Study of bypassing Microsoft Windows Security using the MITRE CALDERA Framework

Abstract

Background: Microsoft Windows Security is a recently implemented safeguard for the Windows operating systems, including the latest versions of Windows10 and 11. However, there is a major shortcoming in this system to stop Advanced Persistent Threat (APT). These are government-financed groups that are funded to attack other government entities. Following the initial security breach, the hacked Windows device is used to access the rest of the network devices in order to transfer data to external storage (Exfiltration). Methods: In this work, we have tested the Microsoft Windows Security system using MITRE CALDERA and ATT&CK frameworks and explain how APT groups are able to bypass Windows Security. Results: In this study we used "54ndc47" agent through GoLang feature in MITRE CALDERA platform to test and bypass Microsoft Windows Security systems (MS Windows 10). Through it, we were able to bypass the Windows Security system and display entire files in the victim's device. Conclusions: In this paper, we have provided recommendations to Microsoft to improve their Windows Security tool through the use of Artificial intelligence (AI).

Eye-gesture control of computer systems via artificial intelligence

“…Historically, the rudimentary applications of this confluence were discernible in the use of hand gestures for smartphones or tablets, a domain that has since witnessed radical metamorphosis. 14,18,[23][24][25][26][28][29][30][31][32]34,35,[37][38][39][40][41][42][43][44][45][46][47][48][49][50][51][52][53] The contemporary landscape sees gesture control permeating environments as expansive as desktops, where intricate hand movements can seamlessly manage presentations or navigate through web interfaces. 38,39 At a granular level, the progression of gesture control traverses two salient trajectories: the deployment of specialized hardware and the adoption of software-centric solutions.…”

“…Real-time gesture interpretations in these platforms magnify user immersion, enabling an unprecedented interaction level with virtual realms. 14,18,[23][24][25][26][28][29][30][31][32]34,35,[44][45][46][47][48][49][50][51][52][53][54]56,57 On the hardware front, devices such as the Leap Motion controller and the Myo armband are exemplary testaments to the future of gesture control. These devices, empowered by AI, meticulously interpret intricate hand gestures and muscle movements, offering a plethora of command capabilities.…”

“…Its capabilities span facial recognition, object detection, tracking, and more, finding application across industries like robotics, healthcare, security, and entertainment. 17,18 Enthusiasts and professionals can leverage OpenCV's robust documentation, tutorials, and a wealth of external resources to harness its full potential. 19…”

Staying Ahead of Threats: A Review of AI and Cyber Security in Power Generation and Distribution

“…They have also identified several potential benefits, such as enhanced decisionmaking capabilities, higher efficiency, and increased reliability [27]. They have also determined that there is a requirement for ongoing investments in cybersecurity to guarantee the safe and secure implementation of these technologies inside the power sector [28]. In conclusion, the review of the relevant literature reveals that there is an expanding body of research on AI and cybersecurity in the power sector, with a focus on the most significant threats and challenges, the development of new solutions and technologies, as well as the future trends and opportunities in the field.…”