Mikko Hypponen: Fighting viruses, defending the net

266,968 views ・ 2011-07-20

TED


Dvaput kliknite na engleske titlove ispod za reprodukciju videozapisa.

Prevoditelj: Ivan Kesegić Recezent: Katarina Smetko
00:15
I love the Internet.
0
15260
3000
Ja volim internet.
00:18
It's true.
1
18260
2000
Zaista.
00:20
Think about everything it has brought us.
2
20260
2000
Razmislite o svemu što nam je donio.
00:22
Think about all the services we use,
3
22260
3000
Razmislite kolike usluge koristimo,
00:25
all the connectivity,
4
25260
2000
kako smo povezani,
00:27
all the entertainment,
5
27260
2000
kako se zabavljamo,
00:29
all the business, all the commerce.
6
29260
3000
koliko se poslova i trgovine na internetu obavi.
00:32
And it's happening during our lifetimes.
7
32260
3000
A sve to se događa tijekom našeg životnog vijeka.
00:35
I'm pretty sure that one day
8
35260
3000
Siguran sam da će jednog dana,
00:38
we'll be writing history books
9
38260
2000
stoljećima nakon nas,
00:40
hundreds of years from now. This time
10
40260
3000
o ovome pisati u povijesnim knjigama.
00:43
our generation will be remembered
11
43260
3000
Naša generacija bit će upamćena
00:46
as the generation that got online,
12
46260
3000
kao generacija koja je krenula online,
00:49
the generation
13
49260
2000
generacija
00:51
that built something really and truly global.
14
51260
3000
koja je stvorila nešto zaista globalno.
00:54
But yes, it's also true
15
54260
3000
No, također je istina
00:57
that the Internet has problems, very serious problems,
16
57260
3000
i da internet ima problema, vrlo ozbiljnih problema,
01:00
problems with security
17
60260
3000
sigurnosnih problema
01:03
and problems with privacy.
18
63260
3000
te problema sa zaštitom privatnosti.
01:06
I've spent my career
19
66260
2000
Proveo sam čitav svoj radni vijek
01:08
fighting these problems.
20
68260
3000
boreći se s tim problemima.
01:11
So let me show you something.
21
71260
3000
Pokazao bih vam nešto.
01:15
This here
22
75260
2000
Ovo ovdje
01:17
is Brain.
23
77260
2000
je Brain (mozak).
01:19
This is a floppy disk
24
79260
2000
Ovo je disketa
01:21
-- five and a quarter-inch floppy disk
25
81260
2000
-- 5¼-inčna disketa
01:23
infected by Brain.A.
26
83260
2000
zaražena virusom Brain.A.
01:25
It's the first virus we ever found
27
85260
2000
To je prvi ikad pronađeni virus
01:27
for PC computers.
28
87260
2000
za osobna računala.
01:30
And we actually know
29
90260
2000
Znamo čak
01:32
where Brain came from.
30
92260
2000
i odakle je Brain stigao.
01:34
We know because it says so
31
94260
2000
Znamo jer to piše
01:36
inside the code.
32
96260
2000
unutar koda.
01:38
Let's take a look.
33
98260
3000
Pogledajmo.
01:45
All right.
34
105260
3000
U redu.
01:48
That's the boot sector of an infected floppy,
35
108260
3000
Ovo je početni sektor zaražene diskete
01:51
and if we take a closer look inside,
36
111260
3000
pa ako pogledamo pažljivije,
01:54
we'll see that right there,
37
114260
2000
vidjet ćemo da upravo ovdje
01:56
it says, "Welcome to the dungeon."
38
116260
4000
piše: "Dobrodošli u tamnicu."
02:00
And then it continues,
39
120260
2000
A u nastavku,
02:02
saying, 1986, Basit and Amjad.
40
122260
3000
1986., Basit i Amjad.
02:05
And Basit and Amjad are first names,
41
125260
3000
Basit i Amjad su imena,
02:08
Pakistani first names.
42
128260
2000
pakistanska imena.
02:10
In fact, there's a phone number and an address in Pakistan.
43
130260
3000
Zapravo, ovdje su i telefonski broj i adresa u Pakistanu.
02:13
(Laughter)
44
133260
5000
(Smijeh)
02:18
Now, 1986.
45
138260
3000
Dakle, 1986. godine.
02:21
Now it's 2011.
46
141260
2000
A sada je 2011.
02:23
That's 25 years ago.
47
143260
2000
To je bilo prije 25 godina.
02:25
The PC virus problem is 25 years old now.
48
145260
4000
Problem s virusima za PC traje već 25 godina.
02:29
So half a year ago,
49
149260
2000
Stoga sam prije pola godine
02:31
I decided to go to Pakistan myself.
50
151260
3000
i sam odlučio otići u Pakistan.
02:34
So let's see, here's a couple of photos I took while I was in Pakistan.
51
154260
3000
Ovdje vidite nekoliko fotografija koje sam ondje snimio.
02:37
This is from the city of Lahore,
52
157260
2000
Ovo je grad Lahore,
02:39
which is around 300 kilometers south
53
159260
2000
oko 300 km južno
02:41
from Abbottabad, where Bin Laden was caught.
54
161260
3000
od Abbottabada, gdje je uhvaćen Bin Laden.
02:44
Here's a typical street view.
55
164260
3000
Ovo je tipičan prizor s ulice.
02:47
And here's the street or road leading to this building,
56
167260
3000
Ovdje vidimo ulicu i cestu koje vode do ove zgrade,
02:50
which is 730 Nizam block at Allama Iqbal Town.
57
170260
4000
na adresi Nizam blok 730 u Allama Iqbalu.
02:54
And I knocked on the door.
58
174260
2000
Pokucao sam na vrata.
02:56
(Laughter)
59
176260
2000
(Smijeh)
02:58
You want to guess who opened the door?
60
178260
2000
Hoćete pogoditi tko ih je otvorio?
03:00
Basit and Amjad; they are still there.
61
180260
2000
Basit i Amjad. Oni su još uvijek ondje.
03:02
(Laughter)
62
182260
2000
(Smijeh)
03:04
(Applause)
63
184260
4000
(Pljesak)
03:08
So here standing up is Basit.
64
188260
3000
Čovjek koji stoji je Basit.
03:11
Sitting down is his brother Amjad.
65
191260
3000
Njegov brat Amjad sjedi.
03:14
These are the guys who wrote the first PC virus.
66
194260
3000
To su momci koji su napisali prvi virus za PC.
03:17
Now of course, we had a very interesting discussion.
67
197260
3000
Naravno, uslijedila je vrlo zanimljiva rasprava.
03:20
I asked them why.
68
200260
2000
Upitao sam ih zašto.
03:22
I asked them how they feel about what they started.
69
202260
3000
Pitao sam ih za njihovo mišljenje o tome što su započeli.
03:25
And I got some sort of satisfaction
70
205260
3000
A osjetio sam i određeno zadovoljstvo
03:28
from learning that both Basit and Amjad
71
208260
3000
kad sam saznao da su i Basitu i Amjadu
03:31
had had their computers infected dozens of times
72
211260
3000
tijekom godina računala bila zaražena desecima puta
03:34
by completely unrelated other viruses
73
214260
2000
virusima s kojima njih dvojica
03:36
over these years.
74
216260
2000
nisu imali nikakve veze.
03:38
So there is some sort of justice
75
218260
2000
Stoga ipak postoji neka pravda
03:40
in the world after all.
76
220260
3000
na ovome svijetu.
03:44
Now, the viruses that we used to see
77
224260
2000
Virusi koje smo viđali
03:46
in the 1980s and 1990s
78
226260
2000
u 80-ima i 90-ima
03:48
obviously are not a problem any more.
79
228260
3000
očito više nisu problem.
03:51
So let me just show you a couple of examples
80
231260
2000
Pokazao bih vam nekoliko primjera
03:53
of what they used to look like.
81
233260
2000
kako su prije izgledali.
03:55
What I'm running here
82
235260
2000
Ovdje imam sustav
03:57
is a system that enables me
83
237260
2000
koji mi omogućuje
03:59
to run age-old programs on a modern computer.
84
239260
3000
pokretanje starih programa na modernom računalu.
04:02
So let me just mount some drives. Go over there.
85
242260
3000
Samo da podignem neke pogone.
04:05
What we have here is a list of old viruses.
86
245260
3000
Ovo je popis starih virusa.
04:08
So let me just run some viruses on my computer.
87
248260
3000
Pokrenut ću ih nekoliko na svojem računalu.
04:11
For example,
88
251260
2000
Primjerice,
04:13
let's go with the Centipede virus first.
89
253260
2000
počnimo sa virusom Centipede (stonoga).
04:15
And you can see at the top of the screen,
90
255260
2000
Pri vrhu zaslona možete vidjeti
04:17
there's a centipede scrolling across your computer
91
257260
2000
stonogu koja se kreće po vašem računalu
04:19
when you get infected by this one.
92
259260
2000
ako se zarazite ovim virusom.
04:21
You know that you're infected
93
261260
2000
Znate da ste se zarazili
04:23
because it actually shows up.
94
263260
2000
jer se nešto pojavi na zaslonu.
04:25
Here's another one. This is the virus called Crash,
95
265260
3000
Ovo je drugi primjer. Virus zvan Crash (pad sustava),
04:28
invented in Russia in 1992.
96
268260
2000
stvoren 1992. u Rusiji.
04:30
Let me show you one which actually makes some sound.
97
270260
3000
Pokazat ću vam jedan koji čak i proizvodi zvuk.
04:34
(Siren noise)
98
274260
6000
(Zvuk sirene)
04:40
And the last example,
99
280260
2000
I posljednji primjer,
04:42
guess what the Walker virus does?
100
282260
2000
pogodite što radi virus Walker (šetač).
04:44
Yes, there's a guy walking across your screen
101
284260
2000
Da, prikazuje čovjeka koji hoda po zaslonu
04:46
once you get infected.
102
286260
2000
kad se zarazite ovim virusom.
04:48
So it used to be fairly easy to know
103
288260
3000
Prije je bilo relativno jednostavno znati
04:51
that you're infected by a virus,
104
291260
3000
da ste se zarazili virusom,
04:54
when the viruses were written by hobbyists
105
294260
2000
jer su viruse pisali hobisti
04:56
and teenagers.
106
296260
2000
i tinejdžeri.
04:58
Today, they are no longer being written
107
298260
2000
Danas, viruse više ne pišu
05:00
by hobbyists and teenagers.
108
300260
2000
hobisti i tinejdžeri.
05:02
Today, viruses are a global problem.
109
302260
3000
Danas su virusi svjetski problem.
05:05
What we have here in the background
110
305260
2000
Ovdje u pozadini možete vidjeti
05:07
is an example of our systems that we run in our labs,
111
307260
3000
primjer sustava u našim laboratorijima
05:10
where we track virus infections worldwide.
112
310260
2000
gdje pratimo virusne infekcije na svjetskoj razini.
05:12
So we can actually see in real time
113
312260
2000
Tako možemo istog trenutka vidjeti
05:14
that we've just blocked viruses in Sweden and Taiwan
114
314260
3000
da smo upravo blokirali neke viruse u Švedskoj i Tajvanu,
05:17
and Russia and elsewhere.
115
317260
2000
Rusiji i na drugim mjestima.
05:19
In fact, if I just connect back to our lab systems
116
319260
3000
Zapravo, ako se spojim s našim laboratorijskim sustavom
05:22
through the Web,
117
322260
2000
preko interneta,
05:24
we can see in real time
118
324260
2000
možemo steći predodžbu
05:26
just some kind of idea of how many viruses,
119
326260
3000
koliko zapravo virusa
05:29
how many new examples of malware we find every single day.
120
329260
3000
i koliko primjeraka malicioznih programa pronalazimo svakog dana.
05:32
Here's the latest virus we've found,
121
332260
2000
Evo posljednjeg virusa koji smo našli,
05:34
in a file called Server.exe.
122
334260
2000
u datoteci pod imenom Server.exe.
05:36
And we found it right over here three seconds ago --
123
336260
3000
Našli smo ga, vidimo, prije tri sekunde --
05:39
the previous one, six seconds ago.
124
339260
2000
a prethodnoga prije šest sekundi.
05:41
And if we just scroll around,
125
341260
3000
Ako bacimo pogled uokolo,
05:44
it's just massive.
126
344260
2000
vidi se koliki je to popis.
05:46
We find tens of thousands, even hundreds of thousands.
127
346260
3000
Pronalazimo na desetke, čak i stotine tisuća virusa.
05:49
And that's the last 20 minutes of malware
128
349260
3000
A to je samo prikaz zadnjih 20 minuta.
05:52
every single day.
129
352260
2000
I tako dan za danom.
05:54
So where are all these coming from then?
130
354260
3000
Odakle, onda, dolaze svi ti virusi?
05:57
Well today, it's the organized criminal gangs
131
357260
4000
Danas organizirane kriminalne skupine
06:01
writing these viruses
132
361260
2000
pišu ove viruse
06:03
because they make money with their viruses.
133
363260
2000
zato što tako zarađuju novac.
06:05
It's gangs like --
134
365260
2000
To su bande poput --
06:07
let's go to GangstaBucks.com.
135
367260
3000
idemo na GangstaBucks.com.
06:10
This is a website operating in Moscow
136
370260
3000
Ovo je web stranica koja se nalazi u Moskvi
06:13
where these guys are buying infected computers.
137
373260
4000
i gdje ti ljudi kupuju zaražena računala.
06:17
So if you are a virus writer
138
377260
2000
Pa ako ste pisac virusa
06:19
and you're capable of infecting Windows computers,
139
379260
2000
i možete zaraziti računala koja imaju Windowse,
06:21
but you don't know what to do with them,
140
381260
2000
ali ne znate što s njima učiniti,
06:23
you can sell those infected computers --
141
383260
2000
možete prodati ta zaražena računala --
06:25
somebody else's computers -- to these guys.
142
385260
2000
tuđa računala -- ovim ljudima.
06:27
And they'll actually pay you money for those computers.
143
387260
4000
I oni će vam zaista platiti za ta računala.
06:31
So how do these guys then monetize
144
391260
3000
Pa kako onda ti ljudi unovče
06:34
those infected computers?
145
394260
2000
sva ta zaražena računala?
06:36
Well there's multiple different ways,
146
396260
2000
Na nekoliko različitih načina,
06:38
such as banking trojans, which will steal money from your online banking accounts
147
398260
3000
npr. bankovnim trojancima, koji kradu novac s vaših online bankovnih računa
06:41
when you do online banking,
148
401260
3000
dok vi koristite internet bankarstvo,
06:44
or keyloggers.
149
404260
3000
ili putem keyloggera.
06:47
Keyloggers silently sit on your computer, hidden from view,
150
407260
4000
Keyloggeri sjede skriveni na vašem računalu
06:51
and they record everything you type.
151
411260
3000
i snimaju sve što tipkate.
06:54
So you're sitting on your computer and you're doing Google searches.
152
414260
3000
Dok vi sjedite za računalom i pretražujete putem Googlea.
06:57
Every single Google search you type
153
417260
2000
Svaka pretraga koju unesete na Googleu
06:59
is saved and sent to the criminals.
154
419260
3000
sačuvana je i šalje se kriminalcima.
07:02
Every single email you write is saved and sent to the criminals.
155
422260
3000
Svaki e-mail koji napišete sačuvan je i šalje se kriminalcima.
07:05
Same thing with every single password and so on.
156
425260
4000
Isto je i sa svim zaporkama i slično.
07:09
But the thing that they're actually looking for most
157
429260
2000
Ali ono što prvenstveno traže
07:11
are sessions where you go online
158
431260
2000
zbiva se kad odete online
07:13
and do online purchases in any online store.
159
433260
3000
i kupujete online u internetskim trgovinama.
07:16
Because when you do purchases in online stores,
160
436260
2000
Zato što, kad kupujete online,
07:18
you will be typing in your name, the delivery address,
161
438260
3000
unosite svoje ime, adresu za dostavu,
07:21
your credit card number and the credit card security codes.
162
441260
3000
broj kreditne kartice i sigurnosne kodove.
07:24
And here's an example of a file
163
444260
2000
Ovo je primjerak datoteke
07:26
we found from a server a couple of weeks ago.
164
446260
2000
koju smo našli na jednom serveru prije nekoliko tjedana.
07:28
That's the credit card number,
165
448260
2000
Ovo je broj kreditne kartice,
07:30
that's the expiration date, that's the security code,
166
450260
2000
datum isteka valjanosti, sigurnosni kod
07:32
and that's the name of the owner of the card.
167
452260
2000
i ime vlasnika kartice.
07:34
Once you gain access to other people's credit card information,
168
454260
3000
Jednom kad steknete pristup podacima s tuđih kreditnih kartica,
07:37
you can just go online and buy whatever you want
169
457260
2000
možete lako otići online i kupovati što god želite
07:39
with this information.
170
459260
3000
koristeći te informacije.
07:42
And that, obviously, is a problem.
171
462260
2000
A to je, dakako, velik problem.
07:44
We now have a whole underground marketplace
172
464260
4000
Danas postoji čitavo crno tržište
07:48
and business ecosystem
173
468260
3000
i poslovno okruženje
07:51
built around online crime.
174
471260
3000
sagrađeno oko online kriminala.
07:54
One example of how these guys
175
474260
2000
Još jedan primjer kako ti ljudi
07:56
actually are capable of monetizing their operations:
176
476260
3000
mogu unovčiti svoje kriminalne radnje:
07:59
we go and have a look at the pages of INTERPOL
177
479260
3000
idemo na stranice Interpola
08:02
and search for wanted persons.
178
482260
2000
i pogledat ćemo koje su tražene osobe.
08:04
We find guys like Bjorn Sundin, originally from Sweden,
179
484260
3000
Tu je Bjorn Sundin, porijeklom iz Švedske,
08:07
and his partner in crime,
180
487260
2000
i njegov kriminalni partner,
08:09
also listed on the INTERPOL wanted pages,
181
489260
2000
također naveden na Interpolovoj stranici.
08:11
Mr. Shaileshkumar Jain,
182
491260
2000
g. Shaileshkumar Jain,
08:13
a U.S. citizen.
183
493260
2000
građanin SAD-a.
08:15
These guys were running an operation called I.M.U.,
184
495260
3000
Ti su ljudi vodili kriminalnu operaciju zvanu I.M.U.,
08:18
a cybercrime operation through which they netted millions.
185
498260
3000
cybercrime operaciju kroz koju su izvukli milijune.
08:21
They are both right now on the run.
186
501260
3000
Obojica su trenutačno u bijegu.
08:24
Nobody knows where they are.
187
504260
2000
Nitko ne zna gdje se nalaze.
08:26
U.S. officials, just a couple of weeks ago,
188
506260
2000
Američke su vlasti prije nekoliko tjedana
08:28
froze a Swiss bank account
189
508260
2000
zamrznule sredstva na švicarskom bankovnom računu
08:30
belonging to Mr. Jain,
190
510260
2000
koji je pripadao g. Jainu,
08:32
and that bank account had 14.9 million U.S. dollars on it.
191
512260
4000
i na kojem se nalazilo 14,9 milijuna američkih dolara.
08:36
So the amount of money online crime generates
192
516260
3000
Vidimo da su novčani iznosi koje stvara online kriminal
08:39
is significant.
193
519260
2000
zaista značajni.
08:41
And that means that the online criminals
194
521260
2000
To znači da si online kriminalci
08:43
can actually afford to invest into their attacks.
195
523260
3000
mogu priuštiti i ulaganje u svoje napade.
08:46
We know that online criminals
196
526260
2000
Znamo da online kriminalci
08:48
are hiring programmers, hiring testing people,
197
528260
3000
zapošljavaju programere, ljude za testiranje,
08:51
testing their code,
198
531260
2000
ispituju kvalitetu svog koda,
08:53
having back-end systems with SQL databases.
199
533260
3000
imaju infrastrukturu s bazama podataka SQL.
08:56
And they can afford to watch how we work --
200
536260
3000
Oni si mogu priuštiti promatrati nas kako radimo --
08:59
like how security people work --
201
539260
2000
kako radi sigurnosno osoblje --
09:01
and try to work their way around
202
541260
2000
i onda zaobići
09:03
any security precautions we can build.
203
543260
2000
sve sigurnosne mehanizme koje mi postavimo.
09:05
They also use the global nature of Internet
204
545260
3000
Oni koriste globalnost interneta
09:08
to their advantage.
205
548260
2000
u svoju korist.
09:10
I mean, the Internet is international.
206
550260
2000
Internet jest međunarodan.
09:12
That's why we call it the Internet.
207
552260
2000
Zato ga i zovemo internet.
09:14
And if you just go and take a look
208
554260
2000
Pa ako samo pogledate
09:16
at what's happening in the online world,
209
556260
3000
što se to događa u online svijetu,
09:19
here's a video built by Clarified Networks,
210
559260
2000
ovaj video Clarified Networksa
09:21
which illustrates how one single malware family is able to move around the world.
211
561260
4000
pokazuje kako se pojedina skupina malicioznog koda kreće svijetom.
09:25
This operation, believed to be originally from Estonia,
212
565260
3000
Ova operacija, izvorno pokrenuta u Estoniji,
09:28
moves around from one country to another
213
568260
2000
kreće se od države do države,
09:30
as soon as the website is tried to shut down.
214
570260
2000
čim vlasti pokušaju ugasiti web stranicu.
09:32
So you just can't shut these guys down.
215
572260
3000
Dakle, ove se ljude ne može tek tako zaustaviti.
09:35
They will switch from one country to another,
216
575260
2000
Oni će promijeniti državu,
09:37
from one jurisdiction to another --
217
577260
2000
prijeći iz jedne jurisdikcije u drugu --
09:39
moving around the world,
218
579260
2000
kretati se svijetom,
09:41
using the fact that we don't have the capability
219
581260
2000
koristeći činjenicu da mi nemamo mogućnosti
09:43
to globally police operations like this.
220
583260
3000
raditi globalne policijske operacije poput ovih.
09:46
So the Internet is as if
221
586260
2000
Dakle, uporabom interneta
09:48
someone would have given free plane tickets
222
588260
2000
kao da je netko dao besplatne zrakoplovne karte
09:50
to all the online criminals of the world.
223
590260
3000
svim online kriminalcima svijeta.
09:53
Now, criminals who weren't capable of reaching us before
224
593260
3000
Sada smo u dosegu kriminalaca koji
09:56
can reach us.
225
596260
2000
prije nisu mogli do nas.
09:58
So how do you actually go around finding online criminals?
226
598260
3000
Pa kako onda pronalazimo online kriminalce?
10:01
How do you actually track them down?
227
601260
2000
Kako im ulazimo u trag?
10:03
Let me give you an example.
228
603260
2000
Pokazat ću vam na primjeru.
10:05
What we have here is one exploit file.
229
605260
3000
Ovdje imamo jednu inficiranu datoteku.
10:08
Here, I'm looking at the Hex dump of an image file,
230
608260
4000
Ovdje promatramo heksadecimalni sadržaj slikovne datoteke
10:12
which contains an exploit.
231
612260
2000
koja sadrži tu infekciju.
10:14
And that basically means, if you're trying to view this image file on your Windows computer,
232
614260
3000
A to zapravo znači da, ako pokušate otvoriti tu slikovnu datoteku na svojem računalu s Windowsima,
10:17
it actually takes over your computer and runs code.
233
617260
3000
ona bi preuzela vaše računalo i pokrenula neki kod.
10:20
Now, if you'll take a look at this image file --
234
620260
3000
Pogledajmo zato tu slikovnu datoteku --
10:23
well there's the image header,
235
623260
2000
ovo je zaglavlje datoteke,
10:25
and there the actual code of the attack starts.
236
625260
3000
a ovo je kod kojim napad zapravo počinje.
10:28
And that code has been encrypted,
237
628260
2000
A taj je kod kriptiran
10:30
so let's decrypt it.
238
630260
2000
pa ćemo ga dekriptirati.
10:32
It has been encrypted with XOR function 97.
239
632260
2000
Enkriptiran je XOR funkcijom 97.
10:34
You just have to believe me,
240
634260
2000
Morat ćete mi vjerovati na riječ,
10:36
it is, it is.
241
636260
2000
zaista je tako.
10:38
And we can go here
242
638260
2000
Možemo krenuti od ove točke
10:40
and actually start decrypting it.
243
640260
2000
i početi se dekripcijom.
10:42
Well the yellow part of the code is now decrypted.
244
642260
2000
Žuto označen dio koda sada je dekriptiran.
10:44
And I know, it doesn't really look much different from the original.
245
644260
3000
I znam, ne izgleda toliko različito od izvornika.
10:47
But just keep staring at it.
246
647260
2000
Ali samo ga promotrite.
10:49
You'll actually see that down here
247
649260
2000
Vidjet ćete da tu dolje
10:51
you can see a Web address:
248
651260
2000
možemo vidjeti web adresu:
10:53
unionseek.com/d/ioo.exe
249
653260
6000
unionseek.com/d/ioo.exe.
10:59
And when you view this image on your computer
250
659260
2000
Kad učitate ovu sliku na računalu,
11:01
it actually is going to download and run that program.
251
661260
2000
taj će se program snimiti s interneta i pokrenuti.
11:03
And that's a backdoor which will take over your computer.
252
663260
3000
A to je backdoor koji će preuzeti vaše računalo.
11:06
But even more interestingly,
253
666260
2000
No, što je još zanimljivije,
11:08
if we continue decrypting,
254
668260
2000
ako nastavimo dekripciju,
11:10
we'll find this mysterious string,
255
670260
2000
naći ćemo ovaj tajanstveni niz znakova,
11:12
which says O600KO78RUS.
256
672260
5000
gdje stoji O600KO78RUS.
11:17
That code is there underneath the encryption
257
677260
2000
Taj je kod pod enkripcijom
11:19
as some sort of a signature.
258
679260
2000
kao neka vrsta potpisa.
11:21
It's not used for anything.
259
681260
2000
Nema neku posebnu svrhu.
11:23
And I was looking at that, trying to figure out what it means.
260
683260
3000
Ja sam gledao u to, pokušavajući shvatiti značenje.
11:26
So obviously I Googled for it.
261
686260
2000
Naravno, pretražio sam Google.
11:28
I got zero hits; wasn't there.
262
688260
2000
Dobio sam 0 rezultata.
11:30
So I spoke with the guys at the lab.
263
690260
2000
Pa sam popričao s momcima u našem laboratoriju.
11:32
And we have a couple of Russian guys in our labs,
264
692260
2000
Imamo nekoliko Rusa u našim laboratorijima,
11:34
and one of them mentioned,
265
694260
2000
i jedan od njih spomenuo je
11:36
well, it ends in RUS like Russia.
266
696260
2000
kako taj niz završava na RUS, kao Rusija.
11:38
And 78 is the city code
267
698260
2000
A 78 je pozivni broj
11:40
for the city of St. Petersburg.
268
700260
2000
za Sankt Peterburg.
11:42
For example, you can find it from some phone numbers
269
702260
2000
To je predbroj koji možete naći npr. u telefonskim brojevima
11:44
and car license plates and stuff like that.
270
704260
3000
ili automobilskim tablicama i slično.
11:47
So I went looking for contacts in St. Petersburg,
271
707260
3000
Stoga sam kontaktirao neke ljude u Sankt Peterburgu
11:50
and through a long road,
272
710260
2000
i nakon duge potrage,
11:52
we eventually found this one particular website.
273
712260
4000
na kraju smo pronašli određenu web stranicu.
11:56
Here's this Russian guy who's been operating online for a number of years
274
716260
3000
Riječ je o Rusu koji već više godina radi online,
11:59
who runs his own website,
275
719260
2000
ima svoju vlastitu web stranicu
12:01
and he runs a blog under the popular Live Journal.
276
721260
3000
i blog na popularnom Live Journalu.
12:04
And on this blog, he blogs about his life,
277
724260
2000
Na tom blogu piše o svom životu,
12:06
about his life in St. Petersburg --
278
726260
2000
životu u Sankt Peterburgu --
12:08
he's in his early 20s --
279
728260
2000
ima dvadesetak godina --
12:10
about his cat,
280
730260
2000
o svom mačku,
12:12
about his girlfriend.
281
732260
2000
o svojoj djevojci.
12:14
And he drives a very nice car.
282
734260
2000
Vozi vrlo lijep automobil.
12:16
In fact, this guy drives
283
736260
3000
Zapravo, ovaj mladić vozi
12:19
a Mercedes-Benz S600
284
739260
2000
Mercedes-Benz S600
12:21
V12
285
741260
2000
V12
12:23
with a six-liter engine
286
743260
2000
sa 6-litarskim motorom
12:25
with more than 400 horsepower.
287
745260
2000
i s preko 400 konjskih snaga.
12:27
Now that's a nice car for a 20-something year-old kid in St. Petersburg.
288
747260
4000
To je odličan automobil za jednog 20-godišnjaka iz Sankt Peterburga.
12:31
How do I know about this car?
289
751260
2000
Kako znam koji automobil vozi?
12:33
Because he blogged about the car.
290
753260
2000
Pisao je o njemu na svom blogu.
12:35
He actually had a car accident.
291
755260
2000
Imao je prometnu nesreću.
12:37
In downtown St. Petersburg,
292
757260
2000
U središtu Sankt Peterburga,
12:39
he actually crashed his car into another car.
293
759260
2000
sudario sa s drugim vozilom.
12:41
And he put blogged images about the car accident --
294
761260
2000
Zatim je postavio fotografije nesreće na svoj blog --
12:43
that's his Mercedes --
295
763260
2000
ovo je njegov Mercedes --
12:45
right here is the Lada Samara he crashed into.
296
765260
4000
ovo je Lada Samara s kojom se sudario.
12:49
And you can actually see that the license plate of the Samara
297
769260
3000
Ovdje možete vidjeti da tablica na Samari
12:52
ends in 78RUS.
298
772260
2000
završava sa 78RUS.
12:54
And if you actually take a look at the scene picture,
299
774260
3000
Ako pogledate prizor nesreće,
12:57
you can see that the plate of the Mercedes
300
777260
2000
možete vidjeti da pločice njegovog Mercedesa
12:59
is O600KO78RUS.
301
779260
6000
nose oznaku O600KO78RUS.
13:05
Now I'm not a lawyer,
302
785260
2000
Ja nisam odvjetnik,
13:07
but if I would be,
303
787260
2000
ali da jesam,
13:09
this is where I would say, "I rest my case."
304
789260
3000
ovdje bih rekao: "Nemam ništa više za dodati".
13:12
(Laughter)
305
792260
2000
(Smijeh)
13:14
So what happens when online criminals are caught?
306
794260
3000
Što se događa kad online kriminalci budu uhvaćeni?
13:17
Well in most cases it never gets this far.
307
797260
3000
U većini slučajeva nikad ne dođe do toga.
13:20
The vast majority of the online crime cases,
308
800260
2000
U ogromnoj većini slučajeva online kriminala,
13:22
we don't even know which continent the attacks are coming from.
309
802260
3000
mi čak ne znamo ni s kojeg kontinenta dolaze napadi.
13:25
And even if we are able to find online criminals,
310
805260
3000
A kad i uspijemo otkriti online kriminalce,
13:28
quite often there is no outcome.
311
808260
2000
često ne bude nikakvih rezultata.
13:30
The local police don't act, or if they do, there's not enough evidence,
312
810260
3000
Lokalna policija ili ne čini ništa ili nema dovoljno dokaza,
13:33
or for some reason we can't take them down.
313
813260
2000
ili ih zbog nekog drugog razloga ne mogu zatvoriti.
13:35
I wish it would be easier;
314
815260
2000
Volio bih kad bi to bilo lakše,
13:37
unfortunately it isn't.
315
817260
2000
ali, nažalost, nije.
13:39
But things are also changing
316
819260
3000
No, stvari se mijenjaju
13:42
at a very rapid pace.
317
822260
3000
vrlo brzim tempom.
13:45
You've all heard about things like Stuxnet.
318
825260
3000
Svi ste vi čuli za Stuxnet.
13:48
So if you look at what Stuxnet did
319
828260
3000
Ako pogledate što je to Stuxnet zapravo učinio,
13:51
is that it infected these.
320
831260
2000
vidjet ćete da je zarazio ove strojeve.
13:53
That's a Siemens S7-400 PLC,
321
833260
3000
Ovo je Siemens S7-400 PLC,
13:56
programmable logic [controller].
322
836260
2000
programabilni logički kontroler.
13:58
And this is what runs our infrastructure.
323
838260
3000
Ovakvi strojevi pokreću našu infrastrukturu.
14:01
This is what runs everything around us.
324
841260
3000
Oni pokreću sve oko nas.
14:04
PLC's, these small boxes which have no display,
325
844260
3000
PLC-i, te male kutije koje nemaju ni zaslon,
14:07
no keyboard,
326
847260
2000
ni tipkovnicu,
14:09
which are programmed, are put in place, and they do their job.
327
849260
2000
programirani su i postavljeni negdje gdje rade svoj posao.
14:11
For example, the elevators in this building
328
851260
2000
Primjerice, dizalima u ovoj zgradi
14:13
most likely are controlled by one of these.
329
853260
4000
najvjerojatnije upravljaju strojevi poput ovoga.
14:17
And when Stuxnet infects one of these,
330
857260
3000
Kad Stuxnet zarazi jedan takav stroj,
14:20
that's a massive revolution
331
860260
2000
to dovodi do značajne promjene
14:22
on the kinds of risks we have to worry about.
332
862260
3000
u vrstama rizika zbog kojih moramo početi brinuti.
14:25
Because everything around us is being run by these.
333
865260
3000
Zato što što svime oko nas upravljaju ovakvi strojevi.
14:28
I mean, we have critical infrastructure.
334
868260
2000
Hoću reći, mi imamo kritičnu infrastrukturu.
14:30
You go to any factory, any power plant,
335
870260
3000
U koju god tvornicu otišli, koju god elektranu,
14:33
any chemical plant, any food processing plant,
336
873260
2000
koju god tvornicu kemikalija ili pogon za obradu hrane,
14:35
you look around --
337
875260
2000
pogledajte uokolo --
14:37
everything is being run by computers.
338
877260
2000
svime upravljaju računala.
14:39
Everything is being run by computers.
339
879260
2000
Računala upravljaju svime.
14:41
Everything is reliant on these computers working.
340
881260
3000
Sve ovisi o ispravnom funkcioniranju ovih računala.
14:44
We have become very reliant
341
884260
3000
U velikoj se mjeri oslanjamo
14:47
on Internet,
342
887260
2000
na internet,
14:49
on basic things like electricity, obviously,
343
889260
3000
na osnovne stvari poput električne energije,
14:52
on computers working.
344
892260
2000
na računala koja ispravno rade.
14:54
And this really is something
345
894260
2000
A to je nešto
14:56
which creates completely new problems for us.
346
896260
2000
što nam stvara potpuno nove probleme.
14:58
We must have some way
347
898260
2000
Moramo imati neki način
15:00
of continuing to work
348
900260
2000
na koji možemo nastaviti raditi
15:02
even if computers fail.
349
902260
3000
čak i ako računala zakažu.
15:12
(Laughter)
350
912260
2000
(Smijeh)
15:14
(Applause)
351
914260
10000
(Pljesak)
15:24
So preparedness means that we can do stuff
352
924260
3000
Pripravnost znači da možemo nastaviti raditi
15:27
even when the things we take for granted
353
927260
2000
čak i kad stvari koje uzimamo zdravo za gotovo
15:29
aren't there.
354
929260
2000
više ne rade.
15:31
It's actually very basic stuff --
355
931260
2000
Riječ je o zaista osnovim stvarima --
15:33
thinking about continuity, thinking about backups,
356
933260
3000
potrebno je razmišljati o kontinuitetu, sigurnosnim kopijama,
15:36
thinking about the things that actually matter.
357
936260
3000
o stvarima koje su doista bitne.
15:39
Now I told you --
358
939260
3000
Rekao sam vam ranije --
15:42
(Laughter)
359
942260
2000
(Smijeh)
15:44
I love the Internet. I do.
360
944260
4000
da volim internet. Stvarno ga volim.
15:48
Think about all the services we have online.
361
948260
3000
Pomislite na sve usluge koje obavljamo online.
15:51
Think about if they are taken away from you,
362
951260
3000
Razmislite što će biti ako ostanete bez njih,
15:54
if one day you don't actually have them
363
954260
2000
ako im jednog dana više ne budete imali pristup
15:56
for some reason or another.
364
956260
2000
iz kojeg god razloga.
15:58
I see beauty in the future of the Internet,
365
958260
3000
Ja nazirem ljepotu u budućnosti interneta,
16:01
but I'm worried
366
961260
2000
ali sam i zabrinut
16:03
that we might not see that.
367
963260
2000
da je nećemo doživjeti.
16:05
I'm worried that we are running into problems
368
965260
2000
Brinem se da ćemo zbog online kriminala
16:07
because of online crime.
369
967260
2000
završiti u problemima.
16:09
Online crime is the one thing
370
969260
2000
Online kriminal jedna je od stvari
16:11
that might take these things away from us.
371
971260
2000
koje bi nam mogle oduzeti sve ovo.
16:13
(Laughter)
372
973260
3000
(Smijeh)
16:16
I've spent my life
373
976260
2000
Proveo sam svoj život
16:18
defending the Net,
374
978260
3000
u obrani Mreže
16:21
and I do feel that if we don't fight online crime,
375
981260
3000
i vjerujem da, ako se ne suprotstavimo online kriminalu,
16:24
we are running a risk of losing it all.
376
984260
4000
postoji rizik da izgubimo sve to.
16:28
We have to do this globally,
377
988260
3000
Moramo to učiniti na globalnoj razini,
16:31
and we have to do it right now.
378
991260
3000
i moramo to učiniti odmah.
16:34
What we need
379
994260
2000
Ono što nama treba
16:36
is more global, international law enforcement work
380
996260
3000
jest globalno, međunarodno policijsko djelovanje
16:39
to find online criminal gangs --
381
999260
2000
za pronalazak online kriminalnih skupina --
16:41
these organized gangs
382
1001260
2000
organiziranih bandi
16:43
that are making millions out of their attacks.
383
1003260
2000
koje svojim napadima zarađuju milijune.
16:45
That's much more important
384
1005260
2000
To je mnogo važnije
16:47
than running anti-viruses or running firewalls.
385
1007260
2000
od antivirusa i vatrozida.
16:49
What actually matters
386
1009260
2000
Ono što je doista bitno
16:51
is actually finding the people behind these attacks,
387
1011260
2000
jest pronaći osobe koje stoje iza tih napada,
16:53
and even more importantly,
388
1013260
2000
i što je još važnije,
16:55
we have to find the people
389
1015260
2000
moramo naći osobe
16:57
who are about to become
390
1017260
2000
koje će tek postati
16:59
part of this online world of crime,
391
1019260
2000
dijelom svijeta online kriminala,
17:01
but haven't yet done it.
392
1021260
2000
ali još uvijek to nisu.
17:03
We have to find the people with the skills,
393
1023260
3000
Moramo pronaći te ljude koji imaju vještine,
17:06
but without the opportunities
394
1026260
2000
ali nemaju prilike
17:08
and give them the opportunities
395
1028260
2000
te im pružiti priliku
17:10
to use their skills for good.
396
1030260
3000
da iskoriste svoja znanja u korisne svrhe.
17:13
Thank you very much.
397
1033260
2000
Hvala vam najljepša.
17:15
(Applause)
398
1035260
13000
(Pljesak)
O ovoj web stranici

Ova stranica će vas upoznati s YouTube videozapisima koji su korisni za učenje engleskog jezika. Vidjet ćete lekcije engleskog koje vode vrhunski profesori iz cijelog svijeta. Dvaput kliknite na engleske titlove prikazane na svakoj video stranici da biste reproducirali video s tog mjesta. Titlovi se pomiču sinkronizirano s reprodukcijom videozapisa. Ako imate bilo kakvih komentara ili zahtjeva, obratite nam se putem ovog obrasca za kontakt.

https://forms.gle/WvT1wiN1qDtmnspy7