[Applause]
the risk impact estar aqui con esta
presenter fiona masks
pero much me impact well for me it's a
what's a shock to give a presentation
but it and it's a shocker also to have
services which we consider to be a basic
like gas light electricity but what if
all of a sudden this goes time and it
just disappears black out how long would
it take us to start panicking start
seeing riots in the street things that
we've seen in movies but an awful day
these things could happen what's the
story in Spain how's the situation in
Spain let's look at it what do we
consider critical infrastructure this is
a good question
and by the way this is something that
isn't clear all the way for instance we
have a water supply plants energy
systems we always use nuclear plants
because people are really scared of this
systems like defense for instance that
may include components that may be
managed by control systems that are
similar to the ones we use in companies
but we also have other systems like for
instance telecommunications television
radio and infrastructures that allow for
communication between different regions
in order to get this and then later I
took two trains one from Valencia to
Madrid and one from Madrid descent and
that could have used other alternative
means yes I could have there's also this
is also applied for traffic roads but
private sector
companies always need security a place
full of frigerators for instance must be
working in order for the food to stay
fresh and healthy is this a critical
infrastructure nobody uses similar
systems what you see here is a control
panel something that a technician
somebody would be looking at or somebody
from maintenance here you can see
pressure pumps etc and these are things
that we humans can interpreters
interpret and these are called
human-machine interfaces and we also
have to bear in mind that all this
information comes from somewhere it is
processed by systems that are in charge
of managing all the information coming
from different sectors sensors and
probes in order for this to be
translated into our own language in
order ferocity understand what is
happening so in the end these sensors
must be connected right from an
industrial sort of oven or furnace to
set of washing machine machines or
dryers or a reactor in a nuclear plant
so we need to manage our these sensors
in the right manner in an automated or
manual fashion you choose like the
previous speaker said there's there's an
engine called should' and this is like
Google and this allows us to look for
internet devices or such of them
computers industrial control systems and
you find the funny things like these for
instance were says nuke
Engineering sounds like fun or other
systems in the network that you can
access and look at it and in the West
possible case you can even control
somebody decided well these systems are
fine but I want to be able to control
them remotely from the house across the
way so is this necessary maybe not but
it's more comfortable and this is that
where problems are started here we just
have a few from the last a few years I'm
just going to focus on the one that I
highlighted since 1982 even though this
is an event that we need to be cautious
with because it is something that
happened during the Cold War and what
we're seeing in 2017 many things have
happened in between some of them were
made public or the public or the others
weren't and to begin with let's focus on
something that was a landmark when
people started speaking about industrial
facilities security Stuxnet here this is
when systems started detecting something
in Iran something that was focused in
this place natum which is the heart of
Iranian Iranian nuclear program those of
you who are young won't remember but the
problem there is that the government in
Iran wanted to produce nuclear fuel for
their
plants they are entitled to you of
course but other countries didn't like
this because they thought that there's
nuclear fuel could be used for weapons
for instance so what was done about this
in the first place information was
gathered it was discovered that this
plant was used in PLC system by a well
known company called Siemens and they
could be attacked so these systems
together with uranium machines well this
could lead to a problem this is just a
summary bit now going down to the
details this attack happen the place you
just saw it's not a place you can access
easily or there's no connection for
workers to be able to see football games
no there were very well done no external
system was used some USB devices were
used in this attack they found out which
technische scientists had action which
access to this plant and they infected
us bees in order for them to take them
into the plant and in order to for them
to do their job so why do I believe that
this is still the more advanced sort of
threat
well because five of ulnar abilities
were used and there was no patch to
would solve them and so far many of
these things were this will allow for
the code execution by viewing files and
vulnerabilities that allowed to move
around that internal network making use
of security and gaps and
one or several USBs in the ideas to know
which systems systems could interact and
to have a threat that would do things
like we're about to see how did they
know which our systems were being used
the funny thing is that the propaganda
of the Iranian government allowed us to
know this these these pictures were
taken during a visit of the President to
the plant here you can see in red you
see which machines were working at the
time and details in the control panels
with blown-up pictures where you see
people working and also details like the
evolves in this uranium machine in
poverty no who was using this from then
on map had to be done and to see which
systems could be van vulnerable so what
happened funny smart attack well the
data that were fed from centrifugal
machines to operators workers were
normally but actually they were fake
because the machines were not working as
supposedly they were working and the
field that was being produced nothing
none of that fuel could be used because
this could be used as a few the ND
program the nuclear Iranian program was
delayed because of this problem and it
is estimated that almost 1000 of these
centrifuge machines
had to be thrown away it was behind all
this well nothing has been said about
this officially anyway one who doesn't
need to be too smart you know that
Israel didn't like this Iranian program
at all
so obviously many people were interested
in this plant not working so now we move
to 2014 it's no longer Iran now we're
moving to a very nice region which is in
a conflict right now and I'm speaking
about Ukraine and what's happening in
Ukraine in Ukraine many workers in
utilities or other plants started
receiving mails like we do on a daily
basis but funny sort of males males like
this one supposedly comes from the
Minister for industrial policies in
Ukraine and with an attachment zip file
and behind it there's something that is
hearing like a document but that can be
executed in this one this is used in
order to attack a critical structure by
somebody who has controlled to these
facilities when they realized that it
was no longer easy to include this
executable thank you VIP then Ukraine
started having problems with Russia
everything that was related to war army
dissidents rebels that was quite
interesting so what did hackers do they
used supposed report it was hidden
behind a PowerPoint presentation there
was information about these commands and
this is what the operator the worker
could see what he couldn't see what was
happening behind all this and here two
files were being uploaded and that were
embedded in those documents two files
that were hit him in location and one of
the most hidden behind the daughter gif
that could be run that was exist
beautiful abrir una Puerta drosera in
esto sistemas that was so that's why
remotely hacker could do anything could
do anything so all the criminals within
this is an example and we saw many more
they started including new functions
they didn't want to leave a trail so
they wanted to destroy the hard disk
they wanted to destroy once they had
whatever they wanted to do they
destroyed the this is very you want to
do forensics sort of analysis because
you want to know which fossa have been
downloaded and which ones have been run
if they didn't want to destroy the whole
disk hard this they looked for the
extensions they erased them and not only
this but apart from this they did other
things they used another alternative or
they used another pathway since they saw
that the issue of macros works and
sometimes it doesn't work what they do
it was two trojan eyes a legitimate
application for instance SSH Trojan
version left password default password
embedded there so that an attack from
the outside could access that machine
that was
compromised to have a second entry gate
the conclusion from others was that
those two dates especially 23rd of
December 2015 a blackout happened that
affected around 500,000 people in an
area in Ukraine now let's imagine the
situation 20,000 a third of December
Ukraine those of you sitting here think
it's cold or chilly imagine but it was
like in Ukraine December no lighting no
heating no possibility to use any
electrical device this represents a
concern
antek this really is because it's
affecting you a very important part of a
region that fighting a neighbor people
start coming up with theories of what
could have happened whether this could
have been an attack and the media and
everything so what happened actually
after analyzing they see that we saw
that even though black energy cannot be
the main component of the attack even
though it had been used by criminals in
order to access and to destroy any trace
any traces of the attack and if you
wouldn't know a worker felt at the time
in that situation I brought you a video
clip where you can see attackers took
control here you can see the the
operator of the workers not touching
anything is somebody from the outside in
this case there was no problem
screen wasn't connected to any critical
system but this affected the good
operation of the plant can you hear the
workers saying what's so well this
computer wasn't connected they were
trying to access to any switches
yes I'm being told in other sectors in
the areas of the plant and this is
happening somebody's handing and
touching switches and you see that the
workers not touching anything back shut
down speaking about January January last
year people started doing research
investigating threats were who was
behind at one and done it so many
experts around the world go together
policing and the army in order to find
out would develop that malware attackers
didn't like this and what they did was
to learn more they evolved and they make
use they'd already done and they started
building upon this and they started
using other techniques adding new things
and even
launching techniques to fool trick
everybody wanna make we are criminal era
T's with previous woman because of the
function because of the codes are they
used they share the functions
functionalities they disguised the code
but kept using it in fact it was very
funny because we saw systems that had
been immune left to the normal attacks
with Linux in this in the screen they
planted a message saying that your
wonderful server had been affected and
get them back you need to pay you have
to pay big bitcoins worth ten thousand
dollars in 2016
asking for two thousand bitcoins in 2016
was important and nobody paid but I know
of was a distraction you know that
because they wanted to do was to change
the ways of doing things maybe they
wanted to start making money was there
anything behind this and whatever was
behind there's something we found out
about
honesty is something called petia or
petia this code malware was so this year
that sent you a typical message in a
very funny way computer was rebooted
saying that it was going over the hard
disk and when he started processing the
files and something this message problem
number one the father cannot be
recovered no matter how much will you
pay the ransom or whatever the encoding
system wasn't good it means that you
could recover them second it provided
you with an email address in order to
get in touch with them something that
was destroyed so there was no way to get
in touch with him and third maybe look
at the map this happened mainly in
Ukraine the rest of the countries were
maybe indirectly some ponies were
affected because their headquarters were
in Ukraine and they used the same email
program or software that could be used
by attackers as attack vector the main
sectors that were victims the finance
sector the oil sector and the
manufacturing finances this is critical
why because of this is the MBA program
it's a software that's used massively
but by almost all companies in Ukraine
petia of you recall the name
at the beginning of June just the
revenue statement the attackers located
in faction inferred to be done in
Ukraine they used these servers of this
application
this is an official if TPT compromised
by attackers so they you can see here
that was uploaded in the first since the
updating was done automatically the
users didn't suspect anything
I said well any application that said
download it and install it wasn't the
first time they did this because they
tried before already been successful try
out right now this updates updating
being stored many companies in Ukraine
they succeed you can see how different
companies and their systems affected in
Spain we didn't see much of this in
Spain maybe some companies who are
interested in that region and they use
this accountant system so very few just
for you to see the difference on the
left and you have the Trojan version of
this
[Music]
for several hours using Trojan versions
that these criminals used let's move to
in this Australia which is the most
important threat this year and that is
oriented to the industrial sector why
apart from my colleague
another company dragos we collaborate
with because we got many samples from
them at the beginning of the year and we
started analyzing the way they worked
and how they could affect an industrial
makes so much sense it's so logical
consent of a control and which is signal
machine or several stop being utilities
stops producing electricity the
difference the industrial systems or the
PLC's have given brands illegitimate
commands commercial schema can I try
yours so all this you can see you're
able to achieve they said to backdoors
they have a main one and a backup one
they use the main one to install there
are more where the question is how
although we believe that is
electronically and they install a Trojan
version of the notepad through the
second one that can always be used in
case the main one is discovered they
also install
additional tools for example
remote-controlled tools in order to
program an attack for a particular day
they can change that day anytime they
want and then to remove all trace
whenever they've achieved whatever they
wanted to so the change here is the way
in which they execute their actions they
aren't trying to infect PLC's and they
don't seem to want to have remote
control they just want to send out
commands that the system interprets as
valid for that purpose they use very
widely spread protocols in the industry
these four protocols the first one is a
bit older communication through the
serial port with other industry systems
so what they are trying to do to see
that they are actually executing that
there is a process running and what they
do is to bring that down and use their
own and also your security devices you
know two entrances from the
communications ports so they are the
only one authorized to and establish
this communication then there is this
104 which is more modern which allows to
send commands through a network with the
TCP IP configuration its mooring
thorough and it allows to look for files
with logs and configurations in order to
establish roots to download the commands
there is a problem attached to that
protocol because the serial port
communication would be local but with
104 they can do it remotely actually
what they would do wasn't
to a particular system they would look
for all the systems in the network
through two through two processes range
and shift and what they would do was to
check them down one by one automatically
instead of using the mouse and clicking
them out they would look for all the
monitored industrial system processes
that are controlling different
appliances and they off one by one
automatically and when this is finished
the program is over and this doesn't
only affect power plants we are using
this in companies and infrastructure
services all over the world and they
have their own established standards
that won't change in the short and
midterm so these attacks if used
massively can have very serious
consequences when they are looking for
or what they want is to shut down the
switches so that a particular company
cannot supply electricity or provide the
service they provide whatever it is but
in a more elegant and automatized way
that also leaves less traces and there
was this bonus they also did was a
service attack against the cyber tech
Siemens services or our systems
what they did was sending a UDP packet
with these characteristics in order to
stop the system from running this is the
system that manages communications
between the operator and the critical
systems
if these fail while people are in deep
trouble so this came as a bonus they
didn't they didn't really need to do it
but just to add that functionality so
we've talked about attacks in networks
that we use on a daily basis
but these detects use all the vectors
you don't need to use a computer or a
hook on the internet looking for
vulnerable machines and backdoors there
are all the communications that enable
attacks to systems that are controlling
cities for example signaling devices if
you don't know something there is one of
the biggest smart cities in Spain and in
Europe and there is a website where you
can control the stages of all these
sensors regulating bosses or truck trash
trucks and also senses that detect
faults and failures to be repaired by
the City Council there is a conference
that you should look at which was how to
hack Santander and he he showed some
examples proving that these systems were
hackable as well there are many uses for
example we have traffic signs that maybe
even funny at some point but the thing
gets more serious when you can modify
emergency systems ambulance systems
systems that need to work seamlessly
when they are needed so if these can be
modified with a software-defined radio
system that is a very serious thing
Carlos Garcia said it very clearly in
his talk
do you have 30 euros you can hack your
city so with the right knowledge and
with the right material which isn't
precisely expensive emergency
communication systems and many more
things
he provided the components this is all
you needed if you buy this kind of
devices and Aliexpress for instance you
can build the device for less
then 30 euros of course you need to have
the knowledge but if someone can make
this with the right amount of research
it is very concerning that no measures
have been taken in order to avoid this
from happening in a larger scale we have
this example from Dallas in May you are
hearing our emergency sirens whenever
there is an earthquake a flood or a
critical situation if I remember
correctly there's worse on Saturday or
Sunday it was during the weekend people
were resting and it's no funny at all
that this siren goes off because it's
pretty loud at the same time so what
happened someone pushed the button when
they didn't have to no no operators
admitted to have pushed the button or
sent the command there is this emergency
where as everything looks very quiet
what happened
radio frequency attacks these alarms you
can find more about this example and my
friends alex Casanova's blog and what
can be done there are many more
possibilities that aren't being dealt
with and they can be done via radio
frequency you don't even need the
internet in order to attack the systems
there are other information protocols
that are as effective and they can be
very serious because nobody has taken
these accounts seriously of or they have
underestimated this attacks because
people have trusted that security is
based on obscurity if nobody knows how
this works we are safe this is
absolutely false it is very easy to
obtain critical information about how
critical systems work because somebody
with the right amount of patience
can discovers security breaches I can
think of proven Santa Marta for example
who is able to find security breaches on
critical infrastructures now the
question is after seeing all this are we
as bad as people say are the media
telling the truth or are they
overreacting another question where did
that where do they get that information
because here they say Spain is the third
country in the world with more
cyberattacks how do they know because
there is this report and who are the
main tube well the US England and we're
his friends here where is Russia this is
like the Spanish flu during the world
war some countries aren't providing any
data and therefore we are escalating the
terrible consequences Spain and Spain
was providing data about the number of
casualties and the flu got the name of
Spanish flu and not because there were
more casualties in Spain but because
Spain was one of the few countries
providing data and this is the same
thing here when it comes to cyber
attacks it's true that cyber attacks
have increased but the problem isn't
only that it's interesting to know that
we are able to detect them more
efficiently maybe two years ago we
didn't have the tools to detect those
attacks so are we that bad should we
move to the countryside and dug
ourselves a cave well we have to bear in
mind several factors we've mentioned
several examples reflecting attacks to
infrastructures that either don't have a
good security system or they are
accessed when they don't have to I've
been able to visit critical
infrastructures for example in nuclear
power plant and I and I am relieved to
have sing that critical security systems
are mechanically controlled and not
electronically controlled so any attack
of this sort could help
for example the functioning of a siren
for example or a camera or something
like that but the rest need actually the
actual hand of an operator there are on
the other hand data from people like or
companies like IBM that have shown that
the number of cyber attacks have
increased it's true they have increased
but it's true at the same time that we
are more efficient when it comes to
detecting them we can see here that the
destination countries in terms of
cyberattacks are number one the US and
very far behind China and Israel then we
have Pakistan and Canada where is Spain
here where are we I can't see Spain
anywhere here actually official rankings
don't have as in the top 20 countries so
we are saved on the side but then you
start wondering where are all these news
that we've seen come from well from
biased reports that do not gather all
the information as our colleagues from
Kaspersky reports there are countries
which are a lot worse off than we are
and an interesting data that I drew from
this report is that there is seasonality
actually attack is holiday well in
January there are very very few attacks
after Christmas they are not in the mood
and if you realize it attacks go up
again from July on so think about it
they use vacation periods maybe to
prepare new attacks or just to relax
there's something else that we need to
bear in mind in Spain we have mechanisms
such as the ones provided by CE NPIC for
critical infrastructures that applying
measures that look good on paper
although they haven't been very widely
used in practical terms but they are
being more and more used when I was
preparing this presentation yesterday in
Cebu is preparing something new and this
is my next point is there a solution for
the soul well there are several
scenarios we can use old technology as I
said before which is unfeasible today in
light of how technology is evolving we
need to develop safer and more secure
technology and all the one well you can
just pretend there's nothing going on
this is not happening to me until it's
too late and the problem is already in
your house this is the problem we are
seeing and that is hidden the media then
there is a problem when you go woof I'm
so relieved
that we weren't attacked but this is not
going to last forever because well this
is a piece of news from yesterday in
seva is going to launch the distribution
of tools that will raise the level of
cybersecurity that's very good it's a
good idea but this really needs to reach
the companies and the critical sectors
that are to apply this and of course
these measures need to be applied they
are very nice on paper a lot of people
put a lot of effort into developing
these tools but if there is no updating
process attached and if we start if we
don't start changing our mindset
how can we these measures from being
acquired well legally maybe we might
need to legally force companies to
provide these security measures but in
many cases people just don't have the
resources you know the to make those
happen that is on one hand on the other
hand is listen to people who are
devoting their time and knowledge in
order to discover these vulnerabilities
if we don't listen to them or worse if
we accuse them of some things they
haven't done we will be in deep trouble
a lot of people go desperate when they
want to report an incident that is
affecting a critical structure for
example a water cleaning system when
they want to company well they are not
listened to or they are directly
threatened to be sued so what can we do
about this if you or if you know
somebody who is aware of this kind of
information there are channels to
communicate they can use the security
forces for example the technology
department of the civil guard or the
National Police and many other CEP s
that really have in every region in
Spain if you want to keep your privacy
then speak to a lawyer and have your
lawyer communicate to the security
forces but we cannot penalize
researchers who are working very hard to
make safer system moves
and discovering breaches breaches that
are to be pledged and if we don't
protect these people the bad guys will
win the game this is going to take a lot
of money but the losses that may be
generated with this insecurity if the
situation continues like that and if
cyber criminals can continue attack in
critical systems without any controls
then the consequences are a lot more and
we're not just talking about not having
heating in December in Ukraine we can
have critical systems falling down for
example hospital related systems that is
very serious and we really need to lobby
so that the necessary resources are
invested not only in Spain but on a
world scale because many times we're
interconnected and the energy we are
actually using today isn't maybe coming
from Spain but from Algeria for example
so if you have questions I know this is
a very peculiar issue and this is
probably the first time you've heard
about it maybe not a lot of people who
are listening to us from the streaming
Soares are maybe having questions also
please feel free to make to ask any
questions you want and use the
microphones hello I've loved your
presentation
solutions from professionals I think the
current government in Spain isn't
thinking like that because there's I've
heard this piece of news saying that the
government is trying to recruit
volunteers to act as reservists what do
you think about this
the problem is huge and how is the
Spanish government reacting well what
has been said about that piece of news
isn't totally right they are looking for
cyber reservists a lot of people here
can actually talk about this a lot
better than me for example Enrique Avila
will speak about it but what they are
trying is to to enlarge theirs recipes
school that already exists but the way
they put it wasn't wasn't right if you
are a rest
you don't perceive a salary you get paid
whenever you provide service I think
what they were trying to say is that
we're going to be paid only when you
were active not concerned about what I'm
concerned is who has the right aptitudes
to work as a racist and who can and if
someone can launch attacks saying that
they were acting on behalf of the
government it's good that people who are
providing services for the governments
are adequately paid that's okay in Spain
we don't like talent in Spain is that we
export the challenge because companies
here don't enough for the talent that
were generated that's why people go
abroad
people who were trained here are very
good if you take a look at national
international conferences you can see
that Spanish speakers are always the
best rated so it's not a matter of lack
of talent and this happens also with the
Cyber Reserve how does this work do you
have to take a test do you need a hacker
ID well a lot could be debated around
this but my point of view is this people
who act as rest of us need to be capable
and have the knowledge they have - it
has to be very clearly defined what they
can do and what they cannot do and they
have to be adequately paid yes they have
to be valued I believe that the
government isn't valuing these people
who are computing professionals who've
invested millions of hours and they
don't feel they are rewarded absolutely
you're totally right that is the problem
has to say out loud that those millions
of hours don't come out of nowhere it's
a lot of people's time and those people
are willing to give all that effort the
wave in case of an emergency but at the
same time they want to be rewarded for
it if people in the military are being
paid for defending Spain these people
should be paid as well the problem here
lies in communication and this isn't new
because for example a few months ago
this piece of news appeared saying are
these the hackers that are going to
defend Spain and that raised a lot of
controversy it is a very complex issue
that's why I don't understand that they
are so ambiguous that's the way things
go and not only for our field for many
others too
pero como o solvin un poquito mas at
rasa Mira
so now going back to the beginning of
your presentation somebody or a group
installed but more were update into an
application that is used for example
this controlled well you have given
yourself the answer in this case they
access public FTP but their security
measures were reached and what they did
was to modify that application to
include a file that wasn't originally
there after they did that people would
just download the date and as a result
their machines were infected so in this
case they were looking for more direct
attacks for example ransomware spyware
etc so there was a configuration breach
on the part of the software development
company when it comes to defining who
and what can be introduced in updates
and also another failure that involves
the fact that the downloads of updates
wasn't controlled
one of the essay in the middle good
morning first of all I want to thank you
for your very clear presentation
everyone was able to understand what you
were saying first of all I would like to
make comments about what you've said and
the questions the comment is and most of
the cases you've shared the problem is
that people don't use computers for what
they are and they don't have enough
training as a result most vulnerable
''tis are related to that but it was
just my comment and the question is when
it comes to Internet of Things well I'm
quite scared of this kind of thing we
have light bulbs that can be controlled
from the internet coffee machines it can
be controlled from the internet I don't
think that the security of this kind of
elements is very high I would like to
know what your opinion is of course
unfortunately you are right most of the
Internet of Things devices don't have
security as one of their it is one
because that delays development and they
can it can take longer to launch a new
problem to the markets and this is
something that we can see very clearly
we have more and more devices of this
sort connected and that would enable
criminals to do that kind of thing for
example last year a lot of deos attacks
were launched and caused failures in
systems such as Spotify Twitter and many
more if we multiply this by the millions
of devices vulnerable devices we have we
have we can be in a lot of trouble well
we as consumers can also say I'm not
buying this thing because it's not
secure
and on the other hand we can also
promote regulations from the public
powers to our Telegraph es puto first of
all thank you for this very thorough
presentation that you've prepared I'm
sure that you've put a lot of work into
it
I'm a teenager I'm still learning and I
think I have a long way to go to reach
where you are well there are a lot of
people who know a lot more than me well
my question is would you recommend
teenagers like me to work in
cybersecurity do you think this is a
viable option for future my second
question is what kind of training should
we undertake in order to be experts in
cybersecurity
well cybersecurity is not a future
career it is a present career
we need people and the problem is in
Spain as I said is that a lot of people
leave because companies here don't pay
enough and yes absolutely you have to
love it of course this is something that
you learn every day it's not something
that you study and then you forget about
it actually the train today just gives
you basic pillars very general
fundamentals so that you can specialize
with masters cost courses etc but what
is crucial here is the practice studying
only isn't enough you need to be curious
you must be interested in knowing how
the systems work in order to find
security breaches doing things like the
ones you're doing today
attending conferences I have I do here a
friend of mine who is a vocational
education teacher and he fosters this
among his students he even organizes
cyber Olympics you have more chances
than we did back at the time because you
have thousands of tutorial humans
practical possibilities here at cyber
camp you have the option of testing your
abilities and a lot of companies are
looking for this kind of channel talent
so take advantage of all the resources
you have be curious provides results of
your investigations and research to the
community etc but an important piece of
advice try not to cross the line that
divides hackers from criminals hackers
aren't criminals they are researchers
who look for holes the ones that cross
the line and use those holes for their
own interest
those are criminals and that is
difficult because there are a lot of ego
problems here but I encourage you to
study things and the courses and masters
related to computer practice but
practice practice and and continuous
learning is vital in this profession
well you've said that practice is what
we need but how can we take the theory
that we learn in the books to the
practical field it's very easy medium is
more how to take the theory to the
practice you have many instruments many
tools that allow you to practice at home
by generating scenarios and systems
there are many of them most of them are
for free and you have
virtual machines flash captures many
different things that can put your
knowledge to the test and this guy over
here can help you do that thank you very
much
[Applause]