All language subtitles for Tomorrows.World.Today.S04E16.Cyber.Security.720p.WEBRip.x264-KOMPOST_track3_[eng]

[narrator] Join us on
Tomorrow's World Today,

as we journey through
the worlds of inspiration,

creation, innovation
and production

to find the ideas and technologies
that are shaping our future.

In this episode, we visit
the world of innovation,

to explore how offensive
and defensive tactics

in cyber weaponry are protecting
us from the hackers of tomorrow.

From invention land
world headquarters,

here's your host,
George Davison.

Believe it or not, it
was over 100 year ago,

that one of the first
tech start-ups began.

And they're still
changing the world today.

In the 1920's they invented
components for radios.

And that made it more
accessible for everybody.

And it was big
technology back then.

In the 1940's they developed
jet propulsion technology.

In the 1960's,

they helped the world's first
communication satellite go into orbit.

Their work even supported
the Apollo 11 mission,

which put the first
humans on the moon.

Then, in the 1970's,

their scientists found a way
to send the first network email.

Now that company...

does over 63 billion
a year in revenue,

and employs 180,000 people.

60,000 of them are engineers,

and they own 46,000 patents.

That company is
Raytheon Technologies.

And today, some of
their leading innovations

are helping
organizations facing...

cyber attacks.

In the spring of 2021,

Colonial Pipeline,

one of the largest fuel
pipelines in the United States,

fell victim to a cyber attack.

Hackers received access to the personal
information of almost 6,000 people,

and caused the company to shut
down its fuel distribution operations,

leading to gas shortages,

all up and down the east coast.

Colonial ended up
paying over $4 million,

to a criminal hacking group.

Cyber attacks are unfortunately
becoming more common.

And could have a
detrimental effect on all of us

who are relying on
our infrastructure to live.

I'm going to send Tamara,

to go visit with the experts
at Raytheon Technologies,

to explore what can be done

to protect us online.

[Tamara] Cyber attacks
happen every 39 seconds.

And 1 in 3 Americans

are affected by these
attacks every single year.

In fact, since the pandemic,

the FBI has reported
a 300% increase

in reported cyber-crimes.

The most hacked
industries are government,

retail and technology.

And it's not because
these industries

aren't protecting
their customer records.

It's because of the high level of
personal identifying information

found in these records.

Today, I'm here at
Raytheon Technologies

I'm going to be
meeting with Julian Zottl,

the chief technology officer
of cyber protection solutions.

Hey, you must be Julian.

I am.

I'm Tamara Krinsky, thank
you so much for meeting me.

Of course, nice to meet you.

Welcome to Raytheon
Intelligence & Space.

I am so excited to take a
dive into what you do here.

But before we do,

I just wanted to start with
a really basic question.

The term, cyber security,

it gets tossed around a lot.

How do you define it?

It does.

It's everything from the protection
of the electrical power grid,

all the way down to baby
monitors you have at home.

- Well that's quite a range.
- It is.

- Why don't we go and take a look?
- Awesome.

All right, so we've
talked cyber security

but there's one more thing
I want you to define for me.

Cyber space.

Because most of us just kind
of think of it as the internet.

Right, a lot of us go home,
we open up a web browser

and that's everybody's
experience on the internet.

But it's vastly more than that.

Uh, right here, we have
the major fiber optic lines

going across the United
States, for instance.

All right, so this is a
pretty intense system,

obviously, probably with
a lot of vulnerabilities.

Correct.

What is Raytheon
Technologies doing

to keep us safe in cyber space?

[Julian] We work with
a variety of customers

everybody from domestic

US government, even
some international partners.

[Tamara] Gotcha. and what's
Raytheon Technologies' special sauce?

[Julian] Uh, a lot of it is
bridging that last 20%.

So a lot of commercial
solutions hit the 80%,

What we're trying to do
is bridge that last 20%.

Well, I want to be 100% safe

so, what are some of
the tactics that you use?

Uh, the big one is
thinking like an attacker,

believe it or not.

Yeah, uh, so, Raytheon
thinks like an attacker

and we implement
technologies along those lines.

That's the best way.

And do things like
initiate zero trust, etcetera,

for our customers.

Wait, wait, what is zero trust?

Let me show you, down the GCSC.

Okay.

Welcome to part of the GCSC,

the Global Cyber
Security Center.

Why do I feel like this place
has seen a lot of secrets?

[both laughing]

So, all right, tell me
about zero trust security.

Sure, zero trust security is
one of the many capabilities

that we offer here.

It involves people,
processes and technology.

And it's one of the few I
can actually talk to you about.

[Tamara laughs]

All right, so, methodology.

What are some of the main
tenets of the methodology?

[Julian] There's one where
people only have access

to the information they need.

So, for instance, HR
shouldn't have access

to detailed schematics
from engineering.

And the people at facilities

should only have access
to the HVAC system.

Does anybody else want
access to the HVAC systems?

They do.

So that's the interesting thing,

when you get into

some of the more
non-traditional cyber attacks,

um, you get into the idea that,

Do I attack a single server,

which might be difficult

because a lot of servers
are patched nowadays.

Or do I attack the HVAC system

where I can take down
the entire data center?

It's much easier to attack that,

and take down a bunch of
servers in the data center

than it is to attack
a single server.

I never really
thought about that

but it totally makes sense

and it kind of
sounds like a movie.

It does.

[Tamara] Speaking of movies,

you know there's
always that scene, right?

Where somebody comes in

with their USB thumb
drive and they stick it in

and they're [vocalizes].

Uh, right, like,
and you get that--

- [Julian] Exactly.
- [Tamara] sign on your computer screen.

Does that actually happen?

[Julian]
It does.

Um, so you have a variety of
reasons for this happening, right?

The USB stick coming
in could be malicious

or it could be benign, right?

It could be somebody
bringing something in

from a friend at home,
looking at pictures,

you know, on a
corporate network.

But there's also the
insider threat side.

Which is, somebody's coming in

trying to steal, you know,
corporate, uh, identity information,

Or any kind of information
from a corporation.

And that's where the
zero trust comes in, right?

So, you verify every
piece of technology

that's coming in.

Um, and that helps
to contain the threat.

So even if ransomware
does happen to get in,

It's contained within

whatever that person
happens to have access to.

Got it, so it's just as
much about containment

as it is about prevention.

- Oh, definitely.
- Because attacks are gonna happen.

Exactly and we
talk about dwell time.

How long does the
attacker stay on the system?

Because the longer they're there,
the more information they can get.

And what am I
looking at right now?

Oh, so these are
the undersea cables

that make up a huge
part of the internet.

So, as countries get
connected on the internet,

they connect via these.

All right and there are a lot
of points of vulnerability there.

There are.

Now that I've got the basics,

is there a way to
see this in action?

So funny you should
mention that,

I believe Dr. Staab
is coming in right now.

[lock beeps]

Tamara, let me introduce
you to Torsten Staab.

Thank you.

Hi, Torsten it's
nice to meet you.

Hi, nice to meet you too,

welcome to the security
operations center.

So, tell me what I'm looking
at here on the screens.

So, you're looking at
our latest generation

of cyber security tool

which is called REDPro ZTX.

It's a zero trust
security platform.

It's very modular,
highly scalable.

Modular in the the sense
of like a Lego system.

You have different
building blocks

that are focusing
on various aspects

of an IT operation.

Whether it's the networks
we're trying to secure,

the applications,
the users or the data.

So let me show you what
that system looks like.

So, one part of the system is

the real time situation
display that you see here.

The system continuously monitors

computers, applications
and users and networks.

And it shows you
real time alerts

if someone were to
compromise the system

trying to intrude into a system

and install ransomware
as an example.

So you get real time
alerts on a display.

Um, the system
will then also take--

Wait, wait!
You got an alert.

[man] Yeah, actually
that's a great example.

So here, we have
an example where

someone was trying to insert an
unauthorized USB storage device,

in a corporate computer.

The system detected
that in real time,

and what this
platform now will do,

in order to secure the system,

it'll take multiple steps.

It'll execute what we
call a cyber playbook.

Let me show you what this
looks like in this particular case.

So, in this case,

the system will take,
uh, multiple actions.

It'll block all the USB
ports on this laptop

to prevent any exfiltration.

Or someone installing
unauthorized software,

such as malware which
could be ransomware.

It'll also then automatically

isolate this machine
from the network

to protect any other
machines on that network,

uh, from a potential threat.

It'll then also lockdown
the data on this drive,

to secure the data

in case there's sensitive
information on this machine.

Um, it'll then disable
also the user accounts

to prevent someone
from taking these accounts

and trying to get escalated
privileges on other systems.

So all of that
happens automatically

in a matter of milliseconds.

I just slowed it down here
for demonstration purposes.

But the system will
take all these steps

in the background,
instantaneously.

So it's a really
thorough system.

Just to make sure I understand,

you mentioned earlier,

you compared it to the way a
Lego set is modular in design.

In this, are the modules,
are the building blocks

the hardware, the
software, the network?

Or are the building blocks

the different technologies you
use to protect all of those things.

Yep, that's a great question.

So, it's the technologies,
the building blocks,

because to protect the system

which consists of networks,
data, applications, users.

Right, you need to use
more than one technology.

Unfortunately there's no one
size fits all tool you could install

that provides
comprehensive coverage.

So, what this platform
is designed, uh, to do

is take the best in clients
technologies for network security,

application security,
user security data security,

and allow us to
combine those rapidly

and employ those
when we need them.

We've looked at different
ways Raytheon Technologies

can outsmart attackers

and identify anomalies that
could cause potential threats.

Now it's time to see the future
of aerospace and defense

in action with the
CADS flight simulator.

[Tamara] Hi, Amanda.

- Hey, Tamara.
- Hey.

This is my pilot, Sung.

Hello, hello.

And what I'm gonna
be showing you today

is how we protect
airplanes from cyber attack

here at Raytheon Technologies.

We use our cyber anomaly
detection system, or CADS

to monitor all of
the communication

going on internal
to the aircraft,

for signs of cyber attack.

What CADS is gonna do,

it's gonna give Sung information

about what's going on, the
cyber attack that's happening.

So that he can respond
and fight through the attack.

So you're talking about
an attack that happens

in the air, while the
plane is actually flying?

Yep, that's exactly
what we're worried about.

A lot of these planes
have been built in the '80s,

and they have a lot of
external facing interfaces,

like radios and wifi.

These could all be vulnerable
to different cyber attacks.

So I'm gonna go ahead
and launch an attack.

And Sung is going
to see the effects.

Ah!

[Tamara] Cyber
attack via GPS receiver,

engine systems affected.

[Amanda]
Yes, exactly.

So, I'm telling him that a cyber
attack is what killed his engines,

and that it's originating
from the GPS receiver.

In this instance, he can
disable the GPS receiver,

and his engines will
come back online.

Without CADS he'd have no
idea why his engine just stopped.

And this is really important

because pilots rely so heavily

on their instrumentation, right?

So if that information
they're getting is faulty,

it can, [vocalizes].

Right, exactly, that's another
thing that could happen

is we could affect
the instrument display.

Uh, so now what I'm gonna do

I'm actually going to
swap out the onyx boxes

for a box that's got more
cyber protection on it.

And I'm going to
throw another attack

and we'll see how things change.

I'm getting like a little
nervous watching all of this.

[Tamara giggling]

[Tamara] So now
the avionics systems

are going to be protected
by our additional solutions,

counter veil and boot shield.

And what they'll do,

is they should mitigate
the attack from happening.

I tried to launch the
attack, but nothing happens.

CADS has still seen me
trying to inject something.

But the malware's
no longer running

because it's being blocked
by our other protections.

Yeah, okay, so that is the
plane that I want to be on.

Yeah, definitely.

All right, well thank you so
much for flying with me today.

Or letting me fly
with you today.

I'm going to head
out for a scrimmage now.

Sounds good, no problem.

Thanks again.

Is this where the
scrimmage is at?

Yes it is, come on in.

I'm Tamara, you must be Anisha.

Yes, welcome to the code center.

This is our cyber operations,
development and evaluation team.

And these guys are going at it,

they are attacking away at
some of the products that we have,

trying to find
our vulnerabilities.

On the screen here
you'll see that, you know,

they're scanning the environment

they're looking for, you know,

any place where
they can find a hole.

So the red dots
here signify, uh,

products that look like
they might be a little bit weak

and they can break into them.

So they're constantly scanning, all
the team is trying to collect points.

It's a scrimmage.

So we use our
offensive attackers here,

to inform our defense,

So that we know how to
protect our products better.

We do this as a game just
to keep it more interactive.

This kind of reminds me
of, like, the white boards

that you see during
athletic practice.

- Yeah, yeah.
- Where you're looking at each team,

trying to find the holes.

Yep, each one of the
team mates is here

honing in on different products

just so they can collect
the most number of points

for their scrimmage.

How do you know
when someone wins?

Well, actually in
the scrimmage you do

but in real life it's
always an evolving game.

All right, well then I better
see what's going on in defense

so I have a good
understanding of it all.

- Yep, let's go see.
- Okay.

All right, so this is our
defense, our blue team.

Yes, welcome to our blue
team, our cyber defenders.

Um, as you can
see from their screen,

they're looking at
something a little bit different

than what we saw
in the red team side.

Obviously for the
purposes of the scrimmage,

this is dummy data
that they're looking at.

Ultimately we're
looking at threat actors.

Where are they looking?

What information
are they gathering?

And basically they're trying to
prevent the red team from breaking in.

So they're blocking and
tackling as best as they can.

They're collecting
points for their team

using whatever products
they have at their disposal.

But as you can see,
it's a lot of information

But, um, it's the best
way we can, you know,

build our products
for our customers,

is ensuring that it's protected.

So this process seems
much more evaluative

than what was going
on in the offense side.

Oh, yeah.

I mean, they're basically
scanning the threat horizon.

Um, and seeing where people
are trying to come in from.

But it could be from anywhere.

So our defenders
have to, you know,

rely on the best techniques
that they have out there

and best products
that we can give them.

So this truly is a game

where you kind of
want both sides to win.

Oh, yeah, I mean both sides
have to put their best foot forward

so that we can build better
products at the end of the day.

Um, and again, in cyber,

the landscape
is always changing.

As you can see, it's
constantly evolving.

Well, speaking of landscapes,

we are now gonna take
Julian back to invention land

so he and George can have
a conversation about this.

Thank you so much
for showing me through.

- Oh, you're very welcome.
- All right.

[knocking at door]

[both laughing]

How in the world
did you get in there?

[giggling] Little bit of magic.

- Good to see you, Julian.
- Good to see you too.

Well, I was hoping that
you would share with us

a little bit about

where's cyber security
going in tomorrow's world?

Sure, Raytheon's
intelligence space

is really at the forefront
of cyber security solutions.

- Things like zero trust.
- [George] Mmm-hmm.

We have customers, both
domestic and foreign governments,

commercial companies and
even other cyber security firms.

- Interesting.
- Yeah.

And that's because
we strive to really cover

the last bit.

So many traditional
cyber security firms

will cover 80% of the solution.

Where we cover that last 20%.

- Ah, the hard stuff.
- Exactly.

All right, well let's take
a look at this screen

because I got this image.

So I wasn't quite sure
what I was looking at here.

It's like some kind of a
digital mind print or something.

[Julian] Right, yeah, no,

this is about machine learning
and artificial intelligence.

So, cyber security
we have tons of data.

And we have to
sift through that data

in order to find the little
nuggets, the evil bits, right?

And so we use artificial
intelligence and machine learning

to do that.

You know, we have to constantly
look at five, ten years down the road.

In order to stay
ahead of the threat.

The holy grail of cyber
security is really predictive cyber.

And the only way to do that is
to look through all of this data.

Mmm.

[Julian] We're looking for
those little nuggets, right?

Machine learning and artificial
intelligence help us get there.

Very nice.

Well, it sounds like you
have some of the best brains

working on this.

We definitely do.

All right, let's take a
look at this next one.

All right, so I got this image,

and I see these two people.

I assume they're two super
brains working on a project.

Exactly, these are two
cyber security engineers

working on one of
our tough problems.

Ah.

It's interesting, we have
a huge talent gap

within cyber security.

We're always looking
for new people.

And really, we've got to start
cultivating that way back in colleges.

So, we're part of the national
collegiate cyber defense competition,

for instance.

Great, I mean, that's a great
way to, you know, cultivate talent.

Now, we're really into STEM
and STEAM around here,

do I need to be an engineer
to work in cyber security?

No, not at all.

And in fact, many of
our engineers are,

I'd say, unconventional
types, right?

So, we have a Sociologist
who's an engineering fellow

who's involved in
cyber security.

Yeah, interesting.

Yeah, and they bring
unique perspectives.

And in fact, my boss is actually
an environmental scientist.

That makes a lot of sense.

'Cause you're looking
at the threat

from a lot of different
directions then, aren't you?

Exactly.

And then we have
this screen down here.

This Cyberlandia, what is that?

So Cyberlandia is the journey
to perfect cyber security,

which we call Cybertopia.

It's an idea that my
boss came up with.

And the idea is...

that Cybertopia is a world where
we're free from cyber attacks.

You know, we don't have
to worry about anything.

And Cyberlandia, of
course, is the journey to that.

I see, so the perfect world

which I would love
to have for my family

and my friends and our business.

- Right?
- Exactly?

All these threats are
completely disrupting our lives.

They are, and that's why we're
developing these advanced technologies,

like I was showing you.

In fact, it's a journey, right?

And it's a continuous journey
as cyber threats evolve.

You know, we have to come
up with better technologies

like you've seen
here previously.

So, that might be a good segue,

I got this in from
your corporation.

Right, this is a board
game that we developed.

Okay.

It's called Cyberlandia, it's the
journey to perfect cyber security.

The Cybertopia that we
were just talking about.

That's a good idea, I mean,

cyber security is such
a complex field.

It is.

Boiling it down to a game,
that makes a lot of sense.

Exactly, and as you
progress on the journey,

you'll find out it gets
more and more difficult.

A board game to
simplify the, uh,

the difficult story of really
the cyber security's all about.

Exactly, and there's of
course a catch to it too.

- A catch?
- Mmm-hmm.

Yeah, like the catch
that it never ends, right?

Exactly.

- Well thanks, Julian.
- Great seeing you.

- Good to see you, thanks for coming in.
- Take care.

[George] Welcome to Cybertopia.

Interesting.