My Cybersecurity Journey: From Computers and IT to AI Security

KONGKHAM — Fri, 25 Sep 2026 09:18:03 +0000

A Personal Journey Through Programming, Systems, Ethical Hacking, Digital Forensics, and the Evolution of Cybersecurity

My journey with computers and information technology began in 2001.

At the time, I was becoming deeply interested in computers, operating systems, networking, databases, programming, and emerging technologies. What began as curiosity gradually became a serious desire to understand how technology worked beneath the surface.

Over the years, that curiosity led me toward cybersecurity, ethical hacking, penetration testing, digital forensics, artificial intelligence, and AI security.

My cybersecurity journey did not begin with Kali Linux or a particular hacking tool. It began much earlier — with my fascination with computers and IT.
From Computers and IT to Cybersecurity

My early interests were broad. I wanted to understand:

How computers work
How operating systems function
How networks communicate
How databases store and process information
How applications interact with systems
How programming controls computers
How information moves across networks
How systems fail
How systems can be protected

My professional experience also gave me practical exposure to information technology. I worked as an IT Manager in a government department, but technology was more than simply part of my job. I genuinely wanted to understand the systems I worked with.

That combination of professional experience and personal curiosity gradually pushed me toward cybersecurity.

I began to understand something important:

To protect technology, you first need to understand the technology itself.

Before understanding a vulnerability, I need to understand the system.

Before understanding an attack, I need to understand the architecture.

Before understanding a security control, I need to understand what it is designed to protect.

That became one of the foundations of my learning.
Discovering Ethical Hacking

My interest in cybersecurity became much stronger in the late 2000s.

One of the books that influenced me during this period was The Unofficial Guide to Ethical Hacking by Ankit Fadia.

Reading about ethical hacking opened a new dimension of computing for me.

I was already interested in computers, IT, networks, databases, and programming. Ethical hacking brought many of those interests together through the perspective of security.

I became increasingly interested in:

Vulnerabilities
Network security
System security
Attack techniques
Defensive security
Reconnaissance
Network protocols
Authentication
Application security
Security testing

The more I explored, the more I realized that cybersecurity was not simply about “hacking.”

It involved networking, operating systems, programming, databases, cryptography, system administration, application architecture, digital forensics, human behavior, and risk management.

That changed how I approached the field.
BackTrack 5: An Important Milestone

During the 2010s, I began using BackTrack 5.

At the time, BackTrack was a well-known Linux distribution for penetration testing and security research. It brought many security tools together in one environment and made experimentation easier.

For me, BackTrack became a practical cybersecurity laboratory.

I could explore:

Network reconnaissance
Enumeration
Vulnerability assessment
Wireless security
Password auditing
Network analysis
Exploitation
Security testing
Traffic analysis

But one lesson became clear very quickly — a tool is only as powerful as the knowledge, judgment, and understanding behind it.

Running a command is one thing.

Understanding what the command does, why it is being used, what its output means, and how to interpret the result is something else entirely.

That distinction has remained important throughout my cybersecurity journey.
From BackTrack 5 to Kali Linux

As the cybersecurity ecosystem evolved, BackTrack was succeeded by Kali Linux.

I eventually moved from BackTrack 5 to Kali Linux, which became my primary environment for cybersecurity experimentation and penetration-testing laboratories.

Kali provides tools for areas such as:

Reconnaissance
Network analysis
Vulnerability assessment
Web application security
Wireless security testing
Password auditing
Exploitation
Privilege escalation
Digital forensics
Reverse engineering
OSINT
Traffic analysis
Security research
Automation and scripting

But I have never considered Kali Linux itself to be cybersecurity expertise.

Kali Linux is a platform and toolkit.

It does not automatically make someone a penetration tester or cybersecurity professional.

The real knowledge lies beneath the tools.

I need to understand networking to understand network attacks.

I need to understand operating systems to understand privilege escalation.

I need to understand web applications to understand web vulnerabilities.

I need programming knowledge to understand exploitation and automation.

I need to understand system architecture to understand how systems can fail.

For me, that underlying knowledge has always mattered more than memorizing commands.
Why I Use VirtualBox

Virtualization became another important part of my cybersecurity environment.

I have used VirtualBox as my virtualization platform because it has worked well for my needs and has given me the flexibility to build cybersecurity laboratories without requiring multiple physical computers.

I have not relied on VMware, but I do not see that as a limitation.

The important concept is not the brand of hypervisor.

It is virtualization itself.

Virtualization allows me to run multiple isolated operating systems on a single physical computer.

For example:

MY PHYSICAL COMPUTER
│
VirtualBox
│
┌────────────────┼────────────────┐
│ │ │
Kali Linux Windows Ubuntu
Security Lab Client Server
│ │ │
└────────────────┼────────────────┘
│
Virtual Network

This allows me to build a cybersecurity laboratory without needing several physical machines.

I can create Kali Linux environments, Windows systems, Linux servers, vulnerable laboratory machines, Active Directory environments, web servers, firewalls, and other security-testing infrastructure.

I can also create isolated virtual networks and control how the systems communicate.

That makes virtualization extremely useful for cybersecurity learning and experimentation.
Why Virtualization Matters

Cybersecurity requires experimentation.

But experimenting directly on a primary operating system is not always appropriate.

Virtualization provides isolation, flexibility, and control.

I can create a laboratory, test security configurations, analyze traffic, study vulnerabilities, investigate suspicious activity, and practice security techniques without rebuilding my physical computer every time something goes wrong.

One of the most useful features is snapshotting.

Before an experiment, I can create a clean snapshot. If the virtual machine becomes unstable, corrupted, or misconfigured, I can restore the previous state.

That creates a simple learning cycle:

Build → Experiment → Break → Investigate → Restore → Experiment Again

For cybersecurity research and education, that capability is extremely valuable.
VirtualBox vs. VMware

I have never viewed VirtualBox versus VMware as a question of which one is “the cybersecurity hypervisor.”

Both can support many of the capabilities required for cybersecurity laboratories.
Virtualization Capabilities

Kali Linux — ✅ VirtualBox | ✅ VMware
Windows — ✅ VirtualBox | ✅ VMware
Linux Servers — ✅ VirtualBox | ✅ VMware
Snapshots — ✅ VirtualBox | ✅ VMware
NAT Networking — ✅ VirtualBox | ✅ VMware
Bridged Networking — ✅ VirtualBox | ✅ VMware
Host-Only Networking — ✅ VirtualBox | ✅ VMware
Isolated Laboratories — ✅ VirtualBox | ✅ VMware
Multiple Virtual Machines — ✅ VirtualBox | ✅ VMware
Cybersecurity Experimentation — ✅ VirtualBox | ✅ VMware

VMware has historically been common in enterprise environments, while VirtualBox has also been widely used for education, development, research, testing, and personal laboratories.

For me, VirtualBox has been sufficient because I already understand its environment and know how to configure my virtual machines and networks.

If I encounter a professional environment that uses VMware, I can learn it when necessary.

The underlying concepts remain transferable:

Hypervisors
Virtual machines
Virtual CPUs
Virtual memory
Virtual disks
Virtual network interfaces
NAT
Bridged networking
Host-only networking
Network isolation
Snapshots
Resource allocation

The knowledge matters more than the brand.
My Cybersecurity Laboratory

Virtualization allowed me to think about cybersecurity as a laboratory rather than simply a collection of tools.

A basic environment can look like this:

VirtualBox
│
┌───────────────┼───────────────┐
│ │ │
Kali Linux Windows Linux
Security Lab Client Server
│ │ │
└───────────────┼───────────────┘
│
Isolated Network
│
┌──────────┴──────────┐
│ │
Web Server AD Lab

This kind of environment allows me to study different stages of the security lifecycle:

Reconnaissance → Enumeration → Vulnerability Identification → Controlled Exploitation → Privilege Escalation → Detection → Investigation → Remediation

Everything can be performed inside an authorized laboratory.

That is where virtualization becomes more than a convenience.

It becomes part of my learning methodology.
My Philosophy: Tools Are Not Knowledge

One of the biggest lessons I have learned is that cybersecurity cannot be reduced to tools.

Someone can memorize hundreds of Kali Linux commands and still have a weak understanding of cybersecurity.

Another person may know fewer tools but understand:

TCP/IP
DNS
HTTP
TLS
Linux
Windows
Active Directory
Authentication
Authorization
Databases
Programming
Operating-system architecture
Cloud infrastructure
Cryptography
Logging
Digital forensics
Threat modeling

That deeper knowledge is more transferable.

Tools change.

Operating systems change.

Vulnerabilities change.

Attack techniques change.

Cloud platforms change.

AI systems change.

But the underlying principles of computing, networking, authentication, software architecture, and security continue to matter.
How Cybersecurity Has Changed Since I Started

When I first became interested in computers and IT in 2001, the technological environment was very different from today’s.

By the late 2000s, when I began seriously exploring ethical hacking, cybersecurity was already becoming increasingly important, but the modern cloud-and-AI landscape had not yet emerged in its current form.

Much of the traditional attack surface centered around:

Networks
↓
Servers
↓
Operating Systems
↓
Applications
↓
Databases

Today, the environment is much broader:

Cloud
├── Identity
├── APIs
├── Containers
├── Kubernetes
├── Serverless
├── Applications
├── Data
└── Infrastructure
│
▼
AI / ML
│
┌────┼────┐
│ │ │
Models Agents Tools
│ │ │
└────┼────┘
│
Data
│
Infrastructure

Cybersecurity has expanded into cloud security, DevSecOps, container security, API security, identity security, supply-chain security, mobile security, IoT security, AI security, machine-learning security, and adversarial AI.

The attack surface has expanded dramatically.

But my original foundation remains relevant.
From Ethical Hacking to AI Security

My interests have continued to evolve.

What began in 2001 with computers and IT eventually led to ethical hacking, BackTrack 5, Kali Linux, penetration testing, digital forensics, security research, artificial intelligence, machine learning, and AI security.

Today, I am particularly interested in the security implications of AI systems.

Modern AI systems can involve:

Models
Training data
Inference
APIs
Agents
Tools
External data sources
Vector databases
Cloud infrastructure
Identity systems
Applications
Human users

Together, these components create an increasingly complex AI attack surface.

Security questions now include:

Prompt injection
Data poisoning
Model abuse
Insecure AI integrations
Excessive agent permissions
Sensitive-data exposure
Supply-chain risks
Model theft
Adversarial attacks
AI infrastructure security

In other words, my original interest in understanding how systems work has moved into a new technological era.
Looking Back at My Journey

When I look back, my journey did not begin with Kali Linux.

It did not begin with VirtualBox.

It did not even begin with ethical hacking.

It began with computers and IT in 2001.

I was fascinated by computers.

Then I became increasingly interested in networks.

Then databases.

Then programming.

Then systems.

Then security.

Then ethical hacking.

Then BackTrack 5.

Then Kali Linux.

Then virtualization and security laboratories.

Then penetration testing, digital forensics, cybersecurity research, artificial intelligence, and AI security.

My journey can be summarized as:

2001
│
▼
Computers & IT
│
▼
Networks & Databases
│
▼
Programming & Systems
│
▼
IT Management
│
▼
Late 2000s
│
▼
Ethical Hacking
│
▼
2010s
│
▼
BackTrack 5
│
▼
Kali Linux
│
▼
Virtualized Security Labs
│
▼
Penetration Testing
│
▼
Digital Forensics
│
▼
Cybersecurity Research
│
▼
Artificial Intelligence
│
▼
AI Security

The technology has changed enormously since 2001.

The tools have changed.

The operating systems have changed.

The attack surface has changed.

The terminology has changed.

The cybersecurity profession has changed.

But one thing has remained constant:

I still want to understand how technology works, how it can fail, how it can be attacked, and how it can be protected.

That is the real foundation of my cybersecurity journey.

I never started this journey simply to collect tools or follow trends.

I started because I wanted to understand the technology beneath the screen.

From my first experiences with computers and IT in 2001, through IT management, ethical hacking, BackTrack 5, Kali Linux, VirtualBox, penetration testing, digital forensics, AI, and AI security, the journey continues.

And the reason is still the same:

curiosity.
Final Note: From Learning to Sharing

Today, I do not want to keep what I have learned only to myself.

I want to share what I have learned and create awareness.

Technology is evolving rapidly, and artificial intelligence is becoming part of everyday life. Along with its enormous potential, it brings new questions about security, privacy, safety, and cybersecurity.

That is why I have started creating and sharing AI and cybersecurity awareness content.

My goal is to explain these subjects in a way that is simple, practical, and useful — not only for cybersecurity professionals, but also for ordinary people who increasingly depend on technology every day.

I believe awareness is one of the foundations of security.

The more people understand technology, recognize common threats, protect their information, and understand the risks that AI can introduce, the better prepared they can be.

I started my journey by learning.

Now, I want to share what I have learned.

From computers and IT in 2001 to ethical hacking, BackTrack 5, Kali Linux, VirtualBox, cybersecurity, digital forensics, AI, and AI security, the journey continues.

This next chapter is not only about learning more.

It is about sharing knowledge, creating awareness, and helping others understand the digital world we are all becoming part of.

DEV Community: KONGKHAM

My Cybersecurity Journey: From Computers and IT to AI Security