SECTION 9 Cyber Security

In this episode we talk about adding security to Dorothy’s network. We simplified the network design and incorporated what she already has. Security is always about layers. We’re planning to add segmentation with vlans, subnets, routing and an access control list. Other forms of security include 802.1x authentication for Wi-Fi and file permissions on the Synology DiskStation.

In this episode we talk about our Synology DiskStation and the failing hard drives. Two of the four drives have bad sectors. We go through the process of replacing them. We also talk about how this fits into security using the CIA triad. You need to think about the availability of data. Something a lot of IT departments don't take into consideration.

In this episode we try to answer three questions. How secure is LastPass? How is information securely transferred between devices? How is information securely shared between users? We do our best to answer these questions.

We are slowly moving forward with LastPass, the Yubikey, and two factor authentication. Dorothy forgot her master password for LastPass. This lead us down the path of account recovery, which we quickly realized wasn't an option. What do we do if we forget our master password? What do we do if we lose our Yubikey? We're working on a plan.

Once Dorothy's network is up and running, she will have to take on the role of Linux administrator. We talk about basic Linux server administration. This includes basic commands and baselines for services and log files. This is a big step for Dorothy. A little planning will make the job a lot easier.

Dorothy and I talk about IP Addresses for her new network. There are several things we have to take into consideration. The number one issue is overlapping IP space. We can't have that. We also have to plan for the future. How many subnets will she need? Will the network grow in the future? What happens if we want to connect her network with another location? 

These are just some of things we have to take into consideration. Planning now will save us extra work in the future.

We're getting ready to move our network to Dorothy's new computer room. This will be a lot of work. We talk about the equipment, some planning and things we need to work on. 

LIST OF EQUIPMENT

1. Palo Alto PA-220 Firewall

2. 3 Cisco 8 port 3560 switch's 

3. Synology Disk Station - DS218+

4. Raspberry Pi Stack

5. Gigabyte server - Gigabyte Mini Intel Core i7-3537U 2GHz Compact PC Barebone (GB-XM1-3537)

In this episode we talk about the Level One Robotics Data Breach. They have several big clients including Ford, Tesla, GM and Toyota. Data belonging to Level One Robotics and their clients was left on a server connected to the Internet. Anyone could access the information. Where was their security?

We managed to get DNS setup using BIND9 on our Raspberry Pi data center. We go over what we did, how we did it, and what we learned. This was a little tricky because BIND has several config files. We also had to reconfigure the DHCP server so Dorothy's workstation would get the correct DNS servers. 

See our master BIND9 configuration files on our website. We've included named.conf.local and the forward and reverse lookup config files.

Our DHCP failover system is up and running. It's pretty cool seeing this in action. We talk about what we did and how we got it to work. We also talk about how this applies to security.