How We Got Here: A History of Computer Security And Its Design
0 likes141 views
This document provides a history of computer security and hacking from the 1960s to present day. It discusses early hackers in the 1960s who used phone systems, the rise of personal computers and the internet in the 1980s-1990s which led to new forms of hacking like password cracking. Web security improved in the 2000s but new issues like SIM swapping and cloud accounts emerged. The future may include threats from quantum computing, artificial intelligence, the internet of things, and new forms of transportation technology.
How We Got Here: A History of Computer Security And Its Design
- 1. How We Got Here: A History of Computer Security And Its Design
- 2. A collaborative team of innovators, thinkers and problem solvers. We create impactful mobile apps that solve real-world problems. Who is Dogtown Media? ● 10+ years as an ethical hacker eventually running my own company ● Started another security company looking after high net-worth individuals digital assets. ● Co-Founder @dogtownmedia Who is Rob Pope?
- 3. Focus on End-User History of Hacking Hacking Today Hacking the Future What We’ll Cover
- 4. The End User Let’s focus on Security UX Design in Three Core Areas…. Web Personal Computer Mobile Device
- 5. History of Hacking Pre-Internet Era Web 1.0 / 2G Web 2.0 / 3G
- 7. The early world of hacking on “computer systems” Phreakers used audio frequencies to manipulate telephone systems 1960’s Phreaking phreak is a sensational spelling of the word freak with the ph- from phone
- 8. · From Van Nuys, CA · At 12 he “hacked” the LA bus system by social engineering and dumpster diving to bypass the punch card system · At 16 he broke into the “Ark” computer system developed by DEC and copied their software - resulting in arrest + 12 mo. jail + 3 yrs. supervision · Caught hacking Pacific bell v/m computers (violating terms of arrest), went on the run for 2.5 years and: · Broke into dozens of computer systems · Stole 100s of cell phones · Forged 100s of fake IDs · Served 5 years in prison including 8 months solitary confinement. · Now successful author, speaker and security expert Hacking Pioneers Kevin Mitnick
- 9. Early Connection Direct dial up modems became popular
- 10. 80’s hackers
- 11. Web 1.0 / 2G
- 12. 1990’s Internet Gains Mass Appeal User accounts, sign ups, and forgotten passwords... amazon.com FinTech ebay.com Yahoo
- 13. User Account Hacking Tools to automate hacking user accounts appeared
- 14. Desktops Windows dominated the market Incomprehensible messages Do i want to continue using this? You will also have access to your own web portal where you can log tickets in real time. Password 12345? sure that's fine Anti-virus main security tool Password policy non-existent
- 15. Microsoft Bob ?!?! Screens showing a "house", with "rooms" that the user could go to containing familiar objects corresponding to computer applications!!
- 16. Windows Account Hacking 90’s Windows - Candystore for Hackers
- 17. Cell phones 2G Phone Not much data to secure · Contacts · SMS · Voice · Calls
- 18. 90’s hackers
- 19. Web 2.0 / 3G
- 20. Web 2.0 Security Response Protection to Stop Brute Force password attacks
- 21. Personal Computers Communicate with normal people Comprehensible messages Cleaner design Password managers
- 22. Smart phones 3G phones Even more data to secure ● Emails ● Photos
- 23. 2000’s hackers
- 24. Hacking Today
- 25. Current Web Practices Passwords Aren’t Enough
- 26. Password Changes Complex Passwords are out, kind of…. Passwords obtained from previous breach corpuses. Repetitive or sequential characters (e.g. ‘aaaaaa’, ‘1234abcd’). Context-specific words, such as the name of the service, the username, and derivatives thereof. Dictionary words
- 27. Password Changes Complex Passwords are out, kind of….
- 28. SMS is Not Safe · Sim swapping · SS7
- 29. Personal Computers Cloud accounts Cloud Accounts Password Managers
- 30. Smart Phones 5G phones Even more data to secure... ● 5G ● Payments ● Cloud accounts
- 31. · More Biometrics - Signals from living people such as EKG · Machine learning used in identification of multiple factors · Intelligent chatbots replace sign and log-in functions
- 32. 2010’s hackers
- 34. Future threats ● Quantum computing - Cryptography will need to adapt. ● Machine learning / AI - Utilized against security measures. ● IOT / Home automation - Integrated into our lives. ● Transport increasing tech dependent
- 35. 2020’s hackers?
- 36. Questions?
- 37. References · Password API - https://nist.badpasswordcheck.com · Berkeley centre for long term cybersecurity - https://cltc.berkeley.edu/scenarios2020 · How to defend from a SIM Swapping attack - https://www.wired.com/story/sim-swap-attack-defend-phone · SS7 hack explained: what can you do about it? - https://www.theguardian.com/technology/2016/apr/19/ss7-hack-explained-mobile-phone-vulnerability-sno oping-texts-calls