Cyber Security At The Cinema


Published on

Published in: Technology, Business
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • This powerpoint is part of our Information Security Awareness series for the Information Solutions Netwok (ISN)
  • Based on Information security Policy: Rules that govern the use of Information Systems: Classification in increasing order: public, private, confidential, company secret Access controls: passwords, tokens, back doors, biometrics Information classification Public, private, confidential, company secret
  • Nigerian scam Hacking
  • Ask audience to understand their ideas on this…
  • David & Jennifer David shows Jen he change his (and hers) grades by hacking into the school’s server.
  • David wants to connect to game company using war dialer. Here he’s entering the area code suffix start end points.
  • Once he finds the “game” company he starts playing a game from the menu: Thermonuclear war, not knowing….
  • That is not a game, but he patched into the back door of a secure system that runs the NORAD nuclear weapons system
  • At the end of the movie, while the NORAD computer is about to start the 3 rd World War, David tricks the computer learning system to play tic-tac-to, eventually realizing nobody wins…
  • Then, having learned that, it starts estimating potential launch points and counterpoints for nuclear attack, And just line in tic-tac-to, …
  • Nobody wins
  • Angela receives a strange disk from a client with a secret back door
  • Here she tricks her pursuers by thinking she’s going to send the evidence…
  • Then she plants a keylogger in her corporate computer, Later she infects the Pretorians (her enemy) mainframe program with a virus.
  • Dade & Kate realize they are both hackers fighting a common enemy
  • While attacking the mainframe of EMC
  • In the first movie, Neo gets hacked by Trinity and she types “Wake up Neo” at minute 7:16, then “Follow the white rabbit” so she can meet him later.
  • At 30:40 monitoring the Matrix code.
  • At 2:05:30 Neo realizes he’s the One, and can see the Matrix for what it really is: 0 & 1s!
  • On the second movie 1:47:40 to 1:48:25 also The movie clip [] available at
  • Here’s the nmap + ssh exploit
  • Alan (Tron) and Lora (both computer software engineers) & Dr. Walter Gibbs meet at the plant while our out of work hacker Kevin tries to get in…
  • But the computer fights back and digitizes him, placing him inside like another software program
  • Where he has to fight back all the way to freedom
  • Playing mortal freesbee games, gladiator style
  • All to get access to the copyright notice claiming that he was the real author of the space paranoids game that make the company rich instead of the evil Master Control Program---Ed Dillinger.
  • Cyber Security At The Cinema

    1. 1. Cyber Security at the Cinema by Adrian Mikeliunas, CISSP, CLP [email_address]
    2. 2. Agenda <ul><li>Movie Selection Criteria </li></ul><ul><li>Overview of Cyber Security </li></ul><ul><li>Top 7 Movie List </li></ul><ul><li>Honorary Mentions </li></ul><ul><li>Conclusion </li></ul>
    3. 3. Movies <ul><li>Movies provide </li></ul><ul><ul><li>Entertainment </li></ul></ul><ul><ul><li>Education </li></ul></ul><ul><li>Many movies show how to: </li></ul><ul><ul><li>Break computer security, </li></ul></ul><ul><ul><li>Hack, cheat, steal… </li></ul></ul><ul><li> Helps us get more prepared </li></ul><ul><li> Work becomes more challenging </li></ul>
    4. 4. Selection Criteria <ul><li>Hacker has to be one of the main characters or movie ideas </li></ul><ul><li>A Hacker is one who: </li></ul><ul><ul><li>is proficient at using or programming a computer; a computer buff. </li></ul></ul><ul><ul><li>uses programming skills to gain illegal access to a computer network or file </li></ul></ul><ul><li>Two or more cyber security events in the movie (hacking, cracking, …) </li></ul>
    5. 5. Cyber Security Events <ul><li>Bypass Access controls </li></ul><ul><ul><ul><li>ID, Passwords, back doors, Biometrics </li></ul></ul></ul><ul><li>Bypass Physical Security </li></ul><ul><ul><ul><li>Personnel, Storage, Encryption </li></ul></ul></ul><ul><li>Tamper Communications </li></ul><ul><ul><ul><li>Electronic commerce, Mail, Documents </li></ul></ul></ul><ul><li>Tamper Systems Development </li></ul><ul><ul><ul><li>Change controls, malware protection, crypto </li></ul></ul></ul>
    6. 6. What is Cyber Security? <ul><li>Computer Security [ TECHNOLOGY ] </li></ul><ul><ul><li>Access & Passwords </li></ul></ul><ul><ul><li>Hacking / Cracking </li></ul></ul><ul><ul><li>Viruses, Worms, & Trojans </li></ul></ul><ul><li>Social Engineering [ HUMAN ] </li></ul><ul><ul><li>Personal Information </li></ul></ul><ul><ul><li>Medical Records </li></ul></ul><ul><ul><li>Personnel & Financial data </li></ul></ul><ul><ul><li>Spam, Scams & Phishing </li></ul></ul>
    7. 7. Weakest Security Link <ul><li>Human Element? </li></ul><ul><li>Computer Element? </li></ul><ul><li>Both? </li></ul>
    8. 8. Top Cyber Security Movies <ul><li>War Games </li></ul><ul><li>Hackers </li></ul><ul><li>The Net </li></ul><ul><li>Matrix Trilogy </li></ul><ul><li>Sneakers </li></ul><ul><li>Tron </li></ul>
    9. 9. War Games-1983 <ul><ul><li>A young man finds a back door into a military central computer in which reality is confused with game-playing, possibly starting World War III </li></ul></ul><ul><li>The main debate is: should humans be in charge of launching a nuclear strike or should a (fail safe) computer decide? </li></ul><ul><li>Simple special effects, but realistic for that time. Movie grossed $75M. </li></ul>
    10. 10. War Games-(2) <ul><ul><li>War Dialing: kids wants to connect to game company </li></ul></ul><ul><ul><li>Back Door: modem access was for developer </li></ul></ul><ul><ul><li>Easy to guess Password: Joshua </li></ul></ul><ul><ul><li>Denial of Service: play tic-tac-toe to prove that in a nuclear war nobody wins! </li></ul></ul>
    11. 18. The Net-1995 <ul><li>Angela Bennett is a software engineer working from home in Reston </li></ul><ul><li>A client sends her a game program with a weird glitch for her to debug. On his way to meet her, he’s killed in a plane crash </li></ul><ul><li>Angela discovers secret information on the disk she has received only hours before she leaves for vacation. </li></ul><ul><li>Her life then turns into a nightmare, her records are erased from existence and she is given a new identity, one with a police record. </li></ul>
    12. 19. The Net (2) <ul><li>Identity Theft has become #1 crime in the world </li></ul><ul><li>Many commercial programs contain Easter Eggs (or backdoors) </li></ul><ul><li>Angela uses a keylogger & virus at the end to payback her attackers </li></ul>
    13. 23. Hackers-1995 <ul><li>A young boy is arrested by the Secret Service for writing a virus, and banned from using a computer until his 18th birthday. </li></ul><ul><li>Years later, he and his new-found friends discover a plot to unleash a dangerous computer virus, but must use their computer skills to find the evidence while being pursued by the Secret Service and the evil computer genius behind the virus. </li></ul><ul><li>Unreal special “hacking” effects! </li></ul>
    14. 24. Hackers (2) <ul><li>Remote take over of other computer systems </li></ul><ul><ul><li>TV Station </li></ul></ul><ul><ul><li>School fire alarm system </li></ul></ul><ul><ul><li>Corporate Mainframe </li></ul></ul><ul><li>Hacking in many instances </li></ul>
    15. 28. Matrix-1999 <ul><li>A group of rebels free Neo, a computer hacker, in hope that he can stop the Matrix, a computer system that slaves mankind. </li></ul><ul><li>In the second movie, Trinity uses a special hacking tool: nmap </li></ul><ul><li>Great Sci-Fi trilogy, many special effects </li></ul>
    16. 29. Matrix (2) <ul><li>Neo is a hacker who gets hacked by Trinity in order to communicate inside the Matrix </li></ul><ul><li>Trinity shuts down the power plant grid by exploiting an SSH vulnerability </li></ul><ul><li>He goes back in to fight the agents and the Matrix, going out via a regular phone line… </li></ul>
    17. 35. Sneakers-1993 <ul><li>Complex but lighthearted thriller about computers and cryptography, government and espionage, secrets and deception and betrayal. </li></ul><ul><li>They recover a box that has the capability to decode all existing encryption systems around the world </li></ul>
    18. 37. TRON-1982 <ul><li>A hacker is literally abducted into the world of a computer and forced to participate in gladiatorial games where his only chance of escape is with the help of a heroic security program. </li></ul><ul><li>TRON (trace on) defeats the MCP (master control program) so his user can retrieve the stolen video game copyrights he owned. </li></ul>
    19. 43. Honorable Mentions <ul><li>Swordfish </li></ul><ul><li>The Italian Job </li></ul><ul><li>Catch me if you can </li></ul><ul><li>Take Down </li></ul><ul><li>Independence Day </li></ul><ul><li>Gathaka </li></ul><ul><li>Charlie’s Angels </li></ul>
    20. 44. Swordfish-2001 <ul><li>The D.E.A. shut down its dummy corporation operation codenamed SWORDFISH in 1986, with $400M… </li></ul><ul><li>The world's most dangerous spy is hired by the CIA to coerce a computer hacker recently released from prison to help steal billions in unused government funds, but it's all locked away behind super-encryption. </li></ul>
    21. 45. Takedown-2000 <ul><li>Kevin Mitnick is quite possibly the most well known hacker in the world </li></ul><ul><li>Hunting for more and more information, seeking more and more cybertrophies every day, he constantly looks for bigger challenges </li></ul><ul><li>When he breaks into the computer of a security expert and an ex-hacker, he finds one - and much more than that... </li></ul>
    22. 46. Conclusion <ul><li>Cyber Security is always under attack, prevention can help </li></ul><ul><li>Protect your password </li></ul><ul><li>Protect your company information assets & your personal information </li></ul><ul><li>Get informed & Get Involved! </li></ul><ul><ul><li>New Information Security Policy http://infosec </li></ul></ul><ul><ul><li>New Information Security Training http://ISO17799 </li></ul></ul>