In this section of the course,
we'll focus on the tools and techniques
that enabled us to perform attacks on specialized systems.
Specialized systems refers
to non-traditional computing environments,
such as industrial control systems,
technologies involving near-field communication, or NFC.
This also includes things like
artificial intelligence systems.
These systems often operate under different assumptions
for security, which can lead
to unique vulnerabilities not present
in traditional IT environments.
The domain this section will be centered
around is Domain 4, Attacks and Exploits.
Objective 4.9 will be our main focus in this section,
which states that we must be able
to explain common attacks against specialized systems.
First, we'll start with Mobile Device Attacks,
exploring various vulnerabilities in mobile platforms
such as iOS and Android, including information disclosure,
permission abuse, jailbreaking, and routine.
Next Tools for Mobile Device Attacks will be discussed,
where we'll introduce you to tools used
for exploiting mobile devices such as Frida or Drozer.
Bluetooth Attacks will be covered next,
focusing on vulnerabilities within the Bluetooth protocol,
which can allow bad actors to do things such
as bluejacking and use tools like BlueCrack.
After that, we'll discuss different NFC Attacks, as well
as show you a quick demo providing practical experience
on exploiting NFC technology.
After that, we'll discuss RFID attacks,
where we will explain
and demonstrate how RFID technology can be exploited.
After that, we'll hop into AI Attacks,
a growing focus in every security professional's radar
since its most recent step into the limelight.
We'll be focused on vulnerability specific
to artificial intelligence systems,
including things like prompt injection
and model manipulation.
Operational Technology or OT will be introduced next,
outlining the security challenges in ICS and SCADA systems
and other forms of Operational Technology,
which are critical to many infrastructures for today.
After that, we will have a lesson specifically
on OT Attacks, where we'll dive into the vulnerabilities
and attack vectors in operational technology,
focusing on the disruption of industrial processes
and theft of data by using methods
such as controller area network, or CAN bus attacks,
as well as my bus attacks.
And to wrap things up,
we'll have a lesson on Testing OT systems
that will explore their methodologies and tools used
to assess the security posture of OT system.
We'll discuss why standard penetration tools like Wireshark
or TCPdump may not be suitable for OT system,
which often use different protocols
and highlight the specialized tools
and techniques required for this type of testing.
Finally, we'll take a short quiz to see
what you learn do on this section of the course
and review each of those quiz questions to fully ensure
that you can explain why each answer was right.
So if you're ready to explore the unique challenges
and vulnerabilities of specialized systems,
let's begin this section of the course.