SECTION 9 Cyber Security

We tried to do a less technical episode by diving into the CIS Google Chrome Benchmark. We ran into all […]

We dive right into the CIS Ubuntu Linux 16.04 LTS Benchmark. We talk about what this is, level 1 and level 2 recommendations and several examples. This includes SSH, partitions, iptables, ufw and AIDE. We will be incorporating some of these recommendations into our own Ubuntu systems. We also go over future plans and projects. […]

In this episode, we modify the Auto Nmap script to meet our network requirements. We introduce Hping3, a tool that can modify ICMP packets to ex-filtrate data. And we continue the process of improving the maintenance of our network. Auto SSH Script AutoNmapScript – pdf file Crontab Command: 0 4 * * * /usr/local/autonmap/autonmap.sh > /dev/null […]

We jump into security with an automated nmap script, tcpdump & Wireshark. We start off with a basic review of our network engineering process that Dorothy is working on. Then we go into our nmap script to locate unauthorized devices & services. We move on to tcpdump and how to capture packets. We go over […]

This week we added a Cisco switch with a couple of vlans to Dorothy’s growing network. We go over the configuration and implementation of the switch. This includes configuration changes to pfSense. Dorothy shares what she learned and what’s fuzzy. Damien shares future plans for securing the network.

This week, Dorothy expands on a basic network design by adding Wifi and DMZ networks. I focus on the security side of things with the CIS critical security controls  and Nmap. Dorothy shares her experience with pfSense firewall configurations, network services and network devices. I talk about my experience with a script to automate Nmap […]

We put a network together using a pfSense firewall and an Asus Wi-Fi router. I followed our Cisco Network Lifecycle to create a checklist. Dorothy was able to check things off the list and create a functioning network. We talk about the process, the hardware, what we learned and what we need to work on. […]

In this episode we continue with the scenario we created in episode 11, Dorothy’s graphic design business. We’ve already covered the 6 phases of the Cisco Network Lifecycle. It’s time to focus on information security best practices. We tried to follow the NIST “Small Business Information Security: Fundamentals” document . We dumped that in favor […]

Applying information security is hard. In this episode we review the scenario we created in episode 11, Dorothy’s graphic design business. We go over some issues we have with our process, & continue with the Cisco Network Lifecycle. We are several steps closer to creating a process for applying information security. Links Secunia PSI Cisco […]

Applying information security is difficult. We’ve come up with a road map to simplify the process. Using the first three phases of the Cisco Network Lifecycle, we prepare, plan & design the network.   Links Secunia PSI Cisco Network Lifecycle pfSense