TEDxColumbus
Chris Domas: The 1s and 0s behind cyber warfare
克里斯‧多馬士: 網路戰爭背後的1與0
Filmed:
Readability: 4
1,109,814 views
克里斯．多馬士是一位網路安全研究人員，處理著一個新的前線戰爭，”網路”。這段引人入勝的談話中，他顯示研究人員如何利用模示識別和逆向工程（與連日的熬夜趕工），以了解他們所不知道其目的和內容的一大片二進制代碼。
Chris Domas - Cybersecurity researcher
Chris Domas is an embedded systems engineer and cybersecurity researcher. Full bio
Chris Domas is an embedded systems engineer and cybersecurity researcher. Full bio
Double-click the English transcript below to play the video.
00:12
This is a lot of ones and zeros.
0
770
2262
這裡有很多1和0
00:15
It's what we call binary information.
1
3032
3099
就是所謂的二進制信息。
00:18
This is how computers talk.
2
6131
1442
這是電腦溝通的方式。
00:19
It's how they store information.
3
7573
1929
這是它們收集資料的方式。
00:21
It's how computers think.
4
9502
1626
這是電腦的思考方式。
00:23
It's how computers do
5
11128
1619
這就是電腦的運作
00:24
everything it is that computers do.
6
12747
2382
會做的所有事情。
00:27
I'm a cybersecurity researcher,
7
15129
2047
我是一個網路安全研究員,
00:29
which means my job is to sit
down with this information
down with this information
8
17176
2070
我的工作就是研究該信息,
00:31
and try to make sense of it,
9
19246
1684
和把該信息弄清楚,
00:32
to try to understand what all
the ones and zeroes mean.
the ones and zeroes mean.
10
20930
2753
嘗試去明白1和0的意思。
00:35
Unfortunately for me, we're not just talking
11
23683
1843
不幸的是，我們不只討論
00:37
about the ones and zeros
I have on the screen here.
I have on the screen here.
12
25526
2234
我這裡這個屏幕的1和0。
00:39
We're not just talking about a
few pages of ones and zeros.
few pages of ones and zeros.
13
27760
2683
我們不只是說著幾頁的1和0。
00:42
We're talking about billions and billions
14
30443
2609
我們說的是上億個
00:45
of ones and zeros,
15
33052
1333
1和0，
00:46
more than anyone could possibly comprehend.
16
34385
2641
是超過任何人所能理解的。
00:49
Now, as exciting as that sounds,
17
37026
1859
現在，令人感興趣的是
00:50
when I first started doing cyber —
18
38885
2492
當我剛開始做網路
00:53
(Laughter) —
19
41377
1743
— (歡笑聲) —
00:55
when I first started doing cyber, I wasn't sure
20
43120
2003
當我剛開始做網路, 我並不確定
00:57
that sifting through ones and zeros
21
45123
1473
探討1和0
00:58
was what I wanted to do with the rest of my life,
22
46596
2294
是我一辈子想做的事。
01:00
because in my mind, cyber
23
48890
2020
因為在我的腦海裡，網路是在
01:02
was keeping viruses off of my grandma's computer,
24
50910
3681
防止病毒侵略我奶奶的電腦，
01:06
it was keeping people's Myspace
pages from being hacked,
pages from being hacked,
25
54591
3348
防止Myspace的網頁被駭客入侵，
01:09
and maybe, maybe on my most glorious day,
26
57939
2185
也許在我最輝煌的日子，
01:12
it was keeping someone's credit
card information from being stolen.
card information from being stolen.
27
60124
3751
它防止人們的信用卡資料被盜用。
01:15
Those are important things,
28
63875
1363
這些都是重要的因素，
01:17
but that's not how I wanted to spend my life.
29
65238
2758
但這不是我想度過我人生的方式。
01:19
But after 30 minutes of work
30
67996
1934
但工作三十分鐘之後
01:21
as a defense contractor,
31
69930
1353
作為一名國防承包商，
01:23
I soon found out that my idea of cyber
32
71283
2790
我開始發現我的網路概念
01:26
was a little bit off.
33
74073
1869
有點不對勁。
01:27
In fact, in terms of national security,
34
75942
1945
事實上，在國防眼裡，
01:29
keeping viruses off of my grandma's computer
35
77887
2071
防止病毒侵略我奶奶的電腦
01:31
was surprisingly low on their priority list.
36
79958
3186
在他們的列表裡實在不重要。
01:35
And the reason for that is cyber
37
83144
1301
原因是網路
01:36
is so much bigger than any one of those things.
38
84445
3793
比任何上述事件還來得大。
01:40
Cyber is an integral part of all of our lives,
39
88238
2825
網路是我們生活中不可或缺的東西，
01:43
because computers are an
integral part of all of our lives,
integral part of all of our lives,
40
91063
3060
因為電腦是我們生活中不可或缺的東西
01:46
even if you don't own a computer.
41
94123
1952
就算你沒擁有電腦。
01:48
Computers control everything in your car,
42
96075
2646
電腦掌控你車上的一切，
01:50
from your GPS to your airbags.
43
98721
1880
從全球定位系統到安全氣囊，
01:52
They control your phone.
44
100601
1316
它控制你的電話。
01:53
They're the reason you can call 911
45
101917
1171
你之所以能撥911
01:55
and get someone on the other line.
46
103088
1796
與別人連線都因為它。
01:56
They control our nation's entire infrastructure.
47
104884
2794
它掌控了國家的整個基礎建設,
01:59
They're the reason you have electricity,
48
107678
1676
之所以你能使用電,
02:01
heat, clean water, food.
49
109354
2338
使用熱能、飲用水、食物,
02:03
Computers control our military equipment,
50
111692
1901
電腦也掌控了軍用設備,
02:05
everything from missile silos to satellites
51
113593
1677
從飛彈基地到衛星
02:07
to nuclear defense networks.
52
115270
3914
一直到核能防禦系統,
02:11
All of these things are made possible
53
119184
1989
上述所有事情的運作
02:13
because of computers,
54
121173
1416
都依賴著電腦,
02:14
and therefore because of cyber,
55
122589
1983
所以網路極為重要
02:16
and when something goes wrong,
56
124572
1504
當其中一個環節出錯,
02:18
cyber can make all of these things impossible.
57
126076
3118
網路也能使所有事情無法運作。
02:21
But that's where I step in.
58
129194
1585
但這就是我踏進網路世界的地方。
02:22
A big part of my job is defending all of these things,
59
130779
2940
我工作的主要任務是保護全部的東西,
02:25
keeping them working,
60
133719
1662
確保它們能運作,
02:27
but once in a while, part of my
job is to break one of these things,
job is to break one of these things,
61
135381
2328
但有些時候，我需要破壞其中的一些東西,
02:29
because cyber isn't just about defense,
62
137709
2396
因為網路不光只有保護,
02:32
it's also about offense.
63
140105
2273
它也包括破壞。
02:34
We're entering an age where we talk about
64
142378
1576
我們現在來到了
02:35
cyberweapons.
65
143954
1461
網路武器的時代。
02:37
In fact, so great is the potential for cyber offense
66
145415
3135
事實上，訝異的是網路武器
02:40
that cyber is considered a new domain of warfare.
67
148550
3621
的範疇已經擴大到了戰爭的地步。
02:44
Warfare.
68
152171
1800
戰爭。
02:45
It's not necessarily a bad thing.
69
153971
1929
它不一定是壞事。
02:47
On the one hand, it means we have whole new front
70
155900
2751
在一方面，它意味著我們需要有
02:50
on which we need to defend ourselves,
71
158651
1743
全新的戰線來保護自己，
02:52
but on the other hand,
72
160394
1485
但另一方面，
02:53
it means we have a whole new way to attack,
73
161879
1842
也表示我們有一種全新的攻擊方式，
02:55
a whole new way to stop evil people
74
163721
1859
全新的辦法來阻止邪惡的人
02:57
from doing evil things.
75
165580
2227
做邪惡的事情。
02:59
So let's consider an example of this
76
167807
1811
讓我們用完全理論的例子
03:01
that's completely theoretical.
77
169618
1689
來考慮這一點。
03:03
Suppose a terrorist wants to blow up a building,
78
171307
2258
假設恐怖分子要炸毀一座建築物，
03:05
and he wants to do this again and again
79
173565
2068
他想在未來一次又一次的
03:07
in the future.
80
175633
1451
做到這一點。
03:09
So he doesn't want to be in
that building when it explodes.
that building when it explodes.
81
177084
2840
所以在該建築物爆炸時他並不想在場。
03:11
He's going to use a cell phone
82
179924
1518
他會使用手機
03:13
as a remote detonator.
83
181442
2335
作為遙控引爆。
03:15
Now, it used to be the only way we had
84
183777
1871
以往, 唯一制止
03:17
to stop this terrorist
85
185648
1636
這種恐怖份子,
03:19
was with a hail of bullets and a car chase,
86
187284
2673
便是我們必須槍林彈雨和汽車追逐，
03:21
but that's not necessarily true anymore.
87
189957
2332
但現在這未必需要了。
03:24
We're entering an age where we can stop him
88
192289
1563
我們正在進入這樣的一個時代，
03:25
with the press of a button
89
193852
1110
按一個鈕阻止他
03:26
from 1,000 miles away,
90
194962
2007
從1000英里外，
03:28
because whether he knew it or not,
91
196969
1589
因為無論他知道與否，
03:30
as soon as he decided to use his cell phone,
92
198558
1711
只要他決定用他的手機，
03:32
he stepped into the realm of cyber.
93
200269
3134
他便走進網路的領域。
03:35
A well-crafted cyber attack
could break into his phone,
could break into his phone,
94
203403
3117
一個精心製作的網路攻擊
可以侵略他的手機，
可以侵略他的手機，
03:38
disable the overvoltage protections on his battery,
95
206520
2149
對他的電池禁用過壓保護，
03:40
drastically overload the circuit,
96
208669
1755
大幅度的電路超載，
03:42
cause the battery to overheat, and explode.
97
210424
2357
導致電池過熱和爆炸。
03:44
No more phone, no more detonator,
98
212781
2446
沒有手機，沒有引爆器，
03:47
maybe no more terrorist,
99
215227
1923
也許恐怖分子都沒了，
03:49
all with the press of a button
100
217150
1031
按一個按鈕
03:50
from a thousand miles away.
101
218181
2680
全都是千里之外。
03:52
So how does this work?
102
220861
1751
那麼這是如何運作呢？
03:54
It all comes back to those ones and zeros.
103
222612
2268
這一切都回到那些1和0。
03:56
Binary information makes your phone work,
104
224880
3005
二進制信息使你的手機的運作，
03:59
and used correctly, it can make your phone explode.
105
227885
3584
正確使用它，可以讓你的手機爆炸。
04:03
So when you start to look at
cyber from this perspective,
cyber from this perspective,
106
231469
2472
因此，當你開始從這個角度來看網路，
04:05
spending your life sifting through binary information
107
233941
3163
篩選二進制信息過生活
04:09
starts to seem kind of exciting.
108
237104
2417
開始似乎有點剌激。
04:11
But here's the catch: This is hard,
109
239521
2646
但這裡才是大問題：這是很艱苦的，
04:14
really, really hard,
110
242167
1685
真的，真的很艱苦，
04:15
and here's why.
111
243852
1834
原因如下。
04:17
Think about everything you have on your cell phone.
112
245686
2766
想想你在手機裡擁有的一切。
04:20
You've got the pictures you've taken.
113
248452
1963
你擁有你所拍攝的照片。
04:22
You've got the music you listen to.
114
250415
1786
你擁有你聽的音樂。
04:24
You've got your contacts list,
115
252201
1648
你擁有你的聯絡人清單，
04:25
your email, and probably 500 apps
116
253849
1625
你的電子郵件，大概500個應用程序，
04:27
you've never used in your entire life,
117
255474
3001
你在這一生從來沒有用過，
04:30
and behind all of this is the software, the code,
118
258475
3987
這背後的一切是軟體，代碼，
04:34
that controls your phone,
119
262462
1380
控制你的手機，
04:35
and somewhere, buried inside of that code,
120
263842
2656
在某一處，埋藏裡面的代碼，
04:38
is a tiny piece that controls your battery,
121
266498
2548
是控制你電池的一小片，
04:41
and that's what I'm really after,
122
269046
1871
那就是我真正找的東西，
04:42
but all of this, just a bunch of ones and zeros,
123
270917
3686
但這一切，只是一堆1和0，
04:46
and it's all just mixed together.
124
274603
1531
而這全部都混在一起。
04:48
In cyber, we call this finding a
needle in a stack of needles,
needle in a stack of needles,
125
276134
3545
在網路中，我們稱這是
在一堆針裡找出一支針，
在一堆針裡找出一支針，
04:51
because everything pretty much looks alike.
126
279679
2349
因為所有東西都非常相似。
04:54
I'm looking for one key piece,
127
282028
1732
我在尋找關鍵的一塊，
04:55
but it just blends in with everything else.
128
283760
3234
但它混在其中。
04:58
So let's step back from this theoretical situation
129
286994
2252
讓我們退後一步
05:01
of making a terrorist's phone explode,
130
289246
2344
走出製造恐怖手機爆炸
這類理論的情況，
這類理論的情況，
05:03
and look at something that actually happened to me.
131
291590
2816
看看真實發生在我身上的事。
05:06
Pretty much no matter what I do,
132
294406
1343
幾乎不管我做什麼，
05:07
my job always starts with sitting down
133
295749
1442
我的工作總是坐下來
05:09
with a whole bunch of binary information,
134
297191
2372
從一大堆的二進制信息，
05:11
and I'm always looking for one key piece
135
299563
1727
一直做一些具體的事情
05:13
to do something specific.
136
301290
1987
尋找一個關鍵的部分。
05:15
In this case, I was looking for a very advanced,
137
303277
2077
在這種情況下，我要尋找一種非常先進，
05:17
very high-tech piece of code
138
305354
1518
非常高科技的一行代碼，
05:18
that I knew I could hack,
139
306872
1215
我知道我能破解的代碼，
05:20
but it was somewhere buried
140
308087
1714
但它埋藏在
05:21
inside of a billion ones and zeroes.
141
309801
2026
十億個1和0的內部的某處。
05:23
Unfortunately for me, I didn't know
142
311827
1578
不幸的是，我不知道
05:25
quite what I was looking for.
143
313405
1691
我究竟在找什麼。
05:27
I didn't know quite what it would look like,
144
315096
1196
我不知道它看起來像什麼，
05:28
which makes finding it really, really hard.
145
316292
2918
這使得要發現它真的，真的很辛苦。
05:31
When I have to do that, what I have to do
146
319210
2039
當我這樣做，
05:33
is basically look at various pieces
147
321249
2342
我基本上是要看
05:35
of this binary information,
148
323591
1723
各種二進制信息，
05:37
try to decipher each piece, and see if it might be
149
325314
2202
嘗試破解每一行信息，看看這是否
05:39
what I'm after.
150
327516
1224
是我要找的。
05:40
So after a while, I thought I had found the piece
151
328740
1625
過了一段時間後，我想我已經找到了
05:42
I was looking for.
152
330365
1337
一直在尋找的那一塊。
05:43
I thought maybe this was it.
153
331702
2104
我想這也許是它。
05:45
It seemed to be about right, but I couldn't quite tell.
154
333806
2032
這似乎是對的，但我也不太肯定。
05:47
I couldn't tell what those
ones and zeros represented.
ones and zeros represented.
155
335838
2918
我不知道這些1和0代表什麼。
05:50
So I spent some time trying to put this together,
156
338756
3374
所以我花了一些時間，試圖把它解決，
05:54
but wasn't having a whole lot of luck,
157
342130
1670
但沒運氣，
05:55
and finally I decided,
158
343800
1186
最後我決定，
05:56
I'm going to get through this,
159
344986
1609
我要克服它，
05:58
I'm going to come in on a weekend,
160
346595
1511
我要在一個週末回來，
06:00
and I'm not going to leave
161
348106
1340
我要搞清楚這代表什麼
06:01
until I figure out what this represents.
162
349446
1712
才會離開。
06:03
So that's what I did. I came
in on a Saturday morning,
in on a Saturday morning,
163
351158
2166
我就這樣做。我在一個星期六的早晨，
06:05
and about 10 hours in, I sort of
had all the pieces to the puzzle.
had all the pieces to the puzzle.
164
353324
3645
花約10小時，點滴匯集所有資料。
06:08
I just didn't know how they fit together.
165
356969
1392
我只是不知道它們
是如何結合在一起的。
是如何結合在一起的。
06:10
I didn't know what these ones and zeros meant.
166
358361
2790
我不知道這些1和0的意思。
06:13
At the 15-hour mark,
167
361151
2067
整整歷經15小時，
06:15
I started to get a better picture of what was there,
168
363218
2602
我開始更了解什麼在那裡，
06:17
but I had a creeping suspicion
169
365820
1772
但我心存疑慮
06:19
that what I was looking at
170
367592
1589
我一直在整理的資料
06:21
was not at all related to what I was looking for.
171
369181
2923
實際上與我要找的無關。
06:24
By 20 hours, the pieces started to come together
172
372104
2487
20小時後，進度開始
06:26
very slowly — (Laughter) —
173
374591
3764
非常緩慢 —（笑聲） —
06:30
and I was pretty sure I was going down
174
378355
1266
我敢肯定
06:31
the wrong path at this point,
175
379621
1939
我走錯路，
06:33
but I wasn't going to give up.
176
381560
2251
但我不會放棄。
06:35
After 30 hours in the lab,
177
383811
2834
在實驗室30小時後，
06:38
I figured out exactly what I was looking at,
178
386645
2261
我明白我一直在整理的是什麼，
06:40
and I was right, it wasn't what I was looking for.
179
388906
2818
事實證明，我是對的，這並不是我所期待的。
06:43
I spent 30 hours piecing together
180
391724
1699
我花了30小時拼湊
06:45
the ones and zeros that
formed a picture of a kitten.
formed a picture of a kitten.
181
393423
2722
這些1和0, 形成一張小貓的照片。
06:48
(Laughter)
182
396145
1795
（笑聲）
06:49
I wasted 30 hours of my life searching for this kitten
183
397940
3806
我浪費我生命中30小時尋找這隻小貓,
06:53
that had nothing at all to do
184
401746
1838
跟我試圖
06:55
with what I was trying to accomplish.
185
403584
1987
完成的任務無關。
06:57
So I was frustrated, I was exhausted.
186
405571
3863
我很沮喪，我精疲力竭。
07:01
After 30 hours in the lab, I probably smelled horrible.
187
409434
3226
30小時在實驗室後，
我聞起來可能滿身汗臭。
我聞起來可能滿身汗臭。
07:04
But instead of just going home
188
412660
2230
但我沒有放棄而回家，
07:06
and calling it quits, I took a step back
189
414890
2530
而是後退了一步，
07:09
and asked myself, what went wrong here?
190
417420
2541
問自己，哪裡出了問題呢？
07:11
How could I make such a stupid mistake?
191
419961
2212
我怎麼會犯這樣一個愚蠢的錯誤？
07:14
I'm really pretty good at this.
192
422173
1398
我在這方面很能幹。
07:15
I do this for a living.
193
423571
1319
我靠這個謀生。
07:16
So what happened?
194
424890
2148
到底發生什麼事？
07:19
Well I thought, when you're
looking at information at this level,
looking at information at this level,
195
427038
2775
嗯，我想，當你在這個層面上看信息，
07:21
it's so easy to lose track of what you're doing.
196
429813
2827
是很容易迷失軌跡的。
07:24
It's easy to not see the forest through the trees.
197
432640
1744
當你在樹林之中是不容易見到森林的。
07:26
It's easy to go down the wrong rabbit hole
198
434384
2164
很容易走進錯誤的兔子洞，
07:28
and waste a tremendous amount of time
199
436548
1762
而浪費大量時間
07:30
doing the wrong thing.
200
438310
1820
做著錯誤的事情。
07:32
But I had this epiphany.
201
440130
1600
不過，我有這個頓悟。
07:33
We were looking at the data completely incorrectly
202
441730
2999
我們從第一天開始已經
07:36
since day one.
203
444729
1490
完全不正確地看數據。
07:38
This is how computers think, ones and zeros.
204
446219
2103
電腦就是這樣思考的，1和0。
07:40
It's not how people think,
205
448322
1392
這不是人的思考方式，
07:41
but we've been trying to adapt our minds
206
449714
2314
但我們一直在努力地適應我們的頭腦
07:44
to think more like computers
207
452028
1345
像電腦一樣思考，
07:45
so that we can understand this information.
208
453373
2597
這樣我們就可以理解這些信息。
07:47
Instead of trying to make our minds fit the problem,
209
455970
1950
我們不應該試圖讓頭腦適應問題，
07:49
we should have been making the problem
210
457920
1648
而是應該使問題
07:51
fit our minds,
211
459568
969
符合我們的頭腦,
07:52
because our brains have a tremendous potential
212
460537
2109
因為大腦有着巨大的潛力
07:54
for analyzing huge amounts of information,
213
462646
3086
分析大量的信息，
07:57
just not like this.
214
465732
1297
但不是這樣。
07:59
So what if we could unlock that potential
215
467029
1467
如果我們能夠將這類信息
08:00
just by translating this
216
468496
1527
做正確的翻譯
08:02
to the right kind of information?
217
470023
2848
而發掘潛能呢？
08:04
So with these ideas in mind,
218
472871
1194
抱著這些想法，
08:06
I sprinted out of my basement lab at work
219
474065
1618
我從工作的地下室實驗室
08:07
to my basement lab at home,
220
475683
1307
衝到了我家裡的實驗室,
08:08
which looked pretty much the same.
221
476990
1996
實際上看起來幾乎是一樣。
08:10
The main difference is, at work,
222
478986
1824
主要的區別是，在工作時，
08:12
I'm surrounded by cyber materials,
223
480810
1579
我被網路上的材料包圍，
08:14
and cyber seemed to be the
problem in this situation.
problem in this situation.
224
482389
2605
而這種情況下網路似乎是一個問題。
08:16
At home, I'm surrounded by
everything else I've ever learned.
everything else I've ever learned.
225
484994
3353
在家裡，我卻是被我所學到一切包圍。
08:20
So I poured through every book I could find,
226
488347
1872
所以，我翻遍每一本我能找到的書，
08:22
every idea I'd ever encountered,
227
490219
1332
每一個我曾有過的想法，
08:23
to see how could we translate a problem
228
491551
2146
看看我們如何才能將問題轉域
08:25
from one domain to something completely different?
229
493697
3132
換到完全不同的東西？
08:28
The biggest question was,
230
496829
1394
最大的問題是，
08:30
what do we want to translate it to?
231
498223
1968
我們想將它翻譯成什麼？
08:32
What do our brains do perfectly naturally
232
500191
2112
有什麼是我們的大腦
08:34
that we could exploit?
233
502303
1878
能夠自然的利用？
08:36
My answer was vision.
234
504181
2289
我的答案是視像。
08:38
We have a tremendous capability
to analyze visual information.
to analyze visual information.
235
506470
3149
我們有巨大的能力來分析視覺信息。
08:41
We can combine color gradients, depth cues,
236
509619
2583
我們可以將顏色色層，深度線索，
08:44
all sorts of these different signals
237
512202
1788
這些種種不同的信號到我們周圍的世界
08:45
into one coherent picture of the world around us.
238
513990
2395
成為一個連貫的畫面。
08:48
That's incredible.
239
516385
1407
實在是難以置信。
08:49
So if we could find a way to translate
240
517792
1381
因此，如果我們能找到一種方法
08:51
these binary patterns to visual signals,
241
519173
2186
把這些二進制模式轉換為視覺信號，
08:53
we could really unlock the power of our brains
242
521359
1832
我們才能真正解開我們的大腦功能
08:55
to process this stuff.
243
523191
2710
來處理這些東西。
08:57
So I started looking at the binary information,
244
525901
1843
於是我開始看看這些二進制信息，
08:59
and I asked myself, what do I do
245
527744
1090
我問自己，當我第一次
09:00
when I first encounter something like this?
246
528834
1876
遇到這樣的事情我會怎麼辦？
09:02
And the very first thing I want to do,
247
530710
1623
我想要做的第一件事，
09:04
the very first question I want to answer,
248
532333
1359
我要回答的第一個問題的是,
09:05
is what is this?
249
533692
1278
這是什麼？
09:06
I don't care what it does, how it works.
250
534970
2528
我不在乎它做什麼，它是如何運作。
09:09
All I want to know is, what is this?
251
537498
2479
我所想知道的是，它是什麼？
09:11
And the way I can figure that out
252
539977
1675
我從觀察一部分信號
09:13
is by looking at chunks,
253
541652
1683
便可以明白這一點，
09:15
sequential chunks of binary information,
254
543335
2453
二進制信息中的序列部分，
09:17
and I look at the relationships
between those chunks.
between those chunks.
255
545788
2902
我觀察着那些數據部分之間的關係。
09:20
When I gather up enough of these sequences,
256
548690
1772
當我收集夠這些序，
09:22
I begin to get an idea of exactly
257
550462
2004
我開始得到信息
09:24
what this information must be.
258
552466
2634
意向的頭緒。
09:27
So let's go back to that
259
555100
1184
讓我們回到那個
09:28
blow up the terrorist's phone situation.
260
556284
2090
炸毀恐怖分子電話的情境。
09:30
This is what English text looks like
261
558374
2203
在二進制級別英文文字
09:32
at a binary level.
262
560577
1313
看起來是像這樣。
09:33
This is what your contacts list would look like
263
561890
2326
你的聯絡人清單是像這樣，
09:36
if I were examining it.
264
564216
1560
如果我研究它的話。
09:37
It's really hard to analyze this at this level,
265
565776
2234
這看起來真的很難分析，
09:40
but if we take those same binary chunks
266
568010
2104
但如果我們採取這些相同的
09:42
that I would be trying to find,
267
570114
1182
二進制數據部分，
09:43
and instead translate that
268
571296
1764
而將它
09:45
to a visual representation,
269
573060
1920
翻譯成視像，
09:46
translate those relationships,
270
574980
1797
翻譯這些關係，
09:48
this is what we get.
271
576777
1556
這就是我們能夠得到的東西。
09:50
This is what English text looks like
272
578333
1914
英文文字從視覺抽象的觀點
09:52
from a visual abstraction perspective.
273
580247
2671
看起來便是這樣。
09:54
All of a sudden,
274
582918
1140
突然間，
09:56
it shows us all the same information
275
584058
1435
它向我們展示
09:57
that was in the ones and zeros,
276
585493
1172
所有1和0相同的信息，
09:58
but show us it in an entirely different way,
277
586665
2321
但以一種完全不同的方式，
10:00
a way that we can immediately comprehend.
278
588986
1717
一種我們就可以立刻理解的方式。
10:02
We can instantly see all of the patterns here.
279
590703
2965
我們在這裡可以即時看到所有的模式。
10:05
It takes me seconds to pick out patterns here,
280
593668
2592
我花了幾秒便挑出在這裡的圖案，
10:08
but hours, days, to pick them out
281
596260
2254
但從1和0之間
10:10
in ones and zeros.
282
598514
1320
就要數個小時，數天。
10:11
It takes minutes for anybody to learn
283
599834
1736
這只需要幾分鐘人們便能看到
10:13
what these patterns represent here,
284
601570
1665
這裡代表的這些圖案，
10:15
but years of experience in cyber
285
603235
2247
但要從1和0之間看到
10:17
to learn what those same patterns represent
286
605482
1654
便需要多年的
10:19
in ones and zeros.
287
607136
1586
網路經驗。
10:20
So this piece is caused by
288
608722
1662
這部分是
10:22
lower case letters followed by lower case letters
289
610384
2024
聯絡人清單裡面由小寫字母
10:24
inside of that contact list.
290
612408
1767
後跟著小寫字母所致。
10:26
This is upper case by upper case,
291
614175
1341
這是由大寫跟著大寫，
10:27
upper case by lower case, lower case by upper case.
292
615516
2685
小寫跟著大寫，大寫跟著小寫。
10:30
This is caused by spaces. This
is caused by carriage returns.
is caused by carriage returns.
293
618201
2686
這部分是空格所致。這部分歸位鍵是所致。
10:32
We can go through every little detail
294
620887
1508
這樣, 我們可以在幾秒鐘內
10:34
of the binary information in seconds,
295
622395
2966
剖析二進制信息的每個小細節，
10:37
as opposed to weeks, months, at this level.
296
625361
3534
而不是這個階段的幾個星期，幾個月。
10:40
This is what an image looks like
297
628895
1512
這就是你手機的
10:42
from your cell phone.
298
630407
1876
1和0,
10:44
But this is what it looks like
299
632283
1013
但這是看起來的
10:45
in a visual abstraction.
300
633296
1891
視覺抽象。
10:47
This is what your music looks like,
301
635187
1985
這就是你音樂的樣子，
10:49
but here's its visual abstraction.
302
637172
2203
但這是它的視覺抽象。
10:51
Most importantly for me,
303
639375
1760
對我來說更重要的是，
10:53
this is what the code on your cell phone looks like.
304
641135
3275
這就是你手機上代碼的視覺抽象。
10:56
This is what I'm after in the end,
305
644410
2157
這就是我的目的,
10:58
but this is its visual abstraction.
306
646567
2140
它的視覺抽象。
11:00
If I can find this, I can't make the phone explode.
307
648707
2509
如果我找不到這一點，我便不能讓手機發生爆炸。
11:03
I could spend weeks trying to find this
308
651216
2619
我可以花幾個星期
11:05
in ones and zeros,
309
653835
1177
在這些在1和0上
11:07
but it takes me seconds to pick out
310
655012
1784
但只需要幾秒
11:08
a visual abstraction like this.
311
656796
3304
便能挑出一個視覺的抽象。
11:12
One of those most remarkable parts about all of this
312
660100
2492
在這一切中一個最顯著的收穫
11:14
is it gives us an entirely new way to understand
313
662592
2832
是我們有著一種全新的方式
11:17
new information, stuff that we haven't seen before.
314
665424
3239
來了解新的信息，以前從未見過的方式。
11:20
So I know what English looks like at a binary level,
315
668663
2504
現在我知道在二進制層次的英文是什麼模樣，
11:23
and I know what its visual abstraction looks like,
316
671167
2110
而我知道它的視覺抽象模樣，
11:25
but I've never seen Russian binary in my entire life.
317
673277
3315
但我從來沒有見過俄羅斯文的二進制。
11:28
It would take me weeks just to figure out
318
676592
1800
我得花幾個星期弄清楚
11:30
what I was looking at from raw ones and zeros,
319
678392
2997
從原始碼1和0，我看到什麼。
11:33
but because our brains can instantly pick up
320
681389
1751
但因為我們的大腦可以
11:35
and recognize these subtle patterns inside
321
683140
2817
立即接收這些視覺抽象
11:37
of these visual abstractions,
322
685957
1488
內部的細微圖案，
11:39
we can unconsciously apply those
323
687445
1832
我們可以不自覺地
11:41
in new situations.
324
689277
1573
應用在這些新的情況。
11:42
So this is what Russian looks like
325
690850
1482
這就是俄羅斯文
11:44
in a visual abstraction.
326
692332
1580
看起來的視化抽象。
11:45
Because I know what one language looks like,
327
693912
1804
因為我知道一種語言的樣子，
11:47
I can recognize other languages
328
695716
1576
我可以識別其他語言，
11:49
even when I'm not familiar with them.
329
697292
1870
即使我不熟悉那些語言。
11:51
This is what a photograph looks like,
330
699162
1786
這就是照片的樣子，
11:52
but this is what clip art looks like.
331
700948
1887
但是這是剪貼畫的樣子。
11:54
This is what the code on your phone looks like,
332
702835
2555
這是你手機上代碼看起來像的樣子，
11:57
but this is what the code on
your computer looks like.
your computer looks like.
333
705390
2707
但這是在你電腦上的代碼的樣子。
12:00
Our brains can pick up on these patterns
334
708097
1864
我們的大腦可以
12:01
in ways that we never could have
335
709961
1951
看得到
12:03
from looking at raw ones and zeros.
336
711912
2496
在1和0中看不到的模式。
12:06
But we've really only scratched the surface
337
714408
1856
但我所提所的只是
12:08
of what we can do with this approach.
338
716264
2137
這個方法潛力的開端。
12:10
We've only begun to unlock the capabilities
339
718401
1678
我們才剛剛開始解開
12:12
of our minds to process visual information.
340
720079
3315
我們思想的能力來處理視覺信息。
12:15
If we take those same concepts and translate them
341
723394
1990
如果我們把這些相同的概念，
12:17
into three dimensions instead,
342
725384
1651
並將其轉化為三維，
12:19
we find entirely new ways of
making sense of information.
making sense of information.
343
727035
3195
我們會發現信息意識的全新方式。
12:22
In seconds, we can pick out every pattern here.
344
730230
2485
在幾秒鐘內，我們可以挑出這裡每個圖案。
12:24
we can see the cross associated with code.
345
732715
1820
我們可以看到與代碼相關聯的交叉。
12:26
We can see cubes associated with text.
346
734535
1932
我們可以看到與文字相關的立方體。
12:28
We can even pick up the tiniest visual artifacts.
347
736467
2476
我們甚至可以看到最小的視覺物象。
12:30
Things that would take us weeks,
348
738943
2130
0和1的事情使我們花上幾個星期，
12:33
months to find in ones and zeroes,
349
741073
2194
幾個月才找到，
12:35
are immediately apparent
350
743267
1803
在某種視覺抽象
12:37
in some sort of visual abstraction,
351
745070
2270
便立刻顯現出來，
12:39
and as we continue to go through this
352
747340
1132
我們繼續通過這方法，
12:40
and throw more and more information at it,
353
748472
2016
添上越來越多信息，
12:42
what we find is that we're capable of processing
354
750488
2281
我們發現的是
12:44
billions of ones and zeros
355
752769
2416
在幾秒之內
12:47
in a matter of seconds
356
755185
1168
我們能夠處理數十億的1和0
12:48
just by using our brain's built-in ability
357
756353
3234
僅僅使用我們大腦的
12:51
to analyze patterns.
358
759587
1954
內置分析模式的能力。
12:53
So this is really nice and helpful,
359
761541
2303
這是非常好的，有益的，
12:55
but all this tells me is what I'm looking at.
360
763844
2359
但這一切告訴我真正想知道的。
12:58
So at this point, based on visual patterns,
361
766203
1484
在這一刻, 在視覺模式的基礎上，
12:59
I can find the code on the phone.
362
767687
2409
我能在手機上找到代碼。
13:02
But that's not enough to blow up a battery.
363
770096
2665
但這還不足以炸毀電池。
13:04
The next thing I need to find is the code
364
772761
1568
接下來我需要找到的是
13:06
that controls the battery, but we're back
365
774329
1761
控制電池的代碼，但我們又回到
13:08
to the needle in a stack of needles problem.
366
776090
1731
一堆針裡找一支針的問題。
13:09
That code looks pretty much like all the other code
367
777821
2389
這些代碼看起來非常像該系統上的
13:12
on that system.
368
780210
2238
所有其它代碼。
13:14
So I might not be able to find the
code that controls the battery,
code that controls the battery,
369
782448
2401
所以我可能根本無法
找到控制電池的代碼，
找到控制電池的代碼，
13:16
but there's a lot of things
that are very similar to that.
that are very similar to that.
370
784849
2011
但有很多東西都是非常相似的。
13:18
You have code that controls your screen,
371
786860
1854
你有控制屏幕的代碼，
13:20
that controls your buttons,
that controls your microphones,
that controls your microphones,
372
788714
2216
控制你的按鈕，控制你的麥克風，
13:22
so even if I can't find the code for the battery,
373
790930
1928
所以即使我無法找到電池的代碼，
13:24
I bet I can find one of those things.
374
792858
2245
我打賭我能找到那其中一件。
13:27
So the next step in my binary analysis process
375
795103
2705
所以我在二進制分析過程的下一個步驟
13:29
is to look at pieces of information
376
797808
1231
便是要看看
13:31
that are similar to each other.
377
799039
2018
彼此相似的信息片段。
13:33
It's really, really hard to do at a binary level,
378
801057
3983
這在二進位級別中，真的，真的很難做到，
13:37
but if we translate those similarities
to a visual abstraction instead,
to a visual abstraction instead,
379
805040
3643
但如果我們把這些相似之處視覺化，
13:40
I don't even have to sift through the raw data.
380
808683
2438
我甚至不須經過篩選原始的數據。
13:43
All I have to do is wait for the image to light up
381
811121
2155
我所要做的就是等待
13:45
to see when I'm at similar pieces.
382
813276
2236
看到同類片段圖像亮起來。
13:47
I follow these strands of similarity
like a trail of bread crumbs
like a trail of bread crumbs
383
815512
3028
我按照這些相似性像麵包屑的線索，
13:50
to find exactly what I'm looking for.
384
818540
3106
尋找我要找的東西。
13:53
So at this point in the process,
385
821646
1734
在過程中的這一階段，
13:55
I've located the code
386
823380
1318
我已經找到
13:56
responsible for controlling your battery,
387
824698
1685
負責控制電池的代碼，
13:58
but that's still not enough to blow up a phone.
388
826383
2576
但仍不足以炸毀電話。
14:00
The last piece of the puzzle
389
828959
1564
最後一塊拼圖便是要
14:02
is understanding how that code
390
830523
2679
理解這些代碼
14:05
controls your battery.
391
833202
1202
如何控制你的電池。
14:06
For this, I need to identify
392
834404
2388
對於這一點，我需要
14:08
very subtle, very detailed relationships
393
836792
1716
在二進制信息內確定很微妙，
14:10
within that binary information,
394
838508
2089
很詳細的關係，
14:12
another very hard thing to do
395
840597
1755
當看著1和0
14:14
when looking at ones and zeros.
396
842352
2312
是另外一個很困難的事。
14:16
But if we translate that information
397
844664
1396
但是如果我們把這些信息
14:18
into a physical representation,
398
846060
2180
表現成視覺，
14:20
we can sit back and let our
visual cortex do all the hard work.
visual cortex do all the hard work.
399
848240
3016
我們可以坐下來，讓我們的視力展其所能。
14:23
It can find all the detailed patterns,
400
851256
1734
它可以替我們找到詳細的模式，
14:24
all the important pieces, for us.
401
852990
2020
所有的重要部分。
14:27
It can find out exactly how the pieces of that code
402
855010
2593
它可以找出代碼究竟
14:29
work together to control that battery.
403
857603
2934
是如何拼在一起運作，以控制電池。
14:32
All of this can be done in a matter of hours,
404
860537
3004
這一切都可以在幾個小時內就完成，
14:35
whereas the same process
405
863541
1356
而以往同樣的過程
14:36
would have taken months in the past.
406
864897
2922
則要花上幾個月。
14:39
This is all well and good
407
867819
1189
在打擊恐怖分子電話情況的理論上,
14:41
in a theoretical blow up a terrorist's phone situation.
408
869008
2942
這是一個非常不錯的主意。
14:43
I wanted to find out if this would really work
409
871950
2847
我想看看這在每天的工作上
14:46
in the work I do every day.
410
874797
2629
是否真的有用。
14:49
So I was playing around with these same concepts
411
877426
3055
所以我運用這些概念，
14:52
with some of the data I've looked at in the past,
412
880481
3024
於一些我以前看過的數據，
14:55
and yet again, I was trying to find
413
883505
2492
再次的，我要從
14:57
a very detailed, specific piece of code
414
885997
2208
大規模的二進制信息內,
15:00
inside of a massive piece of binary information.
415
888205
3595
試圖找到一些非常詳細的、
特定的代碼片段。
特定的代碼片段。
15:03
So I looked at it at this level,
416
891800
1773
當我在這個層面上看，
15:05
thinking I was looking at the right thing,
417
893573
1950
我以為一直在
15:07
only to see this doesn't have
418
895523
2321
看着正確的事情，
15:09
the connectivity I would have expected
419
897844
1740
只看到這個我原本期望的代碼
15:11
for the code I was looking for.
420
899584
1905
沒有連結性。
15:13
In fact, I'm not really sure what this is,
421
901489
2603
事實上我真的不知道這是什麼，
15:16
but when I stepped back a level
422
904092
1012
但當我向後退了幾步，
15:17
and looked at the similarities within the code
423
905104
1715
看著我看到
15:18
I saw, this doesn't have similarities
424
906819
2294
代碼中的相似性，
15:21
like any code that exists out there.
425
909113
1491
根本不像現存任的何代碼。
15:22
I can't even be looking at code.
426
910604
2225
我看到的甚至不是代碼。
15:24
In fact, from this perspective,
427
912829
2386
事實上，從這個角度來說，
15:27
I could tell, this isn't code.
428
915215
2048
我看得出來，這不是代碼。
15:29
This is an image of some sort.
429
917263
2048
這是某種類型的圖像。
15:31
And from here, I can see,
430
919311
1682
從這裡，我可以看到，
15:32
it's not just an image, this is a photograph.
431
920993
2911
它不只是一個圖像，這是一張照片。
15:35
Now that I know it's a photograph,
432
923904
1392
現在我知道這是一張照片，
15:37
I've got dozens of other
binary translation techniques
binary translation techniques
433
925296
2930
我有其他幾十個二進制翻譯技術，
15:40
to visualize and understand that information,
434
928226
2421
可視化和理解這些信息，
15:42
so in a matter of seconds,
we can take this information,
we can take this information,
435
930647
2543
所以在幾秒鐘之內，
我們就可以利用這信息，
我們就可以利用這信息，
15:45
shove it through a dozen other
visual translation techniques
visual translation techniques
436
933190
2397
通過其他的視覺轉換技術，
15:47
in order to find out exactly what we were looking at.
437
935587
3731
以找出我們所期待的。
15:51
I saw — (Laughter) —
438
939318
1682
我看到了 —(笑聲)—
15:53
it was that darn kitten again.
439
941000
3456
又是那該死的小貓。
15:56
All this is enabled
440
944456
1050
這一切都是因為
15:57
because we were able to find a way
441
945506
1495
我們能夠找到一種方法,
15:59
to translate a very hard problem
442
947001
2029
將一個非常困難的問題,
16:01
to something our brains do very naturally.
443
949030
2512
換轉成我們大腦非常自然能做的東西。
16:03
So what does this mean?
444
951542
2238
這意味著呢？
16:05
Well, for kittens, it means
445
953780
1545
嗯，對於小貓，
16:07
no more hiding in ones and zeros.
446
955325
2417
在1和0裡再沒法躲起來。
16:09
For me, it means no more wasted weekends.
447
957742
3303
對於我來說，這意味著不再要浪費週末。
16:13
For cyber, it means we have a radical new way
448
961045
2612
對於網路，這意味著我們有一種全新的方式
16:15
to tackle the most impossible problems.
449
963657
2965
來解決最不可能的問題。
16:18
It means we have a new weapon
450
966622
1812
這意味著我們在不斷發展的
16:20
in the evolving theater of cyber warfare,
451
968434
2416
網路戰有新的武器，
16:22
but for all of us,
452
970850
1420
但對我們所有人來說，
16:24
it means that cyber engineers
453
972270
1475
這意味著網路工程師
16:25
now have the ability to become first responders
454
973745
2146
現在在緊急情況下有能力成為
16:27
in emergency situations.
455
975891
2583
一線救援人員。
16:30
When seconds count,
456
978474
1047
當分秒必爭時，
16:31
we've unlocked the means to stop the bad guys.
457
979521
3409
我們有能力解開停止壞人的手段。
16:34
Thank you.
458
982930
2000
謝謝。
16:36
(Applause)
459
984930
2962
(掌聲)
ABOUT THE SPEAKER
Chris Domas - Cybersecurity researcherChris Domas is an embedded systems engineer and cybersecurity researcher.
Why you should listen
Chris Domas is a cyber-security researcher at the Battelle Memorial Institute. He specializes in embedded systems reverse-engineering (RE) and vulnerability analysis, figuring out how to manipulate electronic devices. Applying this towards national security, his group develops cyber technology that protects people on the newest front of global war.
Domas graduated from Ohio State University, where he set out to take every class offered by the school. He bounced between majors in electrical engineering, physics, mathematics, mechanical engineering, biology, chemistry, statistics, biomedical engineering, computer graphics, psychology, and linguistics, but finally ran out of money and was forced to graduate. Settling on a degree in computer science, with an irrelevant handful of minors, he joined Battelle as a cyber security researcher. Today, he strives to incorporate ideas from these disparate fields to tackle the world’s most challenging cyber problems in innovative and unexpected ways. As a result of his work, he received Battelle’s coveted 2013 Emerging Scientist and 2013 Technical Achievement awards. He continues to present research around the country, most recently at the cyber security conferences Black Hat, REcon and DerbyCon.
Chris Domas | Speaker | TED.com