Original subtitles

[narrator] Join us on Tomorrow's World Today,

as we journey through the worlds of inspiration,

creation, innovation and production

to find the ideas and technologies that are shaping our future.

In this episode, we visit the world of innovation,

to explore how offensive and defensive tactics

in cyber weaponry are protecting us from the hackers of tomorrow.

From invention land world headquarters,

here's your host, George Davison.

Believe it or not, it was over 100 year ago,

that one of the first tech start-ups began.

And they're still changing the world today.

In the 1920's they invented components for radios.

And that made it more accessible for everybody.

And it was big technology back then.

In the 1940's they developed jet propulsion technology.

In the 1960's,

they helped the world's first communication satellite go into orbit.

Their work even supported the Apollo 11 mission,

which put the first humans on the moon.

Then, in the 1970's,

their scientists found a way to send the first network email.

Now that company...

does over 63 billion a year in revenue,

and employs 180,000 people.

60,000 of them are engineers,

and they own 46,000 patents.

That company is Raytheon Technologies.

And today, some of their leading innovations

are helping organizations facing...

cyber attacks.

In the spring of 2021,

Colonial Pipeline,

one of the largest fuel pipelines in the United States,

fell victim to a cyber attack.

Hackers received access to the personal information of almost 6,000 people,

and caused the company to shut down its fuel distribution operations,

leading to gas shortages,

all up and down the east coast.

Colonial ended up paying over $4 million,

to a criminal hacking group.

Cyber attacks are unfortunately becoming more common.

And could have a detrimental effect on all of us

who are relying on our infrastructure to live.

I'm going to send Tamara,

to go visit with the experts at Raytheon Technologies,

to explore what can be done

to protect us online.

[Tamara] Cyber attacks happen every 39 seconds.

And 1 in 3 Americans

are affected by these attacks every single year.

In fact, since the pandemic,

the FBI has reported a 300% increase

in reported cyber-crimes.

The most hacked industries are government,

retail and technology.

And it's not because these industries

aren't protecting their customer records.

It's because of the high level of personal identifying information

found in these records.

Today, I'm here at Raytheon Technologies

I'm going to be meeting with Julian Zottl,

the chief technology officer of cyber protection solutions.

Hey, you must be Julian.

I am.

I'm Tamara Krinsky, thank you so much for meeting me.

Of course, nice to meet you.

Welcome to Raytheon Intelligence & Space.

I am so excited to take a dive into what you do here.

But before we do,

I just wanted to start with a really basic question.

The term, cyber security,

it gets tossed around a lot.

How do you define it?

It does.

It's everything from the protection of the electrical power grid,

all the way down to baby monitors you have at home.

- Well that's quite a range. - It is.

- Why don't we go and take a look? - Awesome.

All right, so we've talked cyber security

but there's one more thing I want you to define for me.

Cyber space.

Because most of us just kind of think of it as the internet.

Right, a lot of us go home, we open up a web browser

and that's everybody's experience on the internet.

But it's vastly more than that.

Uh, right here, we have the major fiber optic lines

going across the United States, for instance.

All right, so this is a pretty intense system,

obviously, probably with a lot of vulnerabilities.

Correct.

What is Raytheon Technologies doing

to keep us safe in cyber space?

[Julian] We work with a variety of customers

everybody from domestic

US government, even some international partners.

[Tamara] Gotcha. and what's Raytheon Technologies' special sauce?

[Julian] Uh, a lot of it is bridging that last 20%.

So a lot of commercial solutions hit the 80%,

What we're trying to do is bridge that last 20%.

Well, I want to be 100% safe

so, what are some of the tactics that you use?

Uh, the big one is thinking like an attacker,

believe it or not.

Yeah, uh, so, Raytheon thinks like an attacker

and we implement technologies along those lines.

That's the best way.

And do things like initiate zero trust, etcetera,

for our customers.

Wait, wait, what is zero trust?

Let me show you, down the GCSC.

Okay.

Welcome to part of the GCSC,

the Global Cyber Security Center.

Why do I feel like this place has seen a lot of secrets?

[both laughing]

So, all right, tell me about zero trust security.

Sure, zero trust security is one of the many capabilities

that we offer here.

It involves people, processes and technology.

And it's one of the few I can actually talk to you about.

[Tamara laughs]

All right, so, methodology.

What are some of the main tenets of the methodology?

[Julian] There's one where people only have access

to the information they need.

So, for instance, HR shouldn't have access

to detailed schematics from engineering.

And the people at facilities

should only have access to the HVAC system.

Does anybody else want access to the HVAC systems?

They do.

So that's the interesting thing,

when you get into

some of the more non-traditional cyber attacks,

um, you get into the idea that,

Do I attack a single server,

which might be difficult

because a lot of servers are patched nowadays.

Or do I attack the HVAC system

where I can take down the entire data center?

It's much easier to attack that,

and take down a bunch of servers in the data center

than it is to attack a single server.

I never really thought about that

but it totally makes sense

and it kind of sounds like a movie.

It does.

[Tamara] Speaking of movies,

you know there's always that scene, right?

Where somebody comes in

with their USB thumb drive and they stick it in

and they're [vocalizes].

Uh, right, like, and you get that--

- [Julian] Exactly. - [Tamara] sign on your computer screen.

Does that actually happen?

[Julian] It does.

Um, so you have a variety of reasons for this happening, right?

The USB stick coming in could be malicious

or it could be benign, right?

It could be somebody bringing something in

from a friend at home, looking at pictures,

you know, on a corporate network.

But there's also the insider threat side.

Which is, somebody's coming in

trying to steal, you know, corporate, uh, identity information,

Or any kind of information from a corporation.

And that's where the zero trust comes in, right?

So, you verify every piece of technology

that's coming in.

Um, and that helps to contain the threat.

So even if ransomware does happen to get in,

It's contained within

whatever that person happens to have access to.

Got it, so it's just as much about containment

as it is about prevention.

- Oh, definitely. - Because attacks are gonna happen.

Exactly and we talk about dwell time.

How long does the attacker stay on the system?

Because the longer they're there, the more information they can get.

And what am I looking at right now?

Oh, so these are the undersea cables

that make up a huge part of the internet.

So, as countries get connected on the internet,

they connect via these.

All right and there are a lot of points of vulnerability there.

There are.

Now that I've got the basics,

is there a way to see this in action?

So funny you should mention that,

I believe Dr. Staab is coming in right now.

[lock beeps]

Tamara, let me introduce you to Torsten Staab.

Thank you.

Hi, Torsten it's nice to meet you.

Hi, nice to meet you too,

welcome to the security operations center.

So, tell me what I'm looking at here on the screens.

So, you're looking at our latest generation

of cyber security tool

which is called REDPro ZTX.

It's a zero trust security platform.

It's very modular, highly scalable.

Modular in the the sense of like a Lego system.

You have different building blocks

that are focusing on various aspects

of an IT operation.

Whether it's the networks we're trying to secure,

the applications, the users or the data.

So let me show you what that system looks like.

So, one part of the system is

the real time situation display that you see here.

The system continuously monitors

computers, applications and users and networks.

And it shows you real time alerts

if someone were to compromise the system

trying to intrude into a system

and install ransomware as an example.

So you get real time alerts on a display.

Um, the system will then also take--

Wait, wait! You got an alert.

[man] Yeah, actually that's a great example.

So here, we have an example where

someone was trying to insert an unauthorized USB storage device,

in a corporate computer.

The system detected that in real time,

and what this platform now will do,

in order to secure the system,

it'll take multiple steps.

It'll execute what we call a cyber playbook.

Let me show you what this looks like in this particular case.

So, in this case,

the system will take, uh, multiple actions.

It'll block all the USB ports on this laptop

to prevent any exfiltration.

Or someone installing unauthorized software,

such as malware which could be ransomware.

It'll also then automatically

isolate this machine from the network

to protect any other machines on that network,

uh, from a potential threat.

It'll then also lockdown the data on this drive,

to secure the data

in case there's sensitive information on this machine.

Um, it'll then disable also the user accounts

to prevent someone from taking these accounts

and trying to get escalated privileges on other systems.

So all of that happens automatically

in a matter of milliseconds.

I just slowed it down here for demonstration purposes.

But the system will take all these steps

in the background, instantaneously.

So it's a really thorough system.

Just to make sure I understand,

you mentioned earlier,

you compared it to the way a Lego set is modular in design.

In this, are the modules, are the building blocks

the hardware, the software, the network?

Or are the building blocks

the different technologies you use to protect all of those things.

Yep, that's a great question.

So, it's the technologies, the building blocks,

because to protect the system

which consists of networks, data, applications, users.

Right, you need to use more than one technology.

Unfortunately there's no one size fits all tool you could install

that provides comprehensive coverage.

So, what this platform is designed, uh, to do

is take the best in clients technologies for network security,

application security, user security data security,

and allow us to combine those rapidly

and employ those when we need them.

We've looked at different ways Raytheon Technologies

can outsmart attackers

and identify anomalies that could cause potential threats.

Now it's time to see the future of aerospace and defense

in action with the CADS flight simulator.

[Tamara] Hi, Amanda.

- Hey, Tamara. - Hey.

This is my pilot, Sung.

Hello, hello.

And what I'm gonna be showing you today

is how we protect airplanes from cyber attack

here at Raytheon Technologies.

We use our cyber anomaly detection system, or CADS

to monitor all of the communication

going on internal to the aircraft,

for signs of cyber attack.

What CADS is gonna do,

it's gonna give Sung information

about what's going on, the cyber attack that's happening.

So that he can respond and fight through the attack.

So you're talking about an attack that happens

in the air, while the plane is actually flying?

Yep, that's exactly what we're worried about.

A lot of these planes have been built in the '80s,

and they have a lot of external facing interfaces,

like radios and wifi.

These could all be vulnerable to different cyber attacks.

So I'm gonna go ahead and launch an attack.

And Sung is going to see the effects.

Ah!

[Tamara] Cyber attack via GPS receiver,

engine systems affected.

[Amanda] Yes, exactly.

So, I'm telling him that a cyber attack is what killed his engines,

and that it's originating from the GPS receiver.

In this instance, he can disable the GPS receiver,

and his engines will come back online.

Without CADS he'd have no idea why his engine just stopped.

And this is really important

because pilots rely so heavily

on their instrumentation, right?

So if that information they're getting is faulty,

it can, [vocalizes].

Right, exactly, that's another thing that could happen

is we could affect the instrument display.

Uh, so now what I'm gonna do

I'm actually going to swap out the onyx boxes

for a box that's got more cyber protection on it.

And I'm going to throw another attack

and we'll see how things change.

I'm getting like a little nervous watching all of this.

[Tamara giggling]

[Tamara] So now the avionics systems

are going to be protected by our additional solutions,

counter veil and boot shield.

And what they'll do,

is they should mitigate the attack from happening.

I tried to launch the attack, but nothing happens.

CADS has still seen me trying to inject something.

But the malware's no longer running

because it's being blocked by our other protections.

Yeah, okay, so that is the plane that I want to be on.

Yeah, definitely.

All right, well thank you so much for flying with me today.

Or letting me fly with you today.

I'm going to head out for a scrimmage now.

Sounds good, no problem.

Thanks again.

Is this where the scrimmage is at?

Yes it is, come on in.

I'm Tamara, you must be Anisha.

Yes, welcome to the code center.

This is our cyber operations, development and evaluation team.

And these guys are going at it,

they are attacking away at some of the products that we have,

trying to find our vulnerabilities.

On the screen here you'll see that, you know,

they're scanning the environment

they're looking for, you know,

any place where they can find a hole.

So the red dots here signify, uh,

products that look like they might be a little bit weak

and they can break into them.

So they're constantly scanning, all the team is trying to collect points.

It's a scrimmage.

So we use our offensive attackers here,

to inform our defense,

So that we know how to protect our products better.

We do this as a game just to keep it more interactive.

This kind of reminds me of, like, the white boards

that you see during athletic practice.

- Yeah, yeah. - Where you're looking at each team,

trying to find the holes.

Yep, each one of the team mates is here

honing in on different products

just so they can collect the most number of points

for their scrimmage.

How do you know when someone wins?

Well, actually in the scrimmage you do

but in real life it's always an evolving game.

All right, well then I better see what's going on in defense

so I have a good understanding of it all.

- Yep, let's go see. - Okay.

All right, so this is our defense, our blue team.

Yes, welcome to our blue team, our cyber defenders.

Um, as you can see from their screen,

they're looking at something a little bit different

than what we saw in the red team side.

Obviously for the purposes of the scrimmage,

this is dummy data that they're looking at.

Ultimately we're looking at threat actors.

Where are they looking?

What information are they gathering?

And basically they're trying to prevent the red team from breaking in.

So they're blocking and tackling as best as they can.

They're collecting points for their team

using whatever products they have at their disposal.

But as you can see, it's a lot of information

But, um, it's the best way we can, you know,

build our products for our customers,

is ensuring that it's protected.

So this process seems much more evaluative

than what was going on in the offense side.

Oh, yeah.

I mean, they're basically scanning the threat horizon.

Um, and seeing where people are trying to come in from.

But it could be from anywhere.

So our defenders have to, you know,

rely on the best techniques that they have out there

and best products that we can give them.

So this truly is a game

where you kind of want both sides to win.

Oh, yeah, I mean both sides have to put their best foot forward

so that we can build better products at the end of the day.

Um, and again, in cyber,

the landscape is always changing.

As you can see, it's constantly evolving.

Well, speaking of landscapes,

we are now gonna take Julian back to invention land

so he and George can have a conversation about this.

Thank you so much for showing me through.

- Oh, you're very welcome. - All right.

[knocking at door]

[both laughing]

How in the world did you get in there?

[giggling] Little bit of magic.

- Good to see you, Julian. - Good to see you too.

Well, I was hoping that you would share with us

a little bit about

where's cyber security going in tomorrow's world?

Sure, Raytheon's intelligence space

is really at the forefront of cyber security solutions.

- Things like zero trust. - [George] Mmm-hmm.

We have customers, both domestic and foreign governments,

commercial companies and even other cyber security firms.

- Interesting. - Yeah.

And that's because we strive to really cover

the last bit.

So many traditional cyber security firms

will cover 80% of the solution.

Where we cover that last 20%.

- Ah, the hard stuff. - Exactly.

All right, well let's take a look at this screen

because I got this image.

So I wasn't quite sure what I was looking at here.

It's like some kind of a digital mind print or something.

[Julian] Right, yeah, no,

this is about machine learning and artificial intelligence.

So, cyber security we have tons of data.

And we have to sift through that data

in order to find the little nuggets, the evil bits, right?

And so we use artificial intelligence and machine learning

to do that.

You know, we have to constantly look at five, ten years down the road.

In order to stay ahead of the threat.

The holy grail of cyber security is really predictive cyber.

And the only way to do that is to look through all of this data.

Mmm.

[Julian] We're looking for those little nuggets, right?

Machine learning and artificial intelligence help us get there.

Very nice.

Well, it sounds like you have some of the best brains

working on this.

We definitely do.

All right, let's take a look at this next one.

All right, so I got this image,

and I see these two people.

I assume they're two super brains working on a project.

Exactly, these are two cyber security engineers

working on one of our tough problems.

Ah.

It's interesting, we have a huge talent gap

within cyber security.

We're always looking for new people.

And really, we've got to start cultivating that way back in colleges.

So, we're part of the national collegiate cyber defense competition,

for instance.

Great, I mean, that's a great way to, you know, cultivate talent.

Now, we're really into STEM and STEAM around here,

do I need to be an engineer to work in cyber security?

No, not at all.

And in fact, many of our engineers are,

I'd say, unconventional types, right?

So, we have a Sociologist who's an engineering fellow

who's involved in cyber security.

Yeah, interesting.

Yeah, and they bring unique perspectives.

And in fact, my boss is actually an environmental scientist.

That makes a lot of sense.

'Cause you're looking at the threat

from a lot of different directions then, aren't you?

Exactly.

And then we have this screen down here.

This Cyberlandia, what is that?

So Cyberlandia is the journey to perfect cyber security,

which we call Cybertopia.

It's an idea that my boss came up with.

And the idea is...

that Cybertopia is a world where we're free from cyber attacks.

You know, we don't have to worry about anything.

And Cyberlandia, of course, is the journey to that.

I see, so the perfect world

which I would love to have for my family

and my friends and our business.

- Right? - Exactly?

All these threats are completely disrupting our lives.

They are, and that's why we're developing these advanced technologies,

like I was showing you.

In fact, it's a journey, right?

And it's a continuous journey as cyber threats evolve.

You know, we have to come up with better technologies

like you've seen here previously.

So, that might be a good segue,

I got this in from your corporation.

Right, this is a board game that we developed.

Okay.

It's called Cyberlandia, it's the journey to perfect cyber security.

The Cybertopia that we were just talking about.

That's a good idea, I mean,

cyber security is such a complex field.

It is.

Boiling it down to a game, that makes a lot of sense.

Exactly, and as you progress on the journey,

you'll find out it gets more and more difficult.

A board game to simplify the, uh,

the difficult story of really the cyber security's all about.

Exactly, and there's of course a catch to it too.

- A catch? - Mmm-hmm.

Yeah, like the catch that it never ends, right?

Exactly.

- Well thanks, Julian. - Great seeing you.

- Good to see you, thanks for coming in. - Take care.

[George] Welcome to Cybertopia.

Interesting.