So what I want to do today is introduce you to what we mean by security, especially with respect to computer and network security. And this will set up for what we're going to study for the rest of the course. So mainly what you'll get from this lecture, you'll learn some new terminology, some definitions that we'll use throughout the course, and a few new concepts. So what do we mean by computer security? What do you think when you think here about computer security? When you hear the course title, security and cryptography or computer security, what do you think this course is going to be about? Passwords? Hacking? What about passwords? How to authenticate people? How to check if a person is an appropriate person to access a computer? Hashing. So I think you've heard about computer security concepts, encryption. You've heard about these terms, encryption, hashing, hacking, passwords, phishing and others. So what we want to do is to introduce some of those terms, not all of them, but to talk about the theoretical techniques that we use to provide computer security. About how do we ensure our computer systems, computer system may be your own individual computer, your phone, your laptop, your PC, but computer systems are more than just a single computer, they may be a set of computers, set of computers in an organization across the globe. How do we ensure that those systems are kept secure? And we'll see some of the techniques, our encryption, hashing, passwords and others. So what are other people mean by security? Well here are two definitions taken from some textbooks or some documents from other organizations. Computer security. The protection afforded to an automated information system. Automated information system, maybe a computer system. The protection afforded to it in order to attain the applicable objectives of, and here are the objectives, of preserving integrity, availability and confidentiality. So they are the three objectives there of information system resources. So this is saying computer security is providing or preserving three things. Integrity, availability and confidentiality of our information system resources, of our hardware resources, software resources, our data. So how do we protect that? That's what computer security is about. These three things of integrity, availability and confidentiality will come up in another slide. This is from some security handbook from the standards organization in the US. Computer security may focus on the security of an individual computer, but common nowadays we network computers. So we also care about not just security of information on that computer, but when it's transferred between computers. So network and internet security. Measures to deter, prevent, detect and correct security violations. Violations, something goes wrong that involve the transmission of information. So when we talk about network and internet security, we're not necessarily looking at stopping someone from accessing my laptop. We're looking at maybe stopping someone from reading information sent from my laptop to a server. The transmission of information and how to secure that. We will focus on the techniques that are used to provide both computer and network security and have some examples towards the end of the course about network and internet security. This last quote is from the course textbook by Stallings. William Stallings created the course textbook. If you want to get a copy you can find links to the recent edition I'm using. I think the fifth edition, there may be a sixth edition on the course website. But I think with the lecture notes that you have, you can survive without having a copy of the course textbook. So the first definition mentioned three components, three objectives. Confidentiality, integrity and availability. And they come up from other people's definitions of security as well. CIA, not the central intelligence agency but the concepts of providing confidentiality, integrity and availability. So many people when they talk about security of computer systems highlight these three objectives. So what are they? Confidentiality is keeping things secret, keeping your information secret. So that's a key objective with computer security. I store a file on my laptop that file as the exam answers for this course. I don't want students to be able to access that. I want to ensure that that information is confidential. I transmit that file to the secretary so she can print the exam. And again, I don't want students to be able to intercept that transmission through a network and be able to access that information. I want to keep that information secret. So that's a key objective of our security techniques in computer and network security, confidentiality. Integrity covers several things but integrity is making sure that the information that we access hasn't been modified. It maintains its integrity. That is, when I send a message from one point to another, I want to make sure that the message received at the destination is the same as what was sent. Nothing's been modified along the way and we'll give examples of that and what can go wrong if we don't have integrity. But also it covers integrity of the users. So make sure that it's the right person accessing the information. So we use techniques to authenticate users. So authentication or authenticity often goes with integrity of information. And availability is a slightly different one, especially with computer systems today. We want to allow multiple people to access those computer systems and they are core to how businesses operate. We want to make sure that those computer systems are available for the normal purpose. And you probably have heard of denial of service attacks, a DOS attack. The denial of service attack is about attacking the concept of availability. Our aim is to make sure our computer system is available to the normal users. A security attack may be making that computer system unavailable to the normal users. So there's three key concepts that we want to achieve with computer security. Keep our data secret. Make sure that data is not modified. Make sure that the users accessing the data are as they say they are. And make sure our computer system, our data, our resources are available to the normal users. They're not restricted. Other people will use different names for some of those or add on other concepts or objectives like authenticity and accountability. But we'll focus on those three. What goes wrong if we have a computer system and the security of that system fails? We have a breach of the security. That is we set up a computer system or a network. Someone performs an attack on our system and they compromise the system. I think you can think of many different examples of what can go wrong. Different levels of impact. If we think of an organization like a company, a university that uses computer systems for their business, what can go wrong? What are the different impacts of security breaches? The effectiveness of the operations of that organization may be reduced. That is we, in SIT, we are an educational organization. We have a computer network. We have websites, databases. If there's a security attack, then it may mean that we cannot perform at our full capabilities. That is we cannot provide a... The web server is not provided to the users 24 hours per day, for example, if there's a security attack. Or someone breaks into my laptop and that means that I have to spend some time rewriting the exam. Or no longer working at the full effectiveness in that case. That's usually an inconvenience. So that's an inconvenience to me if someone gets into my laptop and gets a copy of the exam before the exam takes place, because now I need to rewrite a new exam. So that's one impact. Another impact may be financial loss. We lose money. Because our operations are reduced, or maybe someone gets access to confidential information and that costs us money in our business. They get trade secrets that allow them to develop something in advance of us and sell a product before we can. So we can lose money because of security breaches. We may have damage to assets. Assets may be physical assets, hardware, software, data. So we may have physical damage to equipment because of a security attack. One of those, an example you may have heard of over the last two or three years, was there was an attack on the nuclear power plants in Iran where the attackers inserted some malicious software eventually into the devices that control some of the machinery and the nuclear power plants. So there's some machinery that operates and eventually they got software in there that made the machinery operate outside of its bounds. Such that it failed eventually or it didn't work correctly. So that was a security attack from the computer system that led to damage of physical assets and may even lead to damage to us, harm to individuals. So there may be minor consequences of security breaches through to extreme consequences. So we need to understand what can be a security breach and try to prevent them. In this course we're not going to cover too much about these issues of what are the consequences. In another course I teach on IT security we talk more about this, but here we're going to focus more about the techniques to defeat or to prevent security breaches. There are different standards and organizations that talk about how to classify the levels of breaches and do risk analysis and look at well what's the impact of if this breach occurs and what's the likelihood of it happening to try and identify ways to fix that. For this course we want to classify what we mean by security and the different techniques that we are going to study. So different organizations have tried to define computer security. We'll introduce very briefly some terms from one organization called ISO and they have defined what's part of the OSI security architecture. And those that took my data communications course may have remembered we mentioned OSI, a seven layer stack or a seven layer reference model. It's the same because network communications come, one part of that is security. So there's a standard and the standard is referred to as ITU-TX800 security architecture. That standard is not of importance to us in this course. What we're going to do is just take some terms, some notation from that standard to set up for the rest of this course. Importantly, so it defines how to address computer and network security. The three things of interest to us in this course is that it talks about security aspects and three things in security aspects, attacks, mechanisms and services. So we'll use the terminology from that standard of the types of attacks, security mechanisms and security services throughout this course. So we'll define them in the next few slides. While we're introducing that terminology, we'll distinguish sometimes between a threat and an attack. So we'll talk about an attack. A threat is something that may potentially go wrong with our computer or network security. An attack is when it actually takes place. Someone tries to perform an attack. So a threat from my laptop is that someone accesses it while it's password unlocked. That's a threat. An attack would be if a student walks up to my laptop and does access it. So potential attack. So we'll talk about attacks, mechanisms and services. First, going through attacks, then services and then finally the mechanisms which the course will go into detail about. A security attack, some action that attempts to compromise the security of information or facilities. In general, in our computer system, we'd like to keep the information secure, the data for example, but also the software, the hardware, the facilities need to be kept secure. So if there's some actions that try to compromise the security of those facilities or information, we call that a security attack. It may not compromise it, but it attempts to. A mechanism is something that we'll use to try to prevent, detect or recover from attacks. The best case would be prevent attacks. I don't want attacks to happen. But sometimes we cannot prevent all attacks. So if we cannot prevent an attack, the next thing we'd like to do is to at least detect that it's happening. If an attack is taking place now and I detect that quickly, then I may be able to recover. Take some action to try and stop the attack once it's started. So we'll talk about mechanisms that are used to prevent, detect and recover from attacks. And in fact that's what our course focuses on. And we'll spend a lot of it, one of the mechanisms being encryption. And together we use a set of security mechanisms to enhance the security of our information or facilities to stop attacks. So we'll define those as security services and we'll list six security services that we'll try to provide. We try to provide security services which use mechanisms to prevent, detect attacks. What types of attacks? Let's classify security attacks, very general attacks. And we'll have a first classification into two types of passive versus active attacks. And within those passive attacks we'll say there are two types of passive attacks called release the message contents and traffic analysis. And four types of active attacks. Masquerade, replay, modification and denial of service. The difference between passive and active will become clearer after we go through those six attacks. So there are six in total. The first two will classify as passive, the last four is active. So let's go through the six, then we'll come back and return what's passive, what's active mean. And these pictures are from the textbook just trying to use to illustrate these six types of attacks. An attacks on network security, that's where the examples are coming from. So the picture is showing that we have a communications facility, a computer network, the blue cloud here. And we have some users that want to communicate using that network. And the users in this case are Bob and Alice. They are the normal users. So for example, Bob wants to send information to Alice. So in the normal case, let's say Bob sends a message, an email to Alice. The first attack is called releasing the message contents. It involves an attacker, in this case Darth, the third user, somehow intercepting the message being sent from Bob to Alice and reading the message contents. That is, the message Bob sends to Alice is a love letter. Alice is actually married to Darth. Alice and Darth are wife and husband. And Bob sends a love letter to Alice because they're having an affair. And Darth, who somehow intercepts the message sent across the network, gets a copy of that message and reads it and realizes that Alice is having an affair with Bob and does something about that. So that's an attack performed by Darth in obtaining the contents of a message which Bob and Alice didn't want him to find out about. So this is defeating the concept of confidentiality. Bob and Alice want to communicate confidentially. They want to keep things secret when they communicate. But if an attack takes place where Darth can read the message contents, then it's defeated that security concept of confidentiality. The contents of the message are released to people who are not intended to get a copy. How do we stop that? What mechanism could we use such that when Bob sends a message to Alice, even though Darth may be able to listen in on the network, they cannot release the message contents? Encryption. I think you've heard of, you've probably used encryption deliberately because it's used in the background always when you communicate across the internet or many times. So encryption is a key technique or a mechanism that we use to prevent this attack. When Bob sends a message to Alice, he writes the message before he sends it across the network, he encrypts it. And he sends an encrypted form across the network such that even though Darth can access that encrypted message, he can intercept the message, he cannot decrypt it and get the original message back. Whereas Alice can decrypt and get the original message back. So the focus of the first half of this course is on how do we do that encryption? How do we provide confidentiality? How can Darth intercept a message? Those that have studied communication networks with me or in other courses, what can Darth do to actually intercept this message being sent? Let's say Bob is using a laptop and Alice is maybe in another city. How could Darth get a copy of the message sent from Bob to Alice? Again? Yeah, but if they do use the same network or a different network, how could they actually, what? If you were Darth and you want to get a copy of the message sent, what would you do? Capture the packets so you'd use software like TCP dump or Wireshark to record the packets being sent. What would you need to do to capture the packets? Where would you need to be? You need to be somewhere along the path between Bob and Alice. Okay, so the network path, let's say this laptop is Bob's computer, the path includes maybe the Wi-Fi link to the access point and then the cable from the access point downstairs to a switch, then another cable to a router and then multiple cables through internet service providers, eventually to Alice's computer. What Darth would need to do is get somehow physical access to those links in the path so as the message was sent, they could use TCP dump, Wireshark or other software to record a copy of the packet. And if you record a copy of the packets, you can see the contents. Now that could be quite easy, especially if Wi-Fi is being used. That is, I send a message to that wireless access point. We've studied Wi-Fi last semester and we saw, I think from some experiments, that if you send a message to that access point, someone nearby also receives a copy of that signal which contains the message. So it's very easy with Wi-Fi for others to be just nearby and record copies of messages. If you'll assume in any network it is possible for someone to somewhere along the path between source and destination get a copy of the messages being sent. So encryption will become key to prevent such attacks.  So he encrypts the messages, still sending to Alice. The next attack is called traffic analysis. The messages are encrypted. Bob can send to Alice a message. Darth can intercept but cannot read the contents. Let's say they cannot read the contents. But what Darth may do is observe when the messages are sent and how frequently they are sent. And he observes that the message was sent at 2am late one night when Alice said she was somewhere else but she was actually receiving messages from Bob and from that extra information just by observing the messages being sent by analyzing the traffic, Darth may gain useful information about what's going on in the communications. So traffic analysis is not about reading the contents of the messages but looking at the patterns of the communications to gain some information that's useful for the attacker, Darth, in this case. So the useful information may be how frequent Bob is sending messages to Alice and at what times of the day. And he may use that combined with other information to make some assumptions about what's going on. So traffic analysis is possible even if we use encryption. Because usually when we send messages the source address and the destination address are included in the packets, the packet headers, unencrypted. We can't encrypt the addresses because the network needs them to send them across to the right destination computer. For example IP addresses. So traffic analysis is another type of attack where the attacker observes the patterns of communications. How can we stop that? How could Bob and Alice stop or make it difficult for Darth to observe how often they are communicating and at what times of the day they are communicating. Let's say Bob always sends Alice a message at 2am on a Friday night. How could they hide that information from Darth? What they could do is they could send some other fake messages at different times.  Darth intercepts and receives all these fake messages. He cannot read any of them. They're all encrypted. And only one of them is the real message in there so that Darth cannot observe any patterns of communication. So he just sees that they're communicating all the time. He doesn't know that it's actually at 2am Friday that they are communicating. So adding some extra information and maybe adding some randomness to that information can make it much harder for Darth to analyze the traffic. In both of these cases, traffic analysis and releasing the message contents, let's look what if the attacker wasn't there. Imagine that Darth is not there. There was no attack. The normal communications is Bob sends a message to Alice. Alice receives a message. When the attack takes place from Bob and Alice's perspective, the same thing happens. Bob sends a message. Alice receives a message. But also Darth gets a copy of that message. And similar with the traffic analysis, the normal situation, Bob sends a message to Alice. If an attack takes place, the same thing happens from the perspective of Bob and Alice. Bob sends a message. Alice receives a message. Darth also gets a copy. The point is in both of these attacks, from when there's no attack to when there is an attack, from the normal user's perspective, nothing has changed. And that's what we'll call a passive attack. The attack is taking place without any modifications of the normal system resources. And we'll compare that to the next four, which are active attacks. Let's go through them. A masquerade attack. Masquerade means to what? Pretend to be someone else. So this is a simple case. Let's say Bob is the director of SIT, or the director of some organization. Alice is the finance officer. She makes all the payments for your salary and so on. And what Darth, the attacker does, is creates a message saying, please increase Darth's salary by 10,000 baht. So Darth sends a message to Alice saying, please increase the salary of Darth by 10,000 baht. And makes it look like the message came from the director, Bob. And whenever Alice receives a message from the director, she follows the instructions, increases the salary. So this is Darth pretending to be Bob to do something malicious in this case. In this case, to increase his own salary. This is called a masquerade attack in that Alice doesn't know that the message that she gets is from Darth. She thinks it's from Bob. Darth is pretending to be someone else. How can we prevent such an attack? How can we stop this from happening? Alice gets a message, an email, for example. And in that email it says, increase the salary of Darth by 10,000 baht, signed by Bob. At the bottom, it's from Bob. How can we make it easier for Alice not to be fooled by this message? Check the source. If you look at email addresses, there's always a from address and a to address. So if the from is from Darth, she won't believe the email message. But it turns out with email messages it's very easy to set a fake from address. You can set from anything. So if we have a fake from address or source address, then we can't just use that to detect. We could do a double check. What Alice does when she gets a message from supposedly Bob, she sends a message back to Bob saying, are you sure? Maybe she calls him on the phone. Are you sure you want to increase Darth's salary by 10,000 baht? Does that work? Well, if Alice sends a message, maybe he sends an email back to Bob saying, please confirm, do you want to increase Darth's salary? It may work if it goes to Bob, but if Darth can somehow intercept that message, even though it was sent to Bob to intercept it before it gets to him, and then sends back, yes, of course, increase Darth's salary, then it won't work there. The other way we do this in normal situations, not on email, but in handwritten paper documentation, we have a signature, and often we can confirm a signature or we use that as a method of proving who it came from. And in computer networks, we have a similar concept, digital signatures, where we're using encryption techniques to ensure that a message can be signed by someone and the receiver can verify the signature. When they get the message, they can check, using some cryptographic techniques, that this message did indeed come from Bob. It didn't come from someone pretending to be Bob. So we'll talk about digital signatures after the midterm. And this is a rather famous comic from an old newspaper.  There's no mechanisms for authenticating who sent that message. Whenever you receive a message on the Internet, unless you're using specialized techniques, you can't be sure who sent that message. So those specialized techniques use digital signatures, which we'll study. Another active attack. Why are I maybe coming back to active attacks? I said the first two were passive attacks. This masquerade attack is an active attack. Why? Let's assume there was no attack. No attacker. How many messages does Bob send if there was no attack? Well, in a normal situation, Bob doesn't send anything. There'll be no message from Bob to Alice, and Alice would not receive anything. But when there is an attack, Darth sends a message. Alice, the normal user, receives a message that she wouldn't have received if there was no attack. So something has changed when we perform the attacker. It's changed from the perspective of the normal users. So we say that's an active attack, a replay attack. And these have some similarities. Bob sends a message to Alice. The real Bob sends a message to Alice yesterday, say, or maybe last month. Last month, Darth did a good job, and Bob sent a message to Alice saying, please increase the salary of Darth by 10,000 baht. It was a real message. And when that was sent, Darth actually intercepted and got a copy of that message. And then this month, Bob replays that same message. It sends the exact same message. And it was from Bob to Alice. Alice gets a copy, and this month Alice gets another message from Bob saying, please increase Darth's salary by 10,000 baht. And both messages are signed by Bob. So this is where the attacker replays an old message to get some gain. So it involves Bob sending one message to Alice, Alice receiving that normal message, Darth intercepting that normal message, and then later, sending that same message in this case to Alice. It's an active attack in that if there was no attack, Bob sends one message, Alice receives one message. If there is an attack, Bob sends one message, Alice receives two messages. The original one plus the replay. So it's something's changed. That's why we call it an active attack. How can we prevent replay attacks or detect them? That scenario of sending one month later, we can check the time of the message. So when Bob sends the original message, he puts the date inside the message, today's date, signs that message such that when someone receives it, they can verify it's from Bob. And they verify it's from Bob, and it was for today's date. So therefore, if someone tries to replay that message one month later, when they receive it, they will check, ah, this message is one month old, I will ignore it. So we can check the time stamp on that message to try and prevent replay attacks. Modification attack. Bob sends a message to Alice, increase Darth's salary by 10,000 baht. Before it gets to Alice, Darth is on the network, he intercepts that message, and he changes 10,000 to 20,000. And it's still signed by Bob and forwards that modified message onto Alice, increase the message, increase the salary to 20,000 baht. So this is a modification along the way. And the way to stop there is to make sure when there's a digital signature, or when there's something signed, the entire message is signed. Any modification of that message can be detected by the receiver. And again, the techniques will come up after the midterm, how to sign messages. So three main active attacks there, pretend to be someone else, replay a message, or modify a message. Again, this is an active attack because even though Bob and Alice send and receive one message, the message received by Alice is different. Something has been altered. So we call it an active attack. If there was no attack, Bob sends a message, Alice receives that exact message. If there is an attack, Bob sends a message, Alice receives a different message. Something's modified along the way. We say that's an active attack. Last one is denial of service attack. Here it's slightly different. We don't have Alice. We have a server, like a website, a database server that provides an important service for an organization. Normally Bob accesses that server. Normally every day, Bob needs to access the server to do his job. If he doesn't access the server, he can't do his job and the company loses money. So what the attacker does is disrupts access to that server, makes it so that the server is slow to respond or is inaccessible that no one can access it. By, for example, overflowing it with data, overloading the server, such that when a normal user tries to access the server, they cannot. They denied access. So this is the attack system. We want to make computer systems available for the normal users. A denial of service attack is making them unavailable for the normal users. How do we stop this? How do we stop denial of service attacks from taking place? Upgrade the server, get a more powerful server, more powerful network connection into it. Okay, it costs more money and upgrade even more when the attacks increase. It turns out today that it's, it's quite easy to perform such denial of service attacks. Especially when things are not set up well in some networks and if you look over the, in the news every week there's always attacks, denial of service attacks. You hear about anonymous. The group performs attacks on websites or gaming systems where they overload websites or computer networks with traffic such that the normal users cannot access them. So it's very hard to prevent denial of service attacks. So we want to look at the techniques or the mechanisms to prevent and detect those types of attacks. And we'll group those mechanisms together to say that they provide a set of services to our users. So let's list the set of services and there are six that we'll define. Again, there are different definitions of the key security services, but in this course we'll use six security services. And what, once we see those services and the mechanisms will say we'll use security mechanisms like encryption, digital signatures, to implement services and for an organization, those services are used to implement some policy. An organization has a policy, for example, SIT has a policy that a student can only see the grades of their own, the courses they've taken, their own grades. The student cannot see other students' grades. Or a faculty member can only see the grades of the students who they've taught or their advisees. They cannot see any students' grade. They may be security policies for an organization. We would use security services to implement those policies and mechanisms to implement those services. In this course, we're going to focus on the mechanisms. So before we get to them, let's list the key six security services. We'll not look at policies. These are the main security services provided in computer and network security. Authentication, access control, data confidentiality, integrity, non-repudiation and availability. Some are easy. For example, data confidentiality. The service of data confidentiality, we want to keep our data confidential secret. That's the service we often want to provide. If you need to secure a computer system, this is a key service you need to provide to the users. Protect the data from unauthorized disclosure. Make sure that the contents of messages are not released to people who are not allowed to see that message. A key way, a key mechanism to implement confidentiality is encryption. Encrypt the data. Data integrity. Make sure that data that is received is exactly as sent by the authorized entity. That is, nothing's modified along the way. Or nothing's modified at rest. That is, I save a file on my computer. And if someone can access my computer and modify that file without me knowing, that's an attack on the data integrity service. Even if the data is not sent across the network, the data at rest, the integrity may be compromised. A modification attack is an attack on the data integrity service. Where I send a message and someone modifies it along the way, then that would defeat this service. Authentication. Make sure that the entity is communicating as they say they are. This is about the masquerade attack. When you receive a message, make sure that message came from Bob. It didn't come from someone pretending to be Bob. So authentication is a service to prevent such attacks. What else is easy? Availability. Make sure the system, the network, the computer resources are accessible and usable as needed by the normal users. So we have a server. We build that server to support 100 users at the same time. Then we must, the availability service is making sure that that server will remain available to those 100 users. An attack on the availability service, a denial of service attack, would make the server unavailable to those users. The other two. Access control. Prevent unauthorized use of a resource. Prevent users from accessing computer or software resources that they're not allowed to do. Usually that is combined with authentication techniques, but there are slightly different ones that we probably not see in this course, but you may see in the computer network lab and other courses you've used. For example, access control, a firewall. In a computer network, we'll have a device referred to as a firewall which will control who can access servers inside our network and may also control what the users inside our network can access outside the network. That is, it may block you from accessing Facebook or block people from outside of your network from accessing your internal web server. So a firewall provides access control there. And the last one, non-repudiation. To repudiate is really to deny something. To deny something happened. So the non-repudiation service is to make sure that users cannot deny that something's happened in the past. For example, I ask you to submit your assignments by email. So you send me your assignment. It has to be done by the deadline.  And I say, I didn't get the assignment. So what do you do? You send the assignment, you email to me. I actually got it, but I deny I received it. I say, no, I didn't get your assignment, you get an F for this course. What would you do in that case? Yeah, what would you do? What you would do is maybe show someone, me, or someone else that this was the email that was sent. You would show in the ascent folder. But you can fake that easily, so I don't trust you. So what do you do? Well, you need some way to be able to prove that you actually did send that message. That the receiver cannot deny receiving it when they did receive it. So there are techniques similar to a receipt. When you buy something, the proof of purchase is that receipt, that printed receipt that you get. So some token that says, yes, you paid for that. So non-repudiation is about ensuring that people cannot deny that they've done something, that a receiver cannot deny that they've received a message, or a sender cannot deny that they've sent a message. So that is what non-repudiation is about. It's very important with financial transactions. Someone sends money across the internet, they receive that money, then they deny they received it. Or similarly, someone like the assignment submission example. So these are the key six services that we want to provide to our users, or our computer system. We want to be able to authenticate who's who, check that if someone's sending a message that they are, as they say they are, prevent access to resources that are not allowed to access, ensure that the data is kept confidential, no secrets are revealed, ensure the data is not modified along the way, we maintain the integrity, make sure that users cannot deny something's taken place when it actually has, and make sure the system is available to the users. Different computer networks and computer systems may have different focuses on these services. You may not care about all of them, but in general we need mechanisms to provide or implement those six security services. This course is about the mechanisms, really. How to implement data confidentiality, encryption. How to implement authentication or data integrity. One mechanism is digital signatures, and we'll see some other mechanisms. How to implement access control, use a firewall. That's what the security mechanisms are. And we will not talk about many of them, because that's what the next topics will introduce. There are many different security mechanisms available. Some of them are listed here. There's no single security mechanism that provides all services. So we usually build up a service using a combination of mechanisms. But a very important mechanism is encryption, or generally cryptographic techniques, using cryptography. That's what we'll talk about in the next topic. So in siphonment, there is really another word for encryption. Digital signatures, firewall-based access control. There are authentication exchange protocols, which we'll see come up. Traffic padding is like adding in fake messages to prevent traffic analysis. These are some of the techniques or mechanisms available to implement security services. We will focus mainly on encryption, digital signatures, and maybe a little bit on authentication exchanges in this course. And I think that's about all for this topic. This table just lists the connection between some of those security mechanisms in the columns with the security services in the rows. But the services are slightly different than the six-wheeled students. It splits the first one into two, and confidentiality into two as well. But we'll see key mechanisms, encryption, digital signatures, and another one we'll cover a bit is authentication exchanges. That's what we'll cover in this course. Any questions to finish this introduction to security?


So I just attended a hearing on China's supposed support for the U.S.'s adversaries and let me tell you it was so wild. Former Secretary of State Mike Pompeo came up and almost blamed China's diplomacy as the reason why we're almost at war. Liam Panetta openly admitted that some of China's problems are good news for the United States. This is the cost of making enemies with countries that really have no argument with us, and many times Liam Panetta and Mike Pompeo threatened to provoke war in the Taiwan Strait. We should not be this close to the brink of world war. They talked about passing Biden's $14 billion to Israel at a time when tens of thousands of people have died in Palestine and have been murdered due to Israeli violence. We need to stand up and say that the U.S. should not have adversaries, the U.S. shouldn't have enemies. We should work together with other countries for peace and that's why it's so important to say Biden is our enemy, it's why it's so important to say ceasefire now and it's why it's so important to work for peace no matter what the cost is and expose the cost of the U.S. making enemies.


What's up everybody? Jayce here for jazzy's casebricks.com. We just sold out 2020 panini immaculate football two box break picker teams number eight So again, these are two box breaks number seven eight and nine were from the same case and Joe has marked these boxes up So these two are together these would be the first stack and then it looks like we did stack two in the last one Because these are both number threes. So we'll choose which two boxes we use in this break and Then here's the list of customer names that bought in member RMB means that it's part of the random number blocks So those teams have these customers tied into the break. So we get any hits for these four teams. It's gonna go by serial number there So let's choose which two boxes we're gonna use here. So it's either gonna be left or right and Again, I always do it most of us do it here dice roll it if I roll a one or two three It's gonna go to the left side if I roll a four five six is gonna be the right side One two three four five six. We're gonna go with number threes. These would be for the last one number nine Yeah, because I think we're doing two fillers for the For the noir so I would need three and then four because they'd be fortune spots Yeah Alrighty, so there you go. Oh, we do Peter. We have a 3000 square foot shop right off of PCH We're at 1402 Pacifico's Highway Hermos Beach But we are close to the public right now due to due to COVID We want to just be safe for us and our customers, you know couple of us here did Did get the did get COVID so, you know, it just want to be more safe. So Until things clear up, we won't be open. So you can only do curbside pickups if you'd like For orders or you know personal boxes on jaskies.com on Instagram But for the most part, like I said until then we'll be open up soon. Alrighty Are you ready? Good luck guys first one. How about a little to a talk of a loa? That is 13 out of 15. So this is a perfect example Didn't we didn't we have an example of 13 out of 15 or 13 out of 25? So spot 3 who has block 3 shade are what's block 3? There you go. You are yourself a hit There you go block 3 start off with a little caps Next one we got is Jordy Nelson 8 out of 60 Green Bay Packers as going to zane We have utor gross mothos for the Carolina Panthers, which is going to Matt Medlin that is 95 out of 99 We have a nice three-color patch Van Jefferson 90 out of 99 Little eye black patch auto rookie patch auto That is for the Los Angeles Rams and Brian 18 out of 25 another eye black patch auto of Henry rugs for the raiders I'm going to rob a ronkel. There you go. And the last one is a redemption See see who this is guys And we got rookie patch autographs card number one 14 And it is cd lamb For the cowboys going to Patrick Garcia.  So Those are the cowboys All right, there you go first box All right, I think we got a blockchain at the bottom Which is cleat impressions, which is Joe mixon that'll be going to the Cincinnati bangles So another perfect example here that is a bangles rmb, right? Joe makes some place for the bangles in my trip I don't think sorry So that is a digital card. First of all, it's also a redemption for a digital card Which will be going to these Cincinnati bangles, which is part of the rmb. So that'll be going to stanley with spot zero So that is Cincinnati And it is spot zero There you go. All right, let's continue on guys We got Barry Sanders nine out of our sorry, 27 out of 60. I should say Detroit tigers or Detroit Lions. I should say William Clayton with that one We got Cooper cup the standard relic 15 out of 25 for the rams We got patty mahomes relic 12 out of 25 For the chiefs kanda city chiefs That is going to matthew s We have a redemption No way Immaculate trios autographs. Jerry rice larry Fitzgerald randy moss Got a double check to make sure you know randy moss is a viking I mean, he's played for multiple teams. Jerry rice as well could be raiders, but Pretty confident. It's going to be 49ers, arizona cardos and vikings, but Look at that immaculate trios. That is going to be a big randomizer. So If it is 49ers, that would be matt Arizona cardos michael hughes and if it is the vikings, that'll be josh pruce Regardless, so that'll be a triple randomizer right there All right. Wow. Okay We have a on-card autograph clavon chassan for the cat. Sorry jacksonville jaguars And the last one here guys Is a stud running back had a great first year You really did pretty well in the playoffs yesterday 69 to 25 jonathan taylor Little rookie patch autograph two colors as well very nice indianapolis codes going to richard miller. All right, there you go. Very nice All righty guys, and there you go. That was the break.  Now, of course, this is a big randomizer here guys. I mean, that's I mean pretty much All holofamers one holofamer a future holofamer, and I don't think randy moss is is marini moss in already yet. He is right Or should be inducted within the next year or so. I would assume but I think he isn't there And let me just double check with this uh This triple auto. I just want to make sure the players and teams go to the right ones wow There's actually only four cards and we hit one of them. So one of the trios would have been agent petersen berry sanders emet smith Drew log john all the way paid manning all for the broncos, which I would have been cool And then we have jerry rice there if it's jerry randy moss That's 49ers cardinals and minnesota vikings And then there was a rogers breeze brady, which would have been packers sains patrons That's wild All right, so 49ers cardinals vikings So we got 49ers Cardinals and vikings So there we go guys that is the maculatruals redemption And again for the customers that are part of this randomizer It is 49ers, which is matt We have minnesota vikings josh pruce Cardinals mike we use So good luck guys Here's a dice roller. There's the cusp teams Roll it We got ourselves a six and one lucky number seven Lucky number seven. Good luck guys one two three four five six seven Stain with the cardinals after seven times six and a one Cardinals So there you go Larry fits jerald winning the match up between those three After seven times So here you go. Congratulations. Michael Hughes with the cardinals All right, you guys and there you go guys That was a maculat pick your team number eight If you guys want to run it back number nine's on the website Some teams didn't hit some other teams did and it doesn't mean that there still can't be more hits for those teams So we're down nine left. Let's try to get that going. Jasper's case breaks.com


Over the past few months, we've gone in-depth on all of the necessary dietary minerals. Of course, there are various trace minerals as well as obvious ones we haven't covered, but the extent of what we need to be aware of is what the focus has been. Today, I'm going to summarize what foods you can include in your diet practically to minimize supplementation. One of the best ways to gauge your mineral status is with a hair mineral analysis. I made a video on this several months back, so before you jump into supplementing isolating specific minerals, you might want to get that test. Otherwise, you're kind of shooting in the dark and most people miss a few important ones. I do have an affiliate link for evenbetternow.com. I don't really make that much money, guys, but it's better than nothing. So definitely check that out if you haven't gotten one. Guys, it was so little money, I still have the checks sitting on my desk over here. $21.03, so don't by any means feel like you're helping me out by doing that. Now I've separated this into minerals that you are likely deficient in, especially standard American dieters, versus minerals that are likely excessive. That means if you're able to incorporate enough of certain foods into your diet, it would correct those dietary mineral imbalances over a period of months to years. Initially, with any severe deficiency, you should probably be supplementing, and these foods really are to prevent the need to continually supplement. So hypothetically, if you're eating all these foods in adequate amounts, then after you fix the deficiencies with supplements, you don't have to take the supplements anymore. If you guys have watched my past videos, you will know that magnesium, molybdenum, manganese, iodine, zinc, copper, and selenium are inadequate on most diets, while phosphorus is iffy, sodium, potassium, calcium, and iron are almost always excessive. Ironically, the minerals that conventional dietary wisdom, doctors, and the media are telling you you need so much of. Starting with magnesium, chocolate, and coconut milk are two sources that I would say are safe to incorporate into any diet on a frequent basis. And by that, I mean several times per week, and that's really the theme with all of these foods. I'm only recommending foods I would personally consume in the context of my liver damage. And I also mean organic for everything, as conventional foods can have a lot of agrochemicals and negatives.  You can't wolf down two pounds of chocolate. So if you combine these with the transdermal magnesium spray and oral magnesium glycin and supplement, you can ensure you're getting enough of the mineral we need in most abundance. And all that stuff, guys, is available on organsupplements.com for every single one of these. So brown rice has a decent amount of manganese, whole wheat, pasta, beans, pineapple are good. I think brown rice is really something you can have with virtually every meal, beans a few times a week, pineapples a great fruit to have once or twice a week, whole wheat pasta on occasions if you tolerate it, if it's from hard red winter wheat. So you really shouldn't have to supplement manganese with those foods in your diet. That's not the case with molybdenum, however. Certain beans, oats, and barley have a good amount, but those foods are high in certain anti-nutrients and tend to irritate people's stomachs, especially with compromised liver or digestive function. So it tends to be safer just to supplement molybdenum a few times a month and eat foods that agree with you better. Brazil nuts, beans, and oats are all excellent sources of selenium. I think this is another mineral that you shouldn't have to supplement and for good reason. It's very hard on your liver, even more so considering that typical selenium supplements are dosed too high. Iodine, very synergistic with selenium, lean cod, navy beans, and white potatoes have pretty good amounts, and I guess I wouldn't really consume cod too frequently, but it might be one of the lesser evils out of a lot of fish. With all the other halogens, fluoride, chlorine, etc., in our food and water supply, you probably need to supplement iodine anyway. Using iodine as a nasal rinse, hand wash, transdermally, is usually plenty. We have the iodine as well, guys, on organsupplements.com. Zinc might not be as big of an issue, and you can't even make improvements if you wanted to because most of you guys are already eating plenty of meat, lean beef, lean pork, lean chicken. Even oats have a decent amount of zinc. If you do have digestive issues, however, you might want to supplement because it might not be getting absorbed. See if you feel a little bit better. Copper, a bit trickier. You can only eat so much shiitake mushrooms, cashews, and chocolate. Copper can be supplemented if your liver is in good shape, but with high iron levels or any sort of digestive issue, copper should be supplemented in very small amounts. Meat also has plenty of phosphorus. I don't think this ever really has to be supplemented unless a person has an incredible excess of calcium and doesn't eat meat. This is probably the only one I don't even know if supplements exist. I'm sure if you Googled it, it does, but I've never even looked into it. Just not necessary. Onto the minerals you don't really have to alter your diet for. Just by adding salt to your food, you will get plenty of sodium. Potassium is inherent to any food you're eating. Meat, potatoes, even grains all have potassium in it. You'll get plenty through a whole foods diet. Because of dairy and supplements, almost everyone has too much calcium. Maybe if you were carnivore a few years without dairy, you should drink some mineral water, but it's unlikely. Meat is very high in iron, and because of fortified foods, copper deficiency, most people have too much iron stored in their liver in various tissues. In the case of someone with anemia, you'll just want to increase your meat consumption, quality food intake, balance out your diet. Starting off with sulfur, which I didn't put on there, I don't think anyone needs it, and sulfur should really be avoided considering how all of those minerals it's antagonistic against are typical deficiencies. If you're eating a lot of meat, you're going to get plenty of sulfur. In my personal diet, I actually have cookies made with coconut milk, chocolate, and nut butter a few times a week. And that's actually an excellent way to add many minerals to a very tasty food. I alternate between ground rice, potatoes, and beans every week, so that knocks out a lot of other minerals. Plus, eating lean red meat every day with all of my meals certainly gets the zinc and phosphorus. I do buy shiitake mushrooms in bulk once a month or so, and then have them sauteed with my meat for that week. And the only mineral I probably don't get enough of in my diet is iodine, maybe molybdenum. But I use iodine so much for cleaning my face, brushing my teeth, that I'm sure my levels are more than adequate from the transdermal absorption. So thank you guys for joining me. If you have any questions about foods you eat or any more recommendations, please let me know down in the comments below. Again, if you go and watch those videos I made over the past few months on different minerals, you're going to see there's a lot more foods suggested than that. But these are the ones that I basically currently eat now and would eat, just to clarify some stuff. So you guys can go to frank-to-found.com to check out all of my businesses and support me, including organssupplements.com where we have these various mineral supplements. Outside of that guys, please drop a like on the video, leave a comment down below, subscribe so that YouTube can unsubscribe you next week, and be sure to check that notification bell so they don't notify you of my videos. Thanks again guys, and I'll see you for tomorrow.


Tommy here from Orange Systems, and we're going to do a follow-up video here on the DNS filtering and I just wanted to make sure that I cover a few details that We're asked in that previous video when including things I got wrong which I did get a couple things wrong specifically related to Cisco and open DNS Second I wanted to cover just some overall my thoughts on a follow-up and some of the discussion that came from that whole Deep dive or I don't know how deep of a dive it was depending on your opinion, but me Testing all the efficacy of these DNS filtering systems and have a few more thoughts on there and keep the discussion going of course But first if you'd like to learn more about me or my company head over to Lawrence systems calm If you'd like to hire short project there's a hires button right at the top if you want to support this channel in other ways There's affiliate links down below to get you deals and discounts on products and services We talk about on this channel including a link to our patreon if you like become a patreon supporter We also have a swag store where you can get shirts and other items that are for sale and that changes from time to time What's available and what's not so go ahead and check that out frequently and finally our forums If you'd like to have a more in-depth discussion about this video suggestions for new videos or just reach out say hi and talk tech Our forums are a great place for that. All right now back to the content what I got wrong And this was just an oversight on my part and me not taking the time I should have taken to dive deeper into this this is a Cisco MSP counsel for Cisco umbrella What I showed was open DNS now it turns out I was unable to sign up for an account because I had an open DS account it kept bringing me back to there and Cisco because I was an open DNS user long before Cisco had purchased them Cisco reached out had a phone call great conversation and They got me set up here on the proper dashboard so I went ahead and ran the test again against the Cisco system here and Very similarly they have a dashboard much like the folks at DNS filter did and we checked the malware box Newly seen domains, etc. Just like we see here and then we go over here to networks And I set up specifically on my forums. No, that's not my IP address That is the same IP address you've seen in previous one Thank you for all of you that messaged me and we're looking out for me But that's not my office IP. I should say it is an IP address And I use my forum server because just a little bash grip so I SSH into a forum server I registered the forum server with the Cisco System here and here are the results for that so we go over here And once again for the same reasons before I have all the domain names obscured So YouTube doesn't flag me and we have the Cisco umbrella scoring a 59 percent versus 9 percent on the Open DNS now I also threw next DNS in there and I got a million messages for everyone Want me to test their favorite DNS provider? I just don't have I mean I I don't have unlimited time, but I've offered all the code up so you can test your DNS provider against this list But we're gonna get to the validity of that list So there is definitely a different and it was my mistake that I did not use truly Cisco umbrella I was using open DNS and I did verify from people that talked to it Cisco that yes There is a difference in the way the feeds are for open DNS versus Cisco umbrella Which is interesting because you use the same IP address It's not that I even changed what IP address they use you just change and it's also why I chose a different IP address rather than my Office IP I chose before I said it to the forum IP address and ran it from there I Didn't want any mistakes be made or just end up with the same results because of anything in their system That would have pulled that old address now next thing we can talk about my forum post I was really happy that this forum posted You know got a lot of attention and I like because one of the things I had said at the end of the other video This is kind of something I wanted to push through some scientific type review I wanted other people to kind of vet what I did look at my methodology and Improve upon it security is a team sport and we should all be team players in this provided You're on the side of defense now There may be other people watching this so I can't say all of you were Team players and security there may be some other person that's unhappy the fact that more people are teaming up for security But it's kind of in my opinion is that we're all in this together And I was so happy to see not just responses from you know people in my forums, but from literally quad 9 I believe we have two different people who signed up here from DNS filter and just a lot of great discussion on this and that's something it made me really happy was seeing this so Quad 9 also by the way great service in terms of they went all the way into talking about a lot of details And we have Peter here. He's from DNS filter. So this is an overall wonderful response and This has been just I really couldn't be happier with all the response and things like that It shows a commitment from those companies That they care about their product that they want people to use it want people to have a good experience and of course they care a lot about security of it now valid points and Really, I don't know how else to say this other than they're right in some ways that that list of domains I have Yeah, some of the most are old and it's hard finding good lists of malware domains It is literally the job of these security researchers to constantly be looking for the needles in a haystack They run extensive amounts of testing They don't want false positives because well no one wants angry customers calling them and saying well I can't get to the website and I can't get my job done Why do I pay you for there's enough end-user support from an IT management standpoint that we don't need to create more By blocking something valid. So they really try to keep the false positives down They also on the other side are constantly looking for and trying to find out whenever there's some new ransomware ransomware Mailware whatever that thing is that's going to be out there Whatever that latest threat is and angle that someone has on ways of extorting a business out of money Via some type of malware and are they using some type of easy to find command and control server? Are they embedding it in something else etc? So there's a real challenge in finding these and I still one thing I was hoping but didn't come from any of this was someone posting Hey, Tom. Here's a better feed. That was actually a little bit back on my head Hoping to find something better than that, but it didn't happen So I do see their point that some of these I had to remove for false positive versus quad 9 not having a business use case Just being a as they set up there a complete non-profit Organization that also has no logging information that just wants to sinkhole bad domains and Pretty simple service. So my overall on this which one should you use because that discussion, you know Was burning on and still going on in my forums comes down to a couple things one for home users Quad 9 very aggressive but works great also the fact that they don't have any logging or dashboards if you're into privacy Which hey privacy matters quite a bit makes a lot of sense and quad 9 is a great choice Next which one should you use for your business? Well, that's tricky quad 9 Testing it myself. I didn't find the internet broke when I used it here at her office or when I set it up at home My internet experience was much the same good. So using quad 9 from a business or a Home user standpoint both worked well, but why would you need logging? What about these other companies? Well, as I said scope of this was specifically filtering out malware not such things as gambling sites or People who are spend their day at work job hunting and then you need some type of filtering to apply to a specific group or department in your business To try to keep them from going to sites. You don't want them to second logging Quad 9 although I really like them the logging the reason you need it very frequently is what if what if you had a system? That's just banging away at one of those bad domains. You see it making calls and it's getting sinkhole. That's great but Why is it making all those calls as referred to as an indicator of compromise and once you have an indicator of compromising your network That should trigger an investigation so quad 9 by not providing any type of threat intelligence logging back to you kind of Does not have that piece of information of why your system is making all these calls By the way if that particular malware has a list of sites and maybe one of those was not blocked And it slowly goes through a methodically goes things or by some weird happenstance the URL That's going through goes from being sinkhole to white listed later Well, now you have a problem where it finally got out and did the thing and you didn't have any Notifications that it was doing that so once you start getting into this. Yes, this is going to be complicated now two last things I'm going to address is like piehole and pf blocker one thing about pf blocker and piehole They both use very common lists and those lists once again comes back to our threat intelligence problem of finding good Quality lists and the sands one I literally pulled from pf blocker. I don't have a use piehole in a long time But I know I believe I should say that it's still pulling from some of the same list and most of the list because the way the list Are formatted should be cross compatible to put one list or the other in now You're going to get a slightly different experience with those because now you're doing it at the level Locally as before it leaves and goes out to an external DNS resolver So yeah, there's a really good chance of using those that you'll have that logging that you're looking for if You're using pf since if you're using it in those particular scenarios So those are a couple of things to think about and of course those were Questions asked is can you run this against piehole and challenges? I mean it it it comes down to what list you're using and feed you're using and then if you pad that because defense in depth You want the piehole list compared to the pf blocker list or you take the pf blocker list And then you think about the resolver that's going out behind it And you know you can kind of see where this gets complicated and you should have more than just this This is all kind of basic sinkhole filtering not in-depth filtering So these are my follow-up thoughts one I wanted to cover and clear up that I got the Cisco one wrong that there was a better score When it was run against the actual Cisco umbrella not open DNS to I'm disappointed and not in anyone just in the fact that it's so hard Disappointing maybe it's not the right word just I don't know Realizing the challenge and maybe hopefully some of you realize the challenge at any threat researcher at any of these companies face trying to get good threat intelligence It's a grueling I mean there's a people have a passion for doing it, but you know digging into this is not easy There's not this magic list Building these threat intelligence things as hard and of course as we see in the internet frequently Something gets through something gets missed and these guys are working their butts off not to miss something But it still happens, but I did achieve the goal of getting a conversation started about this Having a more open discussion getting amazing feedback from the people at these companies so we can all learn more about their product and Overall, I think this was a success in terms of science testing and things like that And I guess my at least my methodology didn't get too many holes poked in it The last little thing is I will comment on Is there was a reddit post as well here and it was just reiterating because someone asked me if I'd seen the reddit post Actually, I hadn't until today And I just didn't notice it and I was like oh cool And they go back and forth in more discussion on this particular topic and talking about the issues with some of the things on there So it's still an interesting discussion I want people to be ever-villageant in their fight against malware like I said before it's all a team sport We're all hopefully on the same team everyone watching this maybe a few of you aren't like I said But for the most part, I believe most of you watching this are on the same team You want better threat protection for yourself. You want better threat protection for your clients No one really wants to see anyone getting hacked But that's what this follow-ups about is just keeping your eyes open and once again This is just one little piece of the security stack. There's so much more to it You have layers of you know, whether or not you have to run antivirus other types of web or content filtering especially for particularly lockdown environments and So much more user training being one of the big ones spam filtering because most things come in through spam I will probably expand to be doing a list of you know Some of the other things that we do in talking about how you build out your threat stack and how you monitor for things and That'll be a future video. I do plan on doing But it's also ever-changing. I've talked about it before but you'll find that it's Keeping up with it. It's a challenge. It's something we do all the time is something We're always working to be better at and that's also why I throw these videos out there So I love hearing back from you and I love all this participation in the forums so we can all work together to make you know Security better. All right, thanks And thank you for making it to the end of the video if you like this video Please give it a thumbs up if you'd like to see more content from the channel hit the subscribe button and hit the bell icon if you like YouTube to notify you when new videos come out if you'd like to hire us head over to Lawrence systems calm fill out our contact page and let us know what we can help you with and what projects you'd like us to Work together on if you want to carry on the discussion head over to forums not Lawrence systems calm Or we can carry on the discussion about this video other videos or other tech topics in general even suggestions for new videos They're accepted right there on our forums, which are free Also, if you like to help the channel in other ways head over to our affiliate page We have a lot of great tech offers for you and once again, thanks for watching and see you next time


When the owner of Brady's Commerce, a metal recycling company, realized that used tires and other rubber residues are heavy polluter of the environment in Kosovo. He started exploring how these rubber products can be recycled. With a micro small and medium enterprises grant, he was able to build capacities to process used tires and rubber residues into rubber, granulate and powder, which can be used in new products and materials produced for the construction sector. LTG Plast is a plastic processing company producing packages for hygiene, food and pharmaceutical products. Through the financial support of the MSME grants program, LTG Plast was able to purchase a new molding machine that is able to efficiently use recycled plastic material. Another environmental friendly Kosovo enterprise is SCOMPA, a producer of plastic garbage bags. With the MSME grant SCOMPA were able to introduce a new production line for producing biodegradable garbage bags with draw strings that can be fully degraded back into their natural elements within 36 months. These companies will continue to invest in new technology and staff to constantly improve the quality of their products and minimize the environmental impact and ecological footprint of their business activities.


Welcome to All Hands Update, I'm Petty Officer Ashley Hedrick with your headlines from around the fleet. The President of the Board of Inspection and Survey, or INSERVE, rolled out major changes to the frequency and grading method of the INSERVE program. Under the old program, inspections were conducted every five years, now ships will be inspected about every 30 months. The changes were implemented to improve the readiness of Navy ships and crews, and to provide Navy and congressional leaders with an accurate reflection of that readiness. USS Russell departed Joint Base Pearl Harbor Hickam January 3rd for the final time. The crew of the Russell is scheduled to swap hulls with the crew of the guided missile destroyer USS Halsey later this month. Russell's new home port will be San Diego. You can read more about these stories at navy.mil. From All Hands Update, thanks for watching.