Тёмный

Dissecting Stuxnet 

Stanford
Подписаться 1,9 млн
Просмотров 148 тыс.
50% 1

The Stuxnet computer worm is perhaps the most complicated piece of malicious software ever built; roughly 50 times the size of the typical computer virus. It leveraged an array of new techniques to spread and conceal itself while attacking Iranian nuclear enrichment centrifuges. Symantec Chief Architect Carey Nachenberg explains how the Stuxnet worm spread, evaded detection and ultimately accomplished its mission.
Stanford University:
www.stanford.edu/
Center for International Security and Cooperation:
cisac.stanford.edu/
Stanford University Channel on RU-vid:
/ stanford

Опубликовано:

 

28 июл 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 237   
@stheripper
@stheripper 7 лет назад
This person definitely deserves better audiance.
@OmmerSyssel
@OmmerSyssel 6 лет назад
saurabh chikate maybe this audience was used to more demanding issues. Ongoing presenting simple matters with "right" doesn't raise any level.. Right?
@shockthemuscle3810
@shockthemuscle3810 3 года назад
😂
@nekilof-2363
@nekilof-2363 3 года назад
@@brysonmalakai6769 Nobody cares & nice pitch for your stupid hacking program.
@deemarty6618
@deemarty6618 3 года назад
I agree...strongly also to the fact that you beat me to this comment by four years
@mlassz009
@mlassz009 Год назад
1:44...... " Killa what, John I don't know what he's saying "
@BillKinsman
@BillKinsman 3 года назад
Stuxnet demonstrates what is possible when you have access to everything you need.
@tekobari
@tekobari 9 лет назад
Without a doubt, this is the best video I've seen on Stuxnet for non-computer people. There's no coding shown or any other stuff, and it's step-by-step. Imma put the link wherever I can. Terrific!
@PAULBLUNTZER
@PAULBLUNTZER 11 лет назад
14:13, finally hit Level 90 in World of Warcraft.
@therockstar17
@therockstar17 9 лет назад
Whats up with all the old people looking like they have no clue what this guy is talking about? They look like they broke out of the retirement center and accidentally went to the wrong class and instead of making pottery for the afternoon.
@weenir299
@weenir299 8 лет назад
+therockstar17 NSA agents
@nathwalsh1
@nathwalsh1 8 лет назад
+weenir that old dude trying to hide his face
@atheist_realist
@atheist_realist 8 лет назад
LOOL! Oldies from Standford look like they don't quite understand whats all the fuzz about
@biz4twobiz463
@biz4twobiz463 8 лет назад
Agreed. Looks like a lot of folks that need to retire and get off the payroll. LOL!! Seriously, old folks like that should go off and live their lives. Let some young folks in...and reduce the unemployment rate. LOL!!
@koovar
@koovar 8 лет назад
what a stupid fucking comment, you must be thick as pig shit
@3hundredyearsago296
@3hundredyearsago296 4 года назад
The complexity of this is mind boggling. To have a worm that actually re writes logic and makes it appear as nothing is awry. Wow i have trouble writing basic ladders.lmao
@solsteinbergowitzgreenbaum411
@solsteinbergowitzgreenbaum411 8 лет назад
Thank you, Nicholas Cage. Very informative.
@OEFarredondo
@OEFarredondo 5 лет назад
Sol Steinbergowitzgreenbaum yeah man I was about to say that guy does everything
@daintellekt
@daintellekt 11 лет назад
excellent ! room filled with people waiting for their retirement and devoid of any enthusiasm or interest.
@wicksrabach8545
@wicksrabach8545 4 года назад
Brilliant presentation of a very complex subject...
@senorretard
@senorretard 12 лет назад
"my biggest fear is... spiders...I fucking hate spiders"
@mlassz009
@mlassz009 4 года назад
Comments from the Crowd: "I hope i don't miss bingo" "Why does my hip hurt" "Wheres my heart pills"
@paulegonkluwe2597
@paulegonkluwe2597 3 года назад
Know what you are? A DAMN FUCKING MORON.
@mlassz009
@mlassz009 3 года назад
@@paulegonkluwe2597 I take it your over the age of 50, It might be nap time for you now....I sense a bit of geriatric anger
@paulegonkluwe2597
@paulegonkluwe2597 3 года назад
@@mlassz009 How about a nice big cup of shut the fuck up, you spastic??!
@yair4616
@yair4616 3 года назад
@@paulegonkluwe2597 Okay boomer
@asiamies9153
@asiamies9153 Год назад
:DDDDDD
@nyariezhou8470
@nyariezhou8470 3 года назад
Very informative! Thank you for the information about The Stuxnet computer worm and all the stuxnet threats!!
@anonmouse529
@anonmouse529 9 лет назад
people who program not only have a effect on the virtual world but can also impact the physical world since the two are closely met the only way to get rid of the problem altogether is to get rid of technology but i dont foresee that from happening so all we can do is take precautions and actively monitor for new threats and adjust as necessary.
@OmmerSyssel
@OmmerSyssel 6 лет назад
anon mouse The impact on the physical world from desk guys is pretty low, just like the influence from smiths or carpenters on the virtual world is pretty easy to manage ;-) Which job do you earn your living?
@jordanmanco5216
@jordanmanco5216 8 лет назад
his thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.
@biz4twobiz463
@biz4twobiz463 8 лет назад
Agreed. We already know stuxnet. The key here...is that since the source code is in the wild...others interested in copying and/or converting the code for specific needs can be done. instead of 7 interests...they inject 10 or 12 or etc. ???
@OmmerSyssel
@OmmerSyssel 6 лет назад
Jordan Manco Ask any electrician, instead of computer nerds.. ;-)
@kelkiiii
@kelkiiii Год назад
This is a really great explanation and the enthusiasm was awesome
@deadlock107
@deadlock107 6 лет назад
This was very intertesting and understandable for regular people (like me).
@MaynardKeenanX
@MaynardKeenanX 11 лет назад
90% of the people listening were just absolutely clueless about everything he said...
@josephmartin6219
@josephmartin6219 Год назад
Israel's Unit 8200 and the NSA wrote something the Iranians never saw coming in 20 years lol Absolutely incredible the abilities of the worm!
@metaparcel
@metaparcel 6 лет назад
This should have a million views.
@attilagergely6734
@attilagergely6734 3 года назад
The update feature allows the worm to be easily rendered useless. If the engineers upload a version that is inoperable and specify that it is the latest version then the worm will no longer cause a problem.
@djcanaan1
@djcanaan1 2 года назад
They didn’t know they were getting hit with this so there was no strategy to defend against it. Also it’s highly probable that this was created for the sole purpose of attacking this specific network meaning it was built to exploit flaws in its design
@Reparaturkanal
@Reparaturkanal 6 лет назад
So what about those 2 Hertz? Did it do so to damage the motors, keeping them from spinning because of the low frequency, but still putting power thru to damage the motor windings?
@clownworld5474
@clownworld5474 2 года назад
Like a spinning top, when it slows to zero it starts to lose balance. The loss of balance created damage
@iansullivan3547
@iansullivan3547 Год назад
Also uranium enrichment centrifuges have to spin fast enough to separate enriched uranium from regular uranium. So when it spins to slow, the two don’t separate and you can’t use the enriched uranium that would go in the bombs. So too fast causes damage, and too slow doesn’t allow you to get the specific type of uranium (enriched) you need to make the bombs
@jvigil2007
@jvigil2007 11 лет назад
So when the code "put the picture in front of the camera" what would the PLC show when an engineer tried increasing or decreasing the frequency of the centrifuges? If an engineer tried increasing it from 800 to 1200, would the PLC show that value while the code was still doing its mission?
@William_sJazzLoft
@William_sJazzLoft 3 года назад
In the case of the Iranian technicians at Natanz, for the first payload the values displayed were within the normal parameters.
@SloeJuice
@SloeJuice 7 лет назад
Stupid camera man - showing the person talking, but not the slides.
@OmmerSyssel
@OmmerSyssel 6 лет назад
Orange Juice Typical intellectuals? Ordinary issues seldom handled to ordinary standards, by products of elitarian circumstances ...?
@MelindadelosSantos
@MelindadelosSantos 10 лет назад
Two paws up and a circle (for the lucid breakdown)! :)
@alexkantor8238
@alexkantor8238 9 лет назад
Could you mimic human immune systems, and make a "deactivated" version of stuxnet that could be used to train antivirus software? Or to make it attack other instances of itself?
@robbzooi
@robbzooi 9 лет назад
this is actually quite an interesting thought
@vytautasgaldikas7588
@vytautasgaldikas7588 9 лет назад
Alex Kantor Sure that's how antiviruses work already. But this was an entirely new virus, hence the immune system was not trigerred.
@biz4twobiz463
@biz4twobiz463 8 лет назад
Absolutely. Once a hacker has the source code they can do with it as they please. Similar programs exist...and they run the virus, malware, worm in a so called isolated Sandbox environment.
@cougar231000
@cougar231000 6 лет назад
that doesn't make any sense
@neosapien247
@neosapien247 11 лет назад
5:17 corner guy: I have no idea what I'm doing here.
@flexzionist
@flexzionist 11 лет назад
"It's called a Trojan Horse because it does damage"... ehhh okeee
@danscott8899
@danscott8899 5 лет назад
The guy in in audience hiding his face from the camera. Hilarious. Great video! Thanks!
@hunterbiden7391
@hunterbiden7391 2 года назад
He must be wanted.
@Silhouette93
@Silhouette93 12 лет назад
Great video
@unclewaggy09
@unclewaggy09 7 лет назад
Anyone know how they know it was named Stuxnet? Or is that just a name given out randomly? I'm not a computer guy.
@Benjam901
@Benjam901 7 лет назад
The original name given by VirusBlokAda was "Rootkit.Tmphider"; Symantec however called it "W32.Temphid", later changing to "W32.Stuxnet". Its current name is derived from a combination of some keywords in the software (".stub" and "mrxnet.sys")
@ravirajgupta153
@ravirajgupta153 6 лет назад
Thanks Benjam901
@MattAndersomm
@MattAndersomm 12 лет назад
This is Proper Noun you are giving as an example, neither of us is wrong.
@ankitsuthar3776
@ankitsuthar3776 3 года назад
Great Explanation ! You definitely deserve better audiences:)
@lurkenskanal405
@lurkenskanal405 8 лет назад
now thats one complex virus
@xEePiiCzZ
@xEePiiCzZ 11 лет назад
The virus would make the interface believe that everything is running fine, when it secretly makes the centrifuges run at 2Hz or 1410Hz.. I'm not quite sure or it reacts on the interaction of people it just analyses the scheme and then simulates it.
@TristanMorrow
@TristanMorrow 12 лет назад
>> There's actually word processors you CAN'T infect with viruses ...or are there?
@pyrrho314
@pyrrho314 12 лет назад
short version: they exploited the fact that they ran mission critical systems on microsoft operating systems. I assume they use duct tape to assemble the plants in place of bolts.
@glepp
@glepp 2 года назад
they would of exploited any other OS, no OS is 100% failsafe.
@EETechs
@EETechs 12 лет назад
Problem is, no PLC software is for Linux. The most used PLC's are either from Siemens or Allen-Bradley. Not even virtualizing Windows onto Linux would stop this virus.
@ScottishAtheist
@ScottishAtheist 12 лет назад
Fascinating.
@emperorkang
@emperorkang 12 лет назад
then why is prologue spelled prologue?
@kevinparsley6806
@kevinparsley6806 5 лет назад
not feeling so excited for my next roller coaster ride after this...
@75Prelives
@75Prelives 9 лет назад
Pretty amazing anyway you look at it....
@vrghiks
@vrghiks 10 лет назад
Are these viruses catching?
@JosephTX89
@JosephTX89 12 лет назад
This is pretty cool. I don't understand why computer worms like this are treated as alien technology by the media when the espionage factor is much more exciting anyway.
@accentz123
@accentz123 11 лет назад
that's kinda awesome...i wish i could program and write code..
@rbrtchng
@rbrtchng 12 лет назад
I know your point, and my counterpoint is that it doesn't matter. A second word is a second word.
@mkimball6
@mkimball6 12 лет назад
Not a lack of, just being cheap. Nobody pays for something they don't need and nobody expects a cyber attack, though they should. I bet the physical security on the place was top notch.
@shudukahn555
@shudukahn555 9 лет назад
Get ready for Stuxnet 2
@MattAndersomm
@MattAndersomm 12 лет назад
Both nouns epilogue and epilog are correct.
@AntiHolyChrist
@AntiHolyChrist Год назад
I haven't watched TV in 12 years since this. I've been tryna figure it out.
@AntiHolyChrist
@AntiHolyChrist Год назад
I ran around the east coast tryna escape while everyone was stuck to a screen. I was so scared.
@ronaldbeck8689
@ronaldbeck8689 Год назад
13:44 He explained NFTs in the simplest way 7-8 years before they were really a thing and like 9-10 before the boom.
@theone3428
@theone3428 Год назад
NFT's are 1 of 1. He's talking about digitally signing software so that you know it's unmodified.
@TheNelso54
@TheNelso54 Год назад
No he’s not lol
@tammyroyce8013
@tammyroyce8013 Год назад
Okay there you're making a benchmark that is traveling
@alberoDiSpazio
@alberoDiSpazio 11 лет назад
14:13, I just won my 'Berries & Cream' on Ebay.
@emperorkang
@emperorkang 12 лет назад
you're missing my point. prologue is the opposite of epilogue. it doesnt make sense to call it epilog, if you dont spell prolog.
@gromby783
@gromby783 11 лет назад
Whitfield Diffie at 5:52.
@tammyroyce8013
@tammyroyce8013 Год назад
And judging by what I can see and feel since I am clairvoyant I'm pretty much saying he's either a medics a doctor or nurse
@existenz55
@existenz55 9 лет назад
Imagine in BadBIOS is real too (about 10 times more complex then Stuxnet) and we just don't know what it dose at the moment.
@existenz55
@existenz55 3 года назад
@nine virus
@tammyroyce8013
@tammyroyce8013 Год назад
All because if you take a regular Android phone that is a prepaid and you get it from the store you dissected you take out the little sticker with the barcode on it and underneath that you have that little stabbed blood
@ThePayola123
@ThePayola123 12 лет назад
One Giant Leap for Computer Viruses, One Teeny Tiny Step for Mankind.
@ParentBeater123
@ParentBeater123 12 лет назад
While this is mostly true, Stuxnet used Windows as a vehicle to gain access to PLCs. If you replaced Windows with Linux it wouldn't have been able to spread and find it's way into the PLCs and deliver it's payload.
@djcanaan1
@djcanaan1 2 года назад
Then the virus would have been built to exploit Linux instead
@PapaCuppa
@PapaCuppa 12 лет назад
Half the people in that room thought he was talking about the flu virus.
@muneebbhat3928
@muneebbhat3928 2 месяца назад
Foiled?
@rr.studios
@rr.studios 3 года назад
Steve Jobs, Part time CEO of Apple, Parttime Stanford lecturer. RIP... you will be missed
@the_god_killah
@the_god_killah 6 месяцев назад
is he teaching in a retirment home?
@William_sJazzLoft
@William_sJazzLoft 3 года назад
Engineering systems and automation technology compromised. Valve controllers for the gas centrifuge cascade are duped.
@fieldingmellish6856
@fieldingmellish6856 Месяц назад
I guess the best way to avoid these kinds of break ins is with hard safeties. If all the operating data goes through one source(the PLC)it can be manipulated. All critical operating parameters ie: speed/freq, temp, level, ?? Etc, should have separate safety shutdown hardware that does NOT relay through PLC. Wait till this kind of stuff hits autos who now use similar data collecting/controlling methods Connectivity is sometimes very overrated.
@Max-zr7hr
@Max-zr7hr 5 лет назад
They said there was going to be pudding. Where is the pudding?
@xsitescripttactnorris8503
@xsitescripttactnorris8503 10 лет назад
Awesome.
@rbrtchng
@rbrtchng 12 лет назад
and why is egg spelled "egg"?
@MattAndersomm
@MattAndersomm 12 лет назад
Becouse again prologue and prolog are correct.
@Tej517
@Tej517 4 года назад
Speaker is excited to teach but audience are like "how boring, keeping up with the Kardashians is better".
@licensedblockhead
@licensedblockhead 11 лет назад
12:40 OH MY GOD
@ritvarsdortans
@ritvarsdortans 11 лет назад
ye, sure...
@elev84u
@elev84u 11 лет назад
Choosing the right audience for this topic: You're doing it wrong
@rmcgraw7943
@rmcgraw7943 3 года назад
This is the pretty typical APT attack we see now.
@William_sJazzLoft
@William_sJazzLoft 3 года назад
Data files contain the command and control logic
@Ishpeck
@Ishpeck 12 лет назад
Time to start using OpenBSD.
@johnsnow1516
@johnsnow1516 11 лет назад
okay?
@pyrrho314
@pyrrho314 12 лет назад
the real issue here is it would be just as easy to break into our power systems and screw them up... windows is a toy... unless you built your power station with duct tape to match, it's not appropriate mission critical software. There's actually word processors you CAN'T infect with viruses... wouldn't it make sense to have a secure facility use them? Isn't BG rich enough off his crap by now?
@thevivekmathema
@thevivekmathema 6 лет назад
the grandpa just said Dooouggh
@kipropcollins4220
@kipropcollins4220 Год назад
the most important part was the epilog
@Evanderj
@Evanderj 2 года назад
His audience must think he’s speaking a different language 😂
@emperorkang
@emperorkang 12 лет назад
"epilog"??? is your spell check broken? :-)
@lamborginiish
@lamborginiish 11 лет назад
Start with Code Academy.
@TristanMorrow
@TristanMorrow 12 лет назад
good talk, m'kay ...but he reminds me of the school counselor from South Park, m'kay ...
@musashidanmcgrath
@musashidanmcgrath 9 лет назад
Why can't all the imperative systems that drive centrifuges/etc just be 100% offline with no external ports and a properly-encrypted network?(retinal scans instead of a default/ridiculous password) If there is no way to introduce these tools to the system then surely they are safe from attack?
@mfascino
@mfascino 7 лет назад
musashidanmcgrath the system was 100% offline.. with a USB port. even the most remote, offline system still needs to be updated somehow
@renovatiovr
@renovatiovr 5 лет назад
@@mfascino that, or the system was offline with an internal closed network
@egg-iu3fe
@egg-iu3fe 2 года назад
the problem is that as long as there are spies, an offline system is susceptible to attack. Doesn't matter how much you try to secure it if one of your own trusted people is a double agent or being blackmailed or bribed by the CIA or Mossad. Iran arrested some spies after stuxnet happened, those spies were probably executed.
@OEFarredondo
@OEFarredondo 5 лет назад
Folks my bad, I let my dog use my computer and she wrote stuxnet. Italian greyhound mixes are shade AF
@akhTubed
@akhTubed Год назад
The audience is actually very impressive, critics in the comments have no idea. He’s got Whitfield Diffie in the front row… awkward moment there feeling the need to explain public key crypto.
@chvlumbee
@chvlumbee 3 года назад
I had to come for the comments LOL,. When they pane to the viewing audience 😂😂😂, dam near lost my mind.
@tullegutt991
@tullegutt991 11 лет назад
I don't understand why NIcholas Cage is explaining this to old people, makes no sense. they obviously has no clue of what he's saying...
@alberoDiSpazio
@alberoDiSpazio 11 лет назад
Is it wise to post this, shouldn't we leave Iran in the dark?
@A-Milkdromeda-Laniakea-Hominid
@A-Milkdromeda-Laniakea-Hominid 4 года назад
Look at the guy at 5:18 and 14:50, conscious of being seen on camera. God I couldn't stand to be in national security. Too much paranoia, not worth it.
@kvmairforce
@kvmairforce 9 лет назад
This thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.
@SmartK8
@SmartK8 12 лет назад
Is the audience for real? Or somebody sliced the video with a home for elderly Sunday morning daily program announcement. I just can't believe my own eyes.
@itsThemuRR
@itsThemuRR 6 лет назад
2018 and I'm agreeing!
@bizichyld
@bizichyld Год назад
But why does the average age of the audience like 92.
@rathemis
@rathemis 12 лет назад
my fear is that some creepy guy is gonna modify this stuxnet to do something more nasty, not only to the iranian plants, but to everybody. that can become really bad...
@simonmessenger7217
@simonmessenger7217 4 года назад
Is he at a nursing home?
@neosapien247
@neosapien247 11 лет назад
14:13 secretly came.
@ingemarastrom4623
@ingemarastrom4623 8 месяцев назад
Why is he talking to that audience?
@nicholaspetrish8383
@nicholaspetrish8383 2 месяца назад
Apparently you don’t recognize the cryptographic players in that audience.
@ravipopat1
@ravipopat1 11 лет назад
More like a mix of Ryan Gosling and Nicolas Cage.
Далее
The Dawn and Dusk of Sun Microsystems
18:33
Просмотров 1,3 млн
Поём вместе с CLEXXD🥵 | WICSUR #shorts
01:00
МЕГА ФОКУС С ЧИПСАМИ
00:42
Просмотров 108 тыс.
Lecture 2 | Quantum Entanglements, Part 1 (Stanford)
1:48:39
Kaspersky vs 2000 Malware
12:42
Просмотров 215 тыс.
Stuxnet: Computer worm opens new era of warfare
14:52
Cracking Enigma in 2021 - Computerphile
21:20
Просмотров 2,4 млн
The Stuxnet Story: What REALLY happened at Natanz
37:38
The Rise of Unix. The Seeds of its Fall.
16:51
Просмотров 481 тыс.