.
With technology constantly evolving the way hackers attack
systems is also always evolving.
That's why organizations need ethical hackers to also think
outside the box, just like the criminals do.
A system security doesn't mean it isn't vulnerable.
It just means an attack or a weakness in that system hasn't
been discovered yet.
If a pen tester can find that weakness before the bad guys do,
then that's a huge win.
Pentesting is a great skill to learn as you have to learn many
other skills along the way to be a successful contester and
testers can help create more secure networks by attacking
them.
What are the risks of pen testing?
So they're typically aren't many risks to pen testing if it's
done correctly and you know what you're doing.
However, in an experience pen tester could cause quite a bit
of damage, not fully understanding what you were
doing or knowing how to use the tools properly could lead to
unintentional harm to a network.
If you want to be a pen tester, do not try any attack unless you
fully understand what it does, how it does it, and how to
properly perform it.
With that being said, even the most experienced pen testers
could ruin a network or a system by rushing.
Rushing is a great way to miss a small detail, and sometimes the
small details are the ones that matter the most.
The process so now that we've discussed the history,
importance and risks of pentesting, what I'd like to do
is give a quick overview of the penetration testing process.
These are the steps of pen testing would follow to perform
a successful pen test.
You don't have to follow this process exactly.
However, it is a tried and true process that is proven to get
the best results and this process starts with
reconnaissance.
So when it comes to reconnaissance or Recon, this
ones pretty self explanatory.
This is when the pen tester will research the target.
Many different methods could be used here.
Researching them online, trying to find out what systems they
may have in place so physical hardware they use, even
topologies, or you can even use social engineering to gain more
information and insight onto the target.
The more info you have before you begin the rest of the
process, the better, which leads us to scanning, but once you
have gained as much info as you can on the target, the next step
is to scan.
In this phase, the pen tester is using tools to scan the network
for open ports and different traffic coming and going through
the network.
This can help identify more vulnerabilities within the
network.
So next that brings us to vulnerability assessment.
So in this phase, the pen tester uses the information gained from
the 1st 2 phases to identify any and all vulnerabilities and
assess which ones can be exploited and how.
Once exploited, vulnerabilities are discovered once exploited
and vulnerabilities are discovered, it's time to plan
how to exploit them.
Which brings us to #4 exploitation.
Now that all vulnerabilities have been identified and we know
which ones we will attempt to exploit, the penetration test
begins.
Here you use the tools and knowledge you have to gain
access to the target anyway.
You can, within the rules of the agreed document for the PIN
test.
And then once you have managed to do this using whatever tools
you have in gain access and you've done everything you can,
whether that be you know, just gaining basic access or gaining
access, then giving yourself admin privileges.
Once you've done what you can within the defined terms you
come to reporting, which is pretty much what it sounds like.
So once you have successfully hacked the target, the pen
tester now creates a report for the contractor that hired them.
This report is what's basically states, what vulnerabilities
they found and what kind of access they were able to gain by
exploiting these vulnerabilities.
These reports can be very detailed and they can help the
organization take the necessary steps to increase their security
and find those weak points and harden them so another attacker
can't do this thing.
But what kind of popular tools can we use as a pen tester to
follow those processes?
So one is in map in map is a powerful network scanning tool
that can scan for open ports and services.
It also includes features for identifying vulnerable
applications.
Another good tool with PEN tester would use would be wire
shark and Wireshark is a another network analysis tool that can
capture packet data from a network and decode it into a
readable form.
This is important because it could be useful for identifying
malicious traffic or sensitive information being transmitted
over a network, and sometimes you know if they're not doing
what they're supposed to.
That sensitive information could be the password or something
that you need to gain admin privileges and another good tool
that a lot of pen testers would use is called Burt. And this is
an all-in-one web application security testing tool.
It can scan websites for vulnerabilities and manipulate
requests and responses and intercept traffic between the
client and the server.
So in conclusion, pen testing is essentially the process of
finding and exploiting a weakness, particularly in
networks.
Umm, the first PIN test truly began in the 1980s.
It's very popular method for creating security because if you
want to secure something you have to know how to attack it
first, and when it comes to being the pen tester, the most
important thing isn't all the tools and devices you use, it's
the human element and the cleverness of being a human and
thinking outside of the box.
That box that can get the job finished.
And that's it.
Great job, lot of information.
Or you have a question.
I'm sorry.
Were you had a question?
Oh, OK, maybe not.
Your hand was up.
Great job.
Thank you.
Yeah, that was a lot of good information.
Does anybody have any questions for Jesse?
Alright, I'll.
OK.
Get this up.
Nope.
That kind of thing.
Nope.
Escape that one.
Ohh Marjorie.
The yeah, I'm getting Edgar's now.
Ohh.
Edgar Edgar's here.
Yeah, I'm getting his now, yeah.
OK, alright, great.
Thank you.
Let me see.
And.
Share.
The window that I want to use.
All right.
Are you ready, Edgar?
I've got the window.
Can you all see my screen?
Yeah.
Yes.
OK, it's not showing the right one.
Hold on.
I'm gonna have to pull this up a little bit differently.
Doesn't want to work with me.
Alright, here we go.
OK, now can you see the screen?
There we go.
Yes.
All right, Edgar, Are you ready?
Edgar, you there?
OK, my mic just went you.
I can't see my presentation.
Is it somewhere other than teams or?
No, it's in teams.
I'm sharing the screen now.
OK.
Well, I mean it.
I I can't see it.
How do you roll through the slides?
Do you have control of that or is that something?
But yeah, yeah, I can roll through the slides.
You just yeah.
OK, as long as you guys can see, I guess that doesn't matter,
right?
Well, I mean, you have to keep up with what I'm doing.
But yeah, I mean if you can pull it up on your end to see it on
I can't.
your end, you can pull it up on on your.
Right.
Yeah.
OK, let me give me one.
Phone or something maybe? Yeah.
Give me one moment here.
Go back here on the SharePoint.
This is very strange.
Almost there.
Yeah, I'm not sure why you wouldn't be able to see it.
It's, uh, it's just grey.
I'm not sure why and I just saw the last presentation too, so
maybe maybe it's just my luck.
Hmm.
The the, the OK.
Uh, you can go ahead and roll with it.
Alright.
Uh.
I mean, when you're at the table of or here in slide one.
OK.
So, good evening everybody.
Thank you for being here at my presentation today, I will be
discussing the uh topic of artificial intelligence and
specifically focusing on how it has been exploited by
cybercriminals for malicious activities.
I will also be exploring how we, as cyber security experts, can
leverage AI's capabilities for defense and outlining strategies
to prevent falling victim to such threats.
Whether it's individually at the comfort of your own home or
within an enterprise.
I let me know when you're at the table of contents.
Go ahead.
OK.
So today, as we dwell into the world of AI, we're going to be
going over the basics of what it is.
Then we will be going over AI systems.
How they become more integrated in our daily lives, we also
become targets for hacking next once those frameworks are.
Once I show you how they're exploited.
What licious tools are created from hacking now then with those
tools?
Uh, how they can be used to generate sophisticated cyber
text and from there?
Lastly, I'll be talking about how to fortify against these
cyberattacks, and at the very end, I'll take any questions you
may have, and I will do my best to answer them for you.
Alright, let us begin.
OK, So what is artificial intelligence?
Uh AI is the creation of machine based systems that can't name
the human intelligence, a processes that include natural
language processing, speech recognition, and machine vision,
then increasing excitement around AI has LED companies to
highlight the use of AI in their products.
Uh AI operates on a foundation of specialized hardware and
software, with no single programming language being key.
The way it works is by taking vast amounts of labeled training
data to find correlations and patterns, and then applying that
data to make predictions about new data.
For example, a chat bot can learn to mimic human
conversation or and an image recognition tool can identify
objects and photos by analyzing uh numerals.
Examples.
Uh, and the answers in AI a lot for the creation of realistic
text, images, music and.
And yeah, that's pretty much it.
Uh air programming involves developing cognitive abilities
in machines such as learning, reasoning, self correction and,
lastly, creativity.
Uh, let me know we're at the hacking AI slide.
Slide #5.
Go ahead.
OK, whenever a new technology gains traction, it is most
likely that someone will attempt to exploit it.
This is most definite with AI, especially generative AI.
And what I mean by generative AI, it's the type of AI that can
create new content and ideas, including conversations,
stories, images, videos and music.
Uh, one of the key vulnerabilities and assistens
that can be exploited is by doing a adverse sale attack,
data poisoning, prompt injection and backdoor attacks.
Uh, this involves systems based on LM, which are large language
modules such as the most famous one out there is chat, GPT.
You also have Google board, Bing AI.
Those are all examples of looms.
Uh, what?
LM's are are their machine learning modules that can't
comprehend and generate a human language to text.
Uh, so with at adverse sale tax?
Uh, they involve correcting inputs deliberately aimed at
deceiving the machine learning module.
Uh machine learning is a subfield of AI that gives
computers the ability to learn without explicitly being
programmed.
Uh, so about these, uh, endpoints.
These inputs lead to the model to generate incorrect or
unexpected outputs, even those that it was specifically trained
to prevent.
Another way to hack it is, uh, with data poisoning, and that
involves using a deliberate alteration of the models
training data to disrupt its learning mechanism.
Next we have prompt injection attacks, which involves users
embedding extra material and to the text prompt to alter an AI
systems output.
These manipulations can provoke responses that are surprising,
biased and accurate, or even offensive.
Despite efforts to program the model to avoid such as sues and
lastly, we have backdoor attacks are just like any other backdoor
tech.
Uh, they represent a significant threat.
Uh, these attacks allow an attacker to embed much.
Malicious code within the model that compromises its outputs and
could potentially enable data.
These uh these exploits are or.
These attacks are executed with that back door, which is
essentially a concealed access route that can circumvent a all
these standard security checks that we implement them on there
to allow the the manipulation of the model next slide.
OK, So what do you do once you've managed to exploit one of
these AI machines, you can have a malicious tool.
That was one that was once met for good, turned out to be used
for bad.
One of them is called worm GPT.
It's the malicious counterpart of chat, GPT.
It's design to assist cyber criminals to uh, commit their
cyber criminal activities without any ethical boundaries.
Uh Dark bird is another malicious AI powered tool
designed to enhance the capabilities of these cyber
criminals.
Uh, it's aimed at automating or aiding a cyber criminal.
As such, as advanced social engineering attacks, exploiting
vulnerabilities, creating and distributing malware.
Uh, it can also develop phishing campaigns.
UH-1 unique trait about dark fury.
It's design is actually to focus on exploiting data and resources
from the dark web.
Specifically, uh, to enhance the effectiveness of these uh
cybertext.
On a brighter note with Hacker GPT, uh, this tool was cracked.
Crafted for ethical hackers and cyber security professionals to
leverage advanced language models to aid in tasks such as
finding vulnerabilities, uh, creating custom payloads for
penetration testing and analyzing the tag vectors.
Uh, this tool you can actually get a 14 day free trial online.
That feature is unlimited messages.
Uh, so essentially it's a designed to enhance security
evaluations, helping both technical and non technical uh
cybersecurity professionals to understand potential risk and
countermeasures.
Then you have wolf.
GBT, which uh emerges as a generative AI tool with a focus
on crafting deceptive content that lets cybercriminals ensure
confidentiality.
Will launching these, uh, sophisticated, sophisticated
malware text that are hard to detect?
Alright, slide 7.
So what kind of attacks can be launched from these tools?
Uh.
Well, first AI enhances phishing attacks by refining language to
seem professional and error free.
It makes scams via email or fake websites are a lot more
convincing.
Uh next would social media the usage of AI and manipulating
media?
Uh and public opinion is intensifying nowadays with uh
political and economic organizations being able to
exploit these technologies to impact society.
Then you have a deep fake technology which is powered by
AI.
That craps highly convincing fake images, sounds and videos
by merging hoax elements using a machine learning algorithms.
Uh, these and advanced AI can fabricate scenarios or
utterances by individuals such as the liberties or political
figures that never.
Hello, can you guys hear me?
Yeah, I can hear you.
My headset just one off. Uh.
So that never actually occurred.
Significantly contributing to the spread of fake news.
And lastly, one way to have malware spread is the
cybercriminals have actually leverage AI to crack videos on
platforms like YouTube.
What they do is they mimic tutorials for a popular software
such as Photoshop, and in these videos will entice some viewers
with links in the description.
Uh.
Which will claim to offer free versions of the expensive
software and what?
What do you know that these links are actually going to
distribute malware without the viewer is actually knowing?
And then lastly.
How do we defend ourselves against these advanced tools?
Uh.
Well, first of all, what we can do is kind of read back at them
using AI or cells.
Uh organizations should deploy AI based security systems
capable of identifying and neutralizing these advanced
dangers.
Uh.
Next, it is also important for organizations to to a regular
cyber security posture check through audits.
Uh, these evaluations should be both.
Uh.
Done through penetration testing and vulnerability scans.
So you can find any potential security gaps that these hackers
might exploit.
Most importantly, the line opinion is.
The human factor employees, frequently representing the most
significant and the reality.
Uh, because we are the weakest link when it comes to cyber
security actions such as clicking on a malicious email or
just missing is legitimate attack alert as a false alarm
can't continue to be factors and security breach investigations.
And lastly, it is essential for organizations to create a
comprehensive incident response strategy that explains the all
the actions that should be taken and I wake up at cyber breach.
Uh, these strategies should detail who the central team
members are, the setup of effective communication methods,
and also plan to recover the systems and data.
Uh to reinstate all that making this strategy?
Uh should occur well before any incident to ensure that the
organization organization can maintain its resilience and the
face of a cyberattack.
And that is it.
Any questions?
Questions all.
Thank you very much guys.
Awesome job.
Wow.
Even more information, cybersecurity, and I love it.
I love it.
Good job.
Thank you.
Uh, I'm gonna pologize that.
I do have to leave for work, but think time.
No problem, no problem.
Thank you everybody.
Glad you could make it for this good job.
All right.
Yeah.
Keep out of that and hour.
I would say that so far we got good talks.
Yeah, we're doing some good stuff here.
I love it.
Alright, our next presenter will be Owen Stone.
Are you ready?
Yes, I am.
Take it away.
Alright so.
Try sending the poll here in the chat.
Ohh not I can't send that out.
Well, never mind.
Uh.
Sound like me in the classes I do the same thing.
Yeah. OK.
OK, never mind.
Yeah, I I clicked it.
I was gonna ask how many of you actually know who Kevin Mitnick
is already?
I had a little.
Yes or no?
Pull there.
But it's it's no big deal.
Yep.
I'll teach you about them anyway.
Can everyone see my screen?
We can.
Alright, kind of start the recording.
All right.
There we go.
So tell my presentation is from fugitive to frontline.
Is it tail of Kevin Mitnick?
And if you don't know who he is, then, well, I'm about to tell
you.
So Kevin Mitnick is one of the world's most notorious hackers,
thanks to a successful breach of several major companies and
government agencies over a 2 1/2 year period in the 1990s.
During this time, he led the FBI on a wild goose chase across the
country using fake ID's, cell phones, proxies and he even E
drops it on the investigators tracking him while being
actively haunted by the FBI.
He's still incredibly sensitive data from several major tech
companies pulling his release from prison and probation.
He wrote several books and started his own ethical hacking
company.
Much of the information I've used in this presentation was
obtained by Kevin's own book titled Ghost in The Wires.
You haven't started his journey in the tech in the 1970s, when
home computers were almost completely nonexistent.
Instead, he focused on the more widely available radio and
telephone lines.
But as first social engineering experience was even before then,
at age 12 for this, I'll let Kevin describe them the
experience himself in the video interview he did for Cyber Crime
magazine.
No sound.
I don't know.
Yeah, no sound on.
So when you share toggle the switch at the top, you'll have
to reshare toggle the switch at the top to use your computer
sound.
So that's had stop sharing and then.
Yeah.
And then reshare and then there's going to be a toggle at
the top right of the box that OSU, yes.
Ah, include sound OK?
But I'm not sure.
I think you cannot mute yourself.
I'm not sure exactly yet how that works, but I think when I
mute myself, nobody can hear the sound.
So do not mute yourself.
Alright cool.
1st to ride the RTD bus system for free.
My first social engineering, which I didn't even know what
social engineering was, was when I was 12 years old.
That's writing in the in an RTD bus, which is rapid Transit
district bus in Los Angeles to school and how the buses worked
in those days.
As you'd pay a fair, I think it was $0.25 and then you could buy
what they call a transfer for an extra $0.10.
And it was a piece of paper that gave you the privilege just to
show the bus driver on the next bus, and you wouldn't have to
pay a fair.
So I remember as a kid, I'm sitting on the bus and I'm
looking at this transfer.
I go.
That's interesting because I'm learning how the system is they
punch the date, month, day they punched the direction you're
going, they punched the bus line number that issued it and it's
not like a a like a the whole paper punch that you would buy
at Staples.
It's like different weird shape and I go wow, if I can get that
punch and I can get those blank transfers, I could ride the bus
system for free.
Wouldn't that be cool?
My first objective was trying to find out where you get the punch
that these bus drivers use.
So as I was getting off to go to school, mind you, I'm in
elementary school.
As I'm getting off the bus, I asked the bus driver.
I say, hey, listen, I'm working on this project in school.
We take these cardboards and we make all these really cool
shapes and I notice when he gave me that piece of paper, it had
really cool shapes.
What do you guys buy?
Those things maybe I can get my mom to buy me one.
So I can do the shapes on the card board and the guy goes ohh,
we buy it at the store and he gave me the address actually.
So I take the bus to this store in downtown LA.
I buy this punch for 50.
The guy behind the counter is what are you?
What's that for?
Because bus drivers to buy these, they go.
Oh no, it's for my dad.
He works for the RTD.
It's a Christmas present because it was around December. So then
I have this punch.
So then I'm thinking as a kid I can't buy blank transfers, but I
was thinking these bus drivers must be lazy after a hard day of
driving this bus.
They probably don't even clean the bus.
They probably drive this into the depot.
Some guy sweeps it and throws everything into the trash and
ends up in a dumpster.
So I thought, what if I can go to the dumpster and find these,
you know?
Is that possible?
So I ride my bicycle over to the dumpster at a local RTD depot.
It's not on the inside where I have to trespass.
It's on the outside where the come get the dumpster.
I opened it up like, you know, look on there and it's jackpot.
And they go.
Wow.
And I get in the trash can and there's like tons of half used
books of these blink transfers.
So I started punching my own transfers to ride the RTD bus
system for free.
I didn't even know what I was doing was wrong, that it was
fraud, and I'd be so open about it that I'd be at a bus stop
with other people.
And I'd say, oh, you know, you don't have to pay.
I could punch you a transfer.
You know, 12 years old, right?
But I'd be punching people transfers in some cases.
Most people didn't take it because they knew what I was
doing was wrong and it got to be where I wasn't even hiding it.
And I made friends with a lot of the bus drivers and they would
just give me the blank books of transfers, knowing what I was
doing.
And nobody ever told me it was wrong.
So that's kind of my first hack.
Alright.
Yep.
So that was that was Kevin's.
Mitnick or Kevin's story about kind of breaking the bus system
in LA.
Moving on.
Alright, so Kevin attended a few computer courses throughout his
life, but he obtained the vast majority of his knowledge on his
own by studying computer manuals and talking to other hackers.
And then just experimenting by himself, right?
So mostly self taught.
In 1981, Kevin and two of his friends accessed the Pacific
Bell corporate office by social engineering and guard.
During the break in the group, still several computer manuals,
directory listings and a sheet of passwords.
Once they were printed at the time, the neck later got caught
because one of his friends girlfriends snitched on him.
Since he was 17 at the time he was held by the Youth Authority
while they decided what his punishment should be ultimately
decided to release on probation and assign him a psychologist
who determined he was addicted to hacking.
After being released, he went to UCLA for a time before being
expelled for suspicious hacking.
Although they did not have enough evidence to charge him
with anything a few years later he managed to steal the source
code for Dex New VMS operating system, which was the which was
a state of the art development at the time.
Deck had no idea they had been breached, but again one of
Mendes's accomplices turned him in this time.
He spent 12 months in prison and three years on supervised
release as part of the deal as part of the plea deal, he also
had to show deck how he had broken in.
While still on supervised release for this hack, Munich
began hacking again.
Was caught accessing Pacific bills voicemails.
This time, when the warrant was issued, Mitnick left.
Thus, starting the FBI manhunt for which he is most well known,
instead of lowering, laying low mittig managed to acquire fake
identities.
And can you continue to hacking while living a somewhat normal
life?
Not only did Kevin continue hacking during his time, but he
targeted the FBI, DMV, and IRS directly to help him set up his
new identity and avoid detection.
One method he used was blasting static on FBI radios whenever he
wanted to listen on encrypted conversation.
Wherever the disruption occurs occurred, agents would almost
always blame the relatively new encryption system and instead
switch to communicating into clear where medic was listening.
So how did they catch him?
So while on the run, Kevin hacked into the system of a
security expert by the name of it's hard sutomo she, Mora
Shimomura.
She will.
Moore detected the intrusion after the fact.
And then decided to help the FBI pursue Mitnick with his help,
the FBI located the servers Fmic was using to store all the
dedicated, stolen.
And then check the logs on the server to see where the
unexplained traffic was coming from.
The servers were not his own.
He noticed that most of it was coming from Denver, Co in
Raleigh, NC they then tracked a phone call back to Raleigh, but
the number Mitnick called from was untraceable because Minnick
had tampered with Sprint Switch network.
Network with the help of Human Warren, an engineer from Sprint,
they reversed the look up to find calls placed to the number
which could be traced back to the nearest cell tower.
Dominic then dialed into the switch and detected the tap and
trace device.
It then called Sprint to discover when the device was
placed in a line.
Of the technicians didn't buy his story, but it now knew the
feds were on to him.
But he didn't know how close they were.
So he cloned his cell phone to cellular one.
Cellular One was already advised by the FBI to look out for
Mitnick, so once he dialed back into the remote server, they
detected him.
She more on the FBI and traced his cell signal from the tower
back to Minnix apartment with the cell scope 2000.
So for this is after his 2 1/2 year run from the law, right?
So this time medic would spend almost four years in prison,
including eight months in solitary confinement, minute
states in his book that this solitary confinement was rolled,
the prosecuting the argument that he was too dangerous to be
allowed in her phone.
He claimed the prosecutor claimed minute could start a
nuclear war by just whistling into the phone.
Following his release, he spent three years on probation and as
part of his probation probation agreement, he was forbidden from
using computers.
Now there's a lot of controversy surrounding his arrest and
treatment by the federal by the feds, medics, medics, supporters
argued that the charges and numbers used to prosecute them
were grossly overestimated, and that the feds themselves have
broken several laws and the pursuit of him, despite having
access to incredibly valuable information.
Mitnick hadn't sold or destroyed any of it.
And the companies he hacked didn't report any losses.
Despite this, prosecution argued that he had caused millions in
damages with the costs, with the cost estimate being based off
the cost to develop the software he had stolen, rather than the
cost of the license.
So motivations.
So at the time, Mitnick case seemed to puzzle prosecutors and
criminals alike.
Who were surprised?
Medic never took full advantage of the daddies stole.
Minnick would claim he did it out of sport and because he just
liked to challenge.
After release her well, once we once released from prison and
from his probation agreement, medic went on to publish several
books and started his own security company with his fame.
He also started as a guest speaker of any conferences and
shows, including Doctor Phil, Doctor Phil, last year on
including Doctor Phil last year.
On July 16th, he passed away from pancreatic cancer at the
age of 59.
You're my references.
Does anyone have any questions?
Wow, great job.
I actually didn't know that he passed away.
I missed that.
Yeah.
List.
It's just, uh, last year I think.
Yeah, I didn't know.
I either.
I'm heading those who have been scattered, but before we have
Then, well, he definitely had a lot of information for them once
our reading of the part.
they went through it.
They're like, well, this is how I did this and how I did that.
You definitely want to hire someone when you want to know
how that all happens, you know.
Yeah.
Alright, come work for us.
22.
Together.
But he did it when the systems were not as events.
Ohh right.
Right.
Starting off that way, I'm sure he learned a lot from there.
Yeah.
Well, he he.
Ohh definitely.
Like I said, he founded his own security company.
He continued on as an ethical hacker for the last 20 something
Yeah.
years.
Right, exactly.
Umm yeah.
If, if, if he hadn't come up with something that was out
there for us to use, you know, that could have been on the
quiet side too.
So you never know.
You never know.
Yeah, true.
That's true that that was great.
Very good job, alright.
Thank you.
And now I will right.
Well, maybe we could come up with something.
That's that's our job now is to come up with something.
So let's see how got.
So yeah, it I'm going to go ahead and pull this up and there
is audio.
Thank goodness.
So let me get that going.
All right.
Can you see that?
Yes.
I see it did it again.
No escape.
I see what it's doing OK.
I need to move it over here.
And.
Now I share that.
Cleared sound and the screen.
Good evening everybody.
Thank you for joining me today.
My name is Syed Mehdi and I'm here to discuss a crucial aspect
of today's business technology landscape, which is integrating
ERP systems securely in an era where cyber threat will loom
large and connectivity defines our operations.
As we delve into this topic, we'll explore not just a
challenges, but also the immense potential that ERP systems hold
for our businesses when implemented with a keen eye on
security and strategy and strategic planning.
So let's embark on this journey together and unlock the full
potential of ERP systems safely and effectively.
So in today's session, we'll cover a couple of different ways
and key areas that will help enhance our understanding and
approach to ERP integration.
We'll start by grounding ourselves in the basics of ERP
and its role in modern business.
Then we'll now navigate.
The current cyber threat landscape to understand the risk
that are kind of potentially at our doorsteps will identify the
specific risks associated with ERP integration and learn how we
can mitigate these risks through strategic actions and best
practices.
Of course, we'll also discuss the many benefits that a well
integrated ERP system can bring into an organization and
throughout the session will examine real life world cases
that bring theory to life and conclude with actionable best
practices that you can take back to your teams.
And finally, we'll wrap up with the Q&A session, which was
originally scheduled for this as well.
So let's start at the foundation ERP.
What is it?
So ERP stands for enterprise resource planning.
This is the integrated management of core business
processes.
Often it's done in real time and it's helped and mediated by our
technology and specifically with software.
So it's the central nervous system of a company integrating
various functions like HR, finance, sales, manufacturing,
supply chain, all into just one seamless system.
So why is this integration so important?
Imagine having a bird bird's eye view of your entire operation
for a for as a company, and being able to make decisions
based on the comprehensive data and streamlining those processes
to improve the efficiency and to reduce costs.
That's the power of an integrated ERP system.
Integration isn't just about bringing pieces to together.
It's about doing so in a way that brings value and multiplies
value.
Whether it's about simplifying communication across departments
or improving data accuracy or enabling better resource
management, the objectives of ERP integration are clear.
It's about creating a cohesive, responsive and efficient
operation that can adapt and thrive in a dynamic business
environment.
So as we go through this digital transformation, uh, our
enterprises become increasingly connected and this
hyperconnectivity brings a surge in cyber threats that can
compromise the integrity of a company's data and their
systems.
So recent reports indicate a staggering rise in cyber
incidents, with the average cost of data breaches reaching in the
1,000,000.
So cyber threats come in various forms, from phishing attempts
that target employees to sophisticated ransomware that
can hold a critical systems hostage.
And with ERP systems being the treasure trove of corporate
data, you know them being the integrated system that holds
all.
Uh, the data together they are an attractive target for cyber
criminals, so the implications become clear.
A breach can not only lead to financial loss, but also erode
customer trust and damage company brand.
Therefore, understanding and preparing for these threats is
not just a technical necessity, but a strategic imperative.
So integrating an ERP system, while very beneficial, carries
some inherent risk during integration.
Systems can be particularly vulnerable as data is migrated
and processed processes are realigned.
One slip in the process can lead to exposure of sensitive data,
or worse, a full scale data breach.
Moreover, we face compliance risks, so as we operate under
various regulations and regulatory standards like GDPR,
any mishaps in data handling can lead to severe penalties.
And let's not overlook the operational risks as well.
And your piece system under integration can experience
downtime, which can halt business processes and lead to
significant losses.
Acknowledging these risks is the first step.
The next and more crucial step is mitigating them effectively,
which brings us to the next slide.
How can we?
Safeguard our ear ERP systems.
Well, first, we must conduct thorough risk assessments by
understanding where our vulnerabilities lie.
We can develop tailored cybersecurity frameworks.
Think of it as building a Moat around our digital castle.
This framework is supported by a regular updates and patches to
our ERP systems which close security gaps and fend off
attacks.
But technology alone isn't enough.
We must also empower our people.
Our first line of defense.
Regular training can equip our employees to recognize and
respond to cyber threats effectively.
In essence, risk mitigation is a multilayered strategy that
encompasses assessment, technological fortitude and
employee vigilance.
OK.
And despite the risks, the benefits of ERP integration are
still too compelling to ignore.
An integrated ERP systems streamlines business processes,
which results in significant efficiency gains.
It provides a unified view of data that fosters information
formed decision making.
But the advantages extend beyond just internal efficiencies,
enhanced data visibility improves customer experiences
and improved collaboration tools empowered teams to work together
more effectively.
And when it comes to growth, a scalable ERP system ensures that
our technological capabilities can grow with our business
ambitions.
All right.
So let's ground our discussion in reality with a couple of case
studies.
OK, so first we have Palo Alto Networks, which faced
significant integration challenges when they were
consolidating their old legacy systems.
And by prioritizing cybersecurity during their ERP
integration, they not only streamline their operations, but
also fortified their data against preaches.
Mid labs, on the other hand, learned the hard way when an
initial oversight led to a costly breach.
There's subsequent investment in robust cybersecurity measures
turned their ERP system into one of the most secure in the
industry, exemplifying a proactive approach to
cybersecurity.
30 these stories highlight the importance of integration and
integrating cybersecurity specifically into the ERP
journey from the onset.
So how do we approach ERP integration then?
Well, it starts with selecting the right system.
There's many different vendors out there and we need to select
one that aligns with our unique business requirements and offers
robust security features.
A phased implementation approach can help minimize risks by
allowing us to test and refine the processes in stages and
throughout this journey, vigilance is key, so continuous
monitoring will help us detect and response to threats swiftly
while partnering with trusted vendors will help ensure we have
the expertise needed to navigate complex cybersecurity
landscapes, the best practice is clear integrate with security in
mind and choose partners who prioritize it as much as you do.
Let's look beyond just the mere migration of ERP systems.
OK, let's discuss how we can harness the full potential of
the ERP systems and the power that they have.
So by leveraging advanced analytics, we can turn data into
actionable insights, driving Better Business outcomes.
Now imagine an ERP system integrated with IO T devices,
right?
This will help with providing real time insights that enhance
the efficiency of our supply chain and when we create a
culture that embraces innovation and continuous improvement, we
set the stage for ERP to truly transform our business.
So ERP isn't just a tool for today, but rather it's an
investment for the future for any business.
So to conclude, integrating ERP systems in an age of cyber
threats and hyper connectivity is no small feat.
It requires a careful balance of strategic planning, risk
awareness and embracing the potential of new technologies.
We've walked through the risks, these strategies to mitigate
them and the myriad benefits of a well integrated ERP system.
Remember, the goal is not just to protect against potential
threats, but to build a resilient, agile and data driven
business that can thrive in today's competitive landscape.
As we part ways, I urge you all to carry forward insights from
today's session approach.
ERP integration with a security first mindset and harness its
potential to unlock new opportunities for innovation and
growth.
Thank you for your attention and I look forward to any questions
that you may have.
So now I would have liked to open up the floor to any
questions that you may have had.
This would have been the opportunity to delve into any
topics that were covered today by.
The presentation unfortunately, did an unforeseen circumstances.
I'm not going to be able to make this presentation in person and
I have left my email in this slide so that way there if there
is somebody who wants to get in touch, they are able to contact
me in regards to any uh concerns that you may have about specific
risks, inquiries about best practices or just in case you
need clarifications to any points, I'm here to address them
the best that I can.
And if there's anything that I didn't get to or that you'd
prefer A1 on one discussion, feel free to contact me with
that email.
So we can get that started.
Alright, excellent job.
That was really informative.
Anyone have?
Yeah.
Impressive. Absolutely.
So you have this email, you can always reach out to him if you
have any questions about the topics and any parts of it.
Get out of here.
Certain things you can do when you're in PowerPoint, just as I
move to another screen, it would stop his narration.
So, alright, wonderful.
Very good.
OK.
Tyler seems like it's a cyber night.
I don't know how I worked that out.
Are you ready?
Well, says I'm sharing, but does not look like it one second.
Yep, I see it.
OK.
So odd to me that I can't see.
My own sharing.
OK, you guys are seeing the actual slide.
Yeah.
OK.
You know how?
Alright, so this is a cybersecurity approach, but just
kind of a little bit different.
It's from a systems engineering approach rather than from a like
a pen testing approach.
Not necessarily completely different, just a little little
bit of a different kind of perspective on it.
The.
First job that I held as a sysadmin.
I happen to work for a systems architect who's kind of primary
focus was in like security and like developing systems and
security and whatnot.
And so he kind of introduced me to this idea.
So without further ado, let's get started.
OK.
So consequence driven, cyber informed engineering or CCE
embraces a rigorous engineering 1st methodology to fortify their
systems against a wide array of cyber threats.
The cornerstone principle of CCE is resilience, ensuring that
should an adversary breach a critical element of our systems,
the architectures design maintains the security of the
remaining components.
Basically, what that means is even if, uh, even if a weakness
is exploited within like critical systems that they're
designed in such a way to provide continued service even
if a critical component of it, it's either shut down, hacked,
exploited or whatever would have you such a strategy is
imperative for safeguarding the integrity of our nation's most
essential infrastructures, contrary to conventional
cybersecurity methods which aimed to prevent every
conceivable cyber attack.
CCE methodically focuses on comprehending the possible
ramifications of cyber threats and adeptly mitigating the risks
posed to an organization's principal services and
operations.
We accept the premise that all digital systems are inherently
vulnerable.
Historically, the belief was that the penultimate defense
mechanism was the literal severance of connections.
So snipping the cord with a bear scissors.
Yet in modern context, where malevolent actors and nation
states possess sophisticated means to disrupt critical
infrastructure, we understand that even severing physical
connections does not necessarily guarantee infallibility.
Basically, what that means is uh, from a ground up approach.
The idea here is that they identify what like at the very
beginning when they're developing, and they're they're
kind of engineering these systems before they even begin
engineering that identify, OK, what is the like?
Worst case scenario and then they engineer the system to be
able to either mitigate, resist or or.
Like they they basically develop, they develop a defense
identified towards like the worst case scenario, and once
they've, once they've engineered that solution, they then think,
OK, what's the next worst case scenario then the engineer they
in their planning into their planning they engineer a
solution to that and then OK what's the next worst scenario
and what's the next word scenario and how can we maintain
these systems even if they're attacked or even if they go
down.
The ambition of CCE transcends mere defense against incursions.
It aims to assure the uninterrupted and dependable
functioning of services, acknowledging that our cyber
defenses must be as adaptable and robust as the very
infrastructure they are meant to shield.
Tyler the I was gonna say the the scene, the slides were not
moving, but they just did for a second.
Yeah, I clicked them, OK.
Gotcha.
In our critical critical infrastructure sectors, the
focus is to build resilience and ensure continuity by reinforcing
the offences of the energy sector.
We're preventing significant disruptions in our power grid.
Similar proactive measures are taken in water treatment, where
real time monitoring and emergency emergency controls
keep our water supply safe and reliable in the financial
services and healthcare sectors are defenses are centered around
safeguarding personal and financial data and ensuring that
the services that underpin our economy and health are always
available and within manufacturing.
Protecting control systems and maintaining their isolation from
broader networks is key to avoiding production halts across
these sectors are integrated approach to consequence driven
cyber.
Informed Engineering ensures that we're not just reacting to
threats but proactively safeguarding the very
foundations of our society.
Understanding our past is essential in fortifying our
future, especially when it comes to cybersecurity.
Over the years, we've seen a pattern of increasingly
sophisticated cyber attacks targeting the very backbone of
our society, from our energy grids to our financial systems,
healthcare and even the food supply chain.
These breaches are not just isolated incidents.
They're evidence of a growing trend where infrastructures we
rely on are under constant threat.
Each incident has taught us valuable lessons about the
vulnerabilities we must address and the defenses we need to
strengthen them.
Whether it's malware planted within our electrical grid that
could act as a ticking time bomb for my financial systems, or the
alarming potential for near disasters at a water facilities,
these are stark reminders of the real world consequences of
digital incursions.
By examining these breaches, we've learned that the
cybersecurity is not just about protecting data.
It's about preserving our way of life as threats evolve.
So what's our strategies, the history of cyberattacks shows us
that resilience is key, and proactive measures are not just
necessary, they're imperative for a collective security.
This historical context sets the stage for why we must commit to
robust cybersecurity posture that anticipates and adapts to
the ever changing landscape of threats.
If you look here, uh, a month of December 2022, I was actually in
Moore County, North Carolina.
When that happened, for those of you that don't know more county
is one of the cities that surrounds Fort Bragg.
And on this month, 2 simultaneous attacks of these,
these substations happened within minutes of each other,
roughly 15 miles apart within minutes of each other, causing a
power outage to nearly 45,000 people.
That lasted almost five days.
Obviously this was during the colder months too.
And to give you like an even deeper perspective, just from
living around here, understanding more county is
also commonly.
Mostly populated with soldiers, especially soldiers, in kind of
like special operations capacities, which was created a
significant upset in that particular area, which also
caused for a need for rethinking how we do these things.
Ce represents a transformative approach designed to equip
engineers, operators and leaders with the means to precisely
identify and mitigate cyber risk to their most crucial systems.
Step one is consequence prioritization.
Here we assess the potential cyber instance based on their
impact.
Considering aspects like duration, breadth of attack, and
public safety, this step involves calculating high
consequence events score to determine priorities and
protecting system integrity and associated recovery costs.
With Step 2 system of systems breakdown, we just kept complex
networks into individual components.
This granular perspective helps us recognize critical nodes such
as network based systems, human enabled processes, and supply
chain elements, providing out comprehensive understanding of
our systems, vulnerabilities and access points.
Step 3 introduces consequence based targeting through kill
chain analysis.
It's a strategic method to pinpoint where a threat could
infiltrate, how it could propagate, and the ultimate
effect of its actions by examining the targeting,
infection, spread and effect, we can anticipate and prepare for
specific threat scenarios.
Step 4 focuses on mitigations and protections aiming to
disrupt the kill chain.
This involves developing tailored strategies to block
initial targeting, contain infection, halt spread and
minimize effect.
The goal is to is proactive defense, ensuring that the
potential attacks are neutralized or their impact
significantly reduced.
Together these steps form the CTE framework, a systematic,
proactive blueprint cyber resilience, ensuring that our
most essential services remain robust against the evolving
landscape cyber threats.
The guiding tenet of cybersecurity and CC is
consequence prioritization.
It is the act of identifying the critical junctions within our
organizations, the asset systems or operations that, if
compromised, could trigger the gravest develop comes if just
one gear and the clock is out of place, the entire mechanism
falters.
This is how we approach our initial phase.
Identifying these gears, our most vital assets and ensuring
they're prepared for the digital attempts of the cyber world.
Yes.
Since our of our methodology is selectivity, we're not setting
up impregnable walls.
We're channeling our efforts into an implementation of
redundant failover systems that maintain nearly perfect measures
of reliability within our systems.
It's a delicate balance, weighing the potential domino
effects of a breach.
And it's guided by meticulous evaluation of impact.
A cyber incident isn't just about immediate disruption, it's
about understanding the depth of the ripple it creates across our
operational landscape.
From there, we delve into the web of interdependencies.
Our systems are interconnected.
A single vulnerability could be the Achilles heel that brings
down the organization.
Recognizing these, Nexuses fortifies or resilience the
answer to where we concentrate our efforts lies in strategic
resource allocation here ensures our most critical assets stand
robust against even the most complex of cyber attacks.
Phase two, the systems of systems analysis builds upon the
foundation laid in the consequence prioritization
phase.
By looking at the broader context in which critical assets
operate, it's an analytical approach that seeks to
understand and address the complexities that arise from
interdependencies and interactions among individual
symptoms.
The goal is to gain a comprehensive understanding of
how individual systems interact, the potential vulnerabilities
these interactions create, and how these vulnerabilities can be
exploited to cause the high consequence events identified in
the first phase system of systems, and that the system of
systems analysis is critical because it acknowledges that in
complex environments the risk to an individual system cannot be
fully understood without considering its role and
connections within the larger system.
By understanding these connections, organizations can
better anticipate and mitigate the cascading effects of
potential cyber incidents.
In phase three of our consequence based targeting, we
take a calculated dive into the possible avenues of attack that
are adversaries might exploit.
Our task begins with thorough identification of attack
pathways by understanding the routes and attack.
Take we could better anticipate and disrupt their efforts.
Next we have we delve into the mind of our adversaries
scrutinizing their likely tactics and strategies.
This ends insight is crucial for predicting and countering their
moves, allowing us to stay several steps ahead.
Armed with this knowledge, we proceed to map out the potential
consequence scenarios.
This is not without imagining a single linear outcome, but about
charting a range of possibilities to under the full
spectrum of risks we face with these scenarios in hand, we move
to prioritize not all threats carry the same weight.
We must discern which pose the greatest threats to our critical
systems and operations.
That's a process that demands a keen understanding of what's at
stake and the diligence to ask the right questions with our
threat landscape clearly defined and prioritized, we craft
targeted mitigation strategies.
These are our blueprints for defense tailored actions
designed to protect and preserve the integrity of our
infrastructure against the most probable and damaging cyber
threats.
Each step in this phase builds on the previous, forming a
comprehensive and robust approach to cybersecurity that
is designed not just to defend, but to proactively neutralize
threats before they can strike at the heart of our essential
services.
Phase four involves mitigations and protections, mitigations and
protections, is the 4th and final phase of the consequence
driven cyber informed engineering process.
After identifying the most critical assets, phase one being
consequence prioritization, understanding the system of
systems and potential vulnerabilities.
Phase two, the systems of systems analysis and recognizing
the likely attack vectors and adversary could use to cause
significant harm.
Phase three consequence based targeting, which is about taking
action to protect these assets and systems through identified
threats.
The primary goal of this phase is to implement strategies and
measures to reduce the vulnerabilities, deter potential
attacks, and protect against the prioritized threats that could
lead to high consequence events.
Mitigations and protections are about creating a hardened stance
against the most dangerous potential cyber threats
identified through the CE process.
This phase is not a one time effort, but an ongoing cycle of
improvement that helps an organization stay ahead of
potential threats and minimize the impact that of any that do
materialize.
The successful adoption of CC is not just about adopting a new
set of procedures.
It's about transforming our way of thinking.
It's a commitment to remain vigilant, adaptive and always a
step ahead of potential threats.
We must shift our mindset from a reactive stance to a proactive,
consequence driven perspective.
This means understanding that our critical infrastructure is
not just a collection of individual assets, but a
complex, interconnected system where the failure of 1 component
can lead to cascading effects across the entire network.
Adopting the CE framework also requires us to embrace a mindset
of resilience.
We acknowledge that incidents can and will happen, therefore,
our planning goes beyond prevention and includes
comprehensive incident response and recovery strategies.
These plans must be robust, regularly tested and capable of
guiding us to swiftly restore operations in the wake of an
attack.
Furthermore, this new mindset involves comprehensive training
and awareness programs that permeate throughout an
organization and emphasize everyone's role in
cybersecurity.
From top to bottom, all team members must understand the
significance of the CTE approach and be prepared to act
accordingly.
The shift in mindset also calls for a culture that values
continuous improvement.
We recognize that cyber threats are dynamic, dynamic and so our
defenses must evolve.
We must be ready to adapt our strategies based on lessons
learned from both internal and external incidents.
Any questions?
Excellent job. Wow.
Amazing.
Any questions for Tyler?
And I know nobody asked, but in case anybody needs references.
Awesome.
Very good.
There was great.
Thank you so much.
OK, I'm presenting another one.
Since this is a recording eve, do you want to do yours so you
don't have to wait?
I thought I saw that you were feeling ill.
Yeah, I wouldn't.
I wouldn't mind that at all.
OK, you got.
I didn't expect you to even go to sleep. Good.
I know, I know.
Yeah.
Yeah, it really when we're doing these presentations, if you're
feeling ill, but you wanna do it first, let me know.
I can always move you within.
You know the span of who we've got going.
So you go right ahead and share your screen and and take off.
And you just give me a second here.
OK.
Can you guys see my screen?
Yes.
So ohh my house.
If I sound horrible, I'm dealing with the craziest cold in the
decided to catch me today.
I thought of all day, so ohm here.
I'll I'll be discussing the evolution of digital forensics.
Before discussing digital forensics, we need to have an
understanding of what forensic science is.
Forensic science is the application of scientific
methods from crime investigation for crime investigations.
Forensic science in particular deals with the analysis of
evidence in criminal cases.
This could include, for example, a simple match of fingerprints
found on a weapon to a suspects were a more advanced analysis of
microscopic marks on a bullet to determine whether a bullet was
fired from a particular weapon.
Computer forensics became a thing once new technologies were
being used to commit crimes like embezzlement and fraud.
One example of this is called salami slicing.
Salami slicing occurs when an attacker uses an online
database.
Obtain customer information such as bank and credit card numbers
and in time the hacker deducts small amounts from each account.
Nonetheless, let's go back to the 1970s.
There was an increase recognition of technological,
criminal, criminal, criminal acts growing, for example.
The recognition of it was growing.
For example, the Council of Europe Conference of
Criminological Aspects of economics, crime that occurred
in 1976, also the federal computer System Protection Act
in 1978, which was proposed but not passed due to the privacy of
the individuals that would hinder next Florida State,
became the first state that enacted a cybercrime law which
was which was the Florida Computer Crimes Act in 1978.
Also, I just realized I put the wrong and for the federal
computer systems protection that it was actually 1977.
I have that wrong in my notes, but we're gonna keep that going.
OK, now to the 1980s.
The Organization for Economic Cooperation and Development,
also known as OECD, recommended harmonization of criminal laws
that penalize computer fraud which occurred in 1983.
The 1986, the first US federal law was passed against
cybercrime, which was called the Computer Fraud and Abuse Act.
OK.
But again, what is computer forensics?
Computer forensics is the use of investigation and analysis
techniques to gather and preserve evidence from a
particular computer in such a way that they can be used for
legal proceedings.
Computer forensics aims to conduct a structured
investigation and maintain a document like a documented
record of events on the computer device in order to find out who
was responsible for them.
The early 1980s was considered to pre forensic sage.
This was the stage of evolution of computer forensics, also
known as the Ad hoc stage.
During this time, there were no formal structure, protocols or
training to protect to protect against cyber crime.
Law enforcement was analyzing copies of data that were easily
modified and inaccurate data.
This brought a major concern to the courts.
In the mid 1980s, this was considered the structured phase
around this time company started to create appropriate policies
that enforce protection against cyber crime.
Legislators also started passing laws that protected against
multiple form of the packing and wire fraud.
Lastly, forensics tools that can be used in court rooms were
starting to be developed as well.
Excuse me now to the 1990s for most law forcement agencies,
forensic tools and training were very expensive and difficult to
obtain.
However, more and more people have begun to own their own
personal computers.
Also, the scientific working group of digital evidence, also
known as SWG DE, developed the first definition of digital
evidence, which was any form of Prof Ohh probative value that
was stored and transmitted in binary form.
In the late 1990s, going into the 2000s is considered the end
of the structured phase, which can also be considered the end
of the term computer forensics.
In 1999, the First International Association for Forensic Science
was held.
Not only that, in 2002 the first peer reviewed journal dedicated
to digital evidence emerged.
This was called the International Journal of Digital
Evidence.
The early 2000s was considered the Golden Age.
Courts became more familiar with the side of digital evidence and
also more affordable tools are being developed to aid law
enforcement.
Then came the rise of digital forensics.
The beautiful FRENZIC examinations examinations
extended beyond conventional computing hardware, mobile
phones, GPS, network, GPS networks, cameras and more have
not been found to contain digital evidence.
From there, computer forensics then transition to digital
forensics.
Digital forensics is the analysis of digital evidence
that includes network forensics, computer forensics, mobile
device forensics and malware forensics.
Now I'll be discussing the common stages of the procedure
in the digital forensics investigation.
These are the four common stages which are survey identification,
collection, acquisition, examination, analysis and report
presentation.
Survey identification.
This is the initial step for a digital forensics.
In this stage, law enforcement surveys the physical scene to
try and identify potential sources of digital evidence.
Nonetheless, since taking up Technology consistently changes
less obvious, digital devices are often overlooked.
This stage, which is collection acquisition, is concerned for
the retrieval and preservation of the digital evidence.
This would this requires the correct search and seizures and
seizure procedures.
The documentation of on site and on off site searches verifying
the authentication of the evidence also to preserve the
evidence is to make a copy of the original data files in a way
that minimizes the possibility of any changes made to the
original data file.
No.
Examination analysis.
This is the third stage of a digital forensics investigation.
Forensics tools are used to examine and analyze evidence.
The examiner must determine if the evidence is relevant to the
investigation by reconstruction, reconstructing the digital crime
scene.
And lastly, we have the final stage which is report
presentation.
The evidence that was considered relevant to the case so now be
finalized in the report, the details on the report needs to
be very well described as well as transparent.
This includes the chain of custody data preservation along
with the forensics tools that were used.
Again, nowadays, traditionally the computer system is still the
most common form of digital evidence.
This includes both hardware, software and peripheral devices
like scanners, monitors and printers.
Here are some items that law enforcement do need to recognize
that can be considered digital evidence.
Some are considered hard drives which include external external
hot, external internal hard drive drives, floppy disk, zip
disk, compact disc.
USB flash drives or thumb drives, along with memory cards.
These devices are small and lightweight and can be easily
concealed and transported.
The next set of items are considered handheld devices like
mobile phones, digital multimedia devices, for example
iPods.
Digital cameras.
Global Positioning Systems, AKA GPS.
These can be.
These can provide evidence of communication location, photos
and data.
Even mobile applications are being used as digital epics.
Digital evidence nowadays, for example Snapchat.
In order to preserve the integrity of the evidence, all
evidence must be collected in a manner that is forensically
sound.
Ensuring that data or are kept intact and the acquisition
process has been documented in order to establish the the Fed
felid the validity of.
To make sure the digital forensics process hello.
I hear you.
Hello that was weird.
You're here.
I know.
Like those I just kind of cut out, OK?
There was, I.
Ohh, kinda lost myself.
I apologize guys.
The validity.
Ohh yeah.
Yep, the validity of digital forensics depends on whether or
not the evidence can be used in court.
So there we are.
Here is a little video that gives you a closer look to a
digital forensics lab.
Behind me is the FBI field office in Salt Lake City, but
the lab isn't actually here.
It's in the gateway in a very unsuspecting building and you
never know that men and women work there everyday to solve
some of the biggest cases you've heard of.
In a digital world, a lot of high profile cases need experts
to gather evidence.
So we cover Utah, Montana and Idaho and with high profile
cases like the day belts, the FBI found the bodies of his
ways.
They call a special team right here in Salt Lake.
The comp side of it to you, Lauren McCluskey, we've worked
on that department handled.
Josh Powell, you know, obviously that's a huge case.
What's suspected of kidnapping and killing Susan?
Many of the cases that are out there that people out, you know,
browse to the level where people hear about it do do end up here
in an office building in the heart of the gateway, the
Intermountain West Regional Computer Forensics laboratory,
run by the FBI, works to solve cases.
Our job is to do digital forensics examinations on
computers, phones, drones.
End whatever has digital evidence, their job comes down
to this.
So when you delete a file, you're not really deleting it,
and they're one of only 17 digital forensics laboratories
across the country.
Any law enforcement agency in Montana, Idaho or Utah can
submit digital evidence to us.
They handle things like these computers, hard drives and even
special pouches to cut off phones from the outside world.
And while all this might seem like a TV show, shows like that
you know everything gets wrapped up in 60 minutes or 30 minutes,
right?
Unfortunately, I wish it was that fast, but it's not.
This takes far more time and expertise to get it right to
make sure that justice is served the services that we provide are
are really crucial.
We wanna help put punish people or put them in jail if if
they're guilty.
One of the biggest reasons they wanted to let us into this lab
is to show us that all of this stuff technology is a part of
our everyday lives, and it often holds the key to solving
criminal investigations in Salt Lake City.
Spencer Joseph Fox 13 News you.
Hope that it kinda quickly I thought, but Yep behind me is
the 17 digital.
And here are the references that I used for this presentation.
Any questions?
This was very informative.
I always wondered exactly what they did with this digital
forensics because, you know, forensics normally for homicides
and stuff like that.
You know what they do right?
Digitally, how do they do this and how do they prove it?
Well, now it makes perfect sense.
Awesome job.
Thank you so much.
Thank you.
Great job, yeah.
Good job.
Alright, I will do our last one.
I know we're going to be going over ten o'clock here, but if
you if you do not feel you want to stay, that's perfectly fine.
This is being recorded.
You can watch it later if you want to.
So but I am going to go ahead and do this one.
If it takes if I can do it.
There we go.
Alright.
Can you see the screen?
Alright.
Phil have audio so history of the mobile phone.
There we go.
They're going to discuss the radio, phone to mobile phone,
the first mobile phone, modern mobile phones.
Advantages of mobile phones and dangers of mobile phones?
From mobile phone, invention began with two way radios, which
we often still use today.
Two way radios were used since 1920.
Radiophones were introduced in the early 1920s and used by the
police in 1940s.
Mobile phone concept came to be in 1947.
The first actual cellular phone was invented in 1973 by Martin
Cooper of Motorola.
Martin Cooper is on the right and making his first call.
With the phone?
No, we didn't have 4.4 pounds is first available to the public in
1984.
First, commercial automated cellular network was known as
one G2 now and 5G.
It was analog and launched by Nippon Telegraph and Telephone
in 1979.
Dynatac 8000X was the first commercially available mobile
phone and released in 1983.
As you see what his first walkie talkie in 1940, it looks much
like the first phone.
The mobile phone timeline consists of April 3rd, 1973, the
researcher for Motorola, Martin Cooper made the first analog
cellular phone call using a prototype model.
Martin Cooper called Doctor Joel S Engel of Bell Labs with his
prototype phone as the first call in history.
Mobile phones gain popularity with the public.
From 1983 to 1989, and demands rose sharply.
Most first generation mobile phones were powered by the car
battery and not designed to be handheld.
During the 1990s, Silo technology improved to 2G.
This technology worked as CDMA TDMS I guess 136 and GSM 1997
snake was known as the first popular gaming app to be
installed on a mobile phone.
2G phones worked on a faster network and were smaller,
weighing in at 100 to 200 grams, making them portable.
Again, we cap of the mobile phone timeline is 1973, the
first cell phone was invented.
1984 of the first mobile phone was portable.
1992 was the first smartphone 1994.
The earliest smartphone app, started 1997, was a start on
mobile gaming with Snake as the first gaming app.
2000 the first camera phone 2001 cell phones could access the
Internet.
Doesn't seem like that long ago until and that was available on
phones 2007.
Apple joined the game a little behind 2008, the first Android
phone 2020.
Is more.
The modern phones we use now and what is next for 2023 and
beyond?
Again, let's covers the evolution cell phone.
As you can see, they came from 4.4 pounds to a foldable tablet
that I still don't understand.
How they don't break.
3G was launched shortly after 2G and set standards that network
providers need to follow while introducing SMS server.
3G Cellular service could access the Internet, email, live
stream, videos, radio and access Wi-Fi.
4G Cellular service was introduced in the 2010 and was
ten fold.
The capabilities of 3G and showcased its versatility in
delivering high speed wireless medications such as mobile
broadband, Internet of Things, fixed wireless access and
multimedia.
5G was deployed in 2019, boasting the highest network
speeds and lowest latency.
Modern mobile phones are able to be used as mobile hotspots,
which I do quite often, perform home and business functions,
battery life up to two days, which I've never seen in mine
after available for nearly everything I think I have them
for nearly everything like till everything for me TV to your
vehicle which mine do all of that they fully charge under 2
hours which is good cause you gotta do a couple times a day,
ability to attend host video meetings is that we're doing
now.
Apple and Android are the two most popular operating systems
then and still are now.
Apple and Samsung have the majority stake.
Some advantages of mobile phones are they've simplified our lives
and make communication have to touch of a finger.
Professionals are able to be reached anytime, especially when
out of office.
Bill paying online account management, I don't know about
you, but I have never checking years, entertainment.
We all enjoy scrolling social media.
Take TAC and YouTube GPS for traveling that which is great
because I'm directionally disadvantaged.
Mobile phones bring us together if used properly.
Modern life has become more and more on the go.
Modern mobile phones keep us in touch while on the phone.
There are disadvantages.
They remade radiation, which could be harmful.
Radiation from cell phone signals could cause serious
health injuries such as cancer.
Sleep disorders change your brain activity and reaction
time.
All of this has been proven looking at this generation.
I do believe it, though personal lives can be affected by mobile
phone addiction, which I see all the time.
One in four auto accidents are caused by texting, distracting
driving everyday in the USA on the fatalities are caused by
texting.
OK, I'm gonna go back.
So we can read this last one here.
We are.
Yeah, I can't leave home without my mobile phone.
And if I lose my mobile phone, I lose everything, because even my
mother's phone number is on there and I don't know my
mother's phone number by heart like I used to back in, you
Hmm.
know, the back in the time where we redialing them.
Yeah.
Make you.
Yeah.
When we dialed on the phone, I would remember I knew
everybody's phone.
Now, no, I know it as mom or my son.
Mm-hmm.
Or evil.
I mean, come on.
Alright, that was awesome.
I really loved it.
That was great.
That was nice.
Yeah, that was really good.
It was fun and I did use one of those.
I listen to it work.
The one of the ones that was like 1984, it said I did use one
Uh-huh.
of those back in 88.
I think it was, yeah, those were heavy.
Yeah.
Thank you.
Those were great and driving I and yes, back then, I wasn't
Yeah.
texting and driving.
I was using that and driving.
Right.
That is so clunky.
I know it was so clunky, but that's what we were using.
Yeah.
That's awesome.
Great job.
Great job, everybody.
That was awesome.
I really love what you guys came up with.
No.
A lot of Syed night, but a lot of good information.
Just amazing work, all of you.
I would go ahead and say to go ahead and narrate it if you
would.
I think when you narrate it, you should go ahead and let it auto
move to the next one and auto start the narration when it
clicks to the next page.
Umm.
Like Mike had here, that was done very well.
Umm, that way you can also, I believe turn it into your
academic side and get credit for it.
So make sure that you have your script written at the bottom of
the presentation and that you narrate it and you should be
getting points for that, so.
Umm.
Everybody, great job.
Wonderful.
I can't wait to hear some more next week.
Yes.
Oh, no, that's right.
We have new start next week, but that's OK.
I will still listen to them.
Uh, thanks for coming.
Everybody who joined and yeah have a great rest of your
evening and great weekend.
Thank you so much.
Umm.
Thank you.
Have a great weekend.
We.