1.1 Planning Your Lab

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
6 hours 28 minutes
Difficulty
Intermediate
CEU/CPE
7
Video Transcription
00:00
>> Welcome back to Cybrary
00:00
introductory course to build
00:00
your Information Security Lab.
00:00
I'm your host and instructor, Kevin Hernandez.
00:00
Also review in our prior lesson,
00:00
we discussed what is an Information Security Lab,
00:00
why you should build
00:00
your own InfoSec lab
00:00
and what to expect out of this course.
00:00
In this lesson, we will start planning your lab.
00:00
Now, what are the objectives of this course or lesson?
00:00
First of all, you've got to ask yourself,
00:00
what are you looking at your lab?
00:00
To you is want to replicate
00:00
your current work environment.
00:00
To just want to build on what we call a cold lab where
00:00
basically you spin different OSS and play around,
00:00
get familiar with interfaces
00:00
or do you want to actually have
00:00
a live system or you
00:00
actually protect your home office or your personal home?
00:00
What enterprise level security?
00:00
This first question, it's
00:00
very important for you to answer yourself.
00:00
It involves how depth you want your resources to be,
00:00
your session of resources and
00:00
how much time you will put into this lab.
00:00
As a matter of discourse,
00:00
we'll consider this to be a live environment and will
00:00
properly guide you into building a similar environment.
00:00
Now, we won't be able to cover
00:00
all the tools in the market.
00:00
But we'll cover at least one tool out
00:00
of each type of technology out there.
00:00
After you answer that question,
00:00
you've got to ask yourself,
00:00
what type of resources do you currently have?
00:00
When I say this is it
00:00
could be how many old computers you have laying around?
00:00
How many computers you're going to repurpose?
00:00
Are you going to operate your career
00:00
in gaming system into a lab
00:00
or you just have a little bit influx of capital
00:00
to spend and to build in this type of environment?
00:00
This is very important to
00:00
go together with the first question.
00:00
You have to be realistic.
00:00
You cannot pretend to have a live system replicating up
00:00
enterprise grade network while only
00:00
having a $100 worth of capital to invest,
00:00
not having any old systems,
00:00
not having any thing to repurpose [NOISE],
00:00
not having anyone to
00:00
donate any type of equipment, et cetra.
00:00
You got to be realistic.
00:00
Between Question 1 and 2,
00:00
you really have to sit down
00:00
and analyze what's realistic and don't worry,
00:00
we will help you go through that.
00:00
Now, another question you have to ask
00:00
yourself after you answer to first two questions is,
00:00
do you rather have several power efficient systems
00:00
or a single powerful system?
00:00
Now, why do I ask this?
00:00
A powerful efficient system most likely will be,
00:00
let's say if you're looking to repurposing an old system,
00:00
not laptop with a broken screen.
00:00
You might be looking
00:00
at a small four
00:00
factor computer mini-ITX system
00:00
versus when you're talking about
00:00
a single powerful system,
00:00
I'm talking about, let's say ATX type
00:00
of power tower or old
00:00
gaming system being repurposed into a lab.
00:00
Why does it matter?
00:00
Well, when you're using
00:00
a power efficient system 65 watts, 85 watts,
00:00
100 watts, you tend to have
00:00
very small amount of SATA pots or storage.
00:00
You have very minimal RAM slot capacities
00:00
and obviously you're not going to have a very strong CPU.
00:00
When you're talking about a single powerful system,
00:00
you're going to have four or six,
00:00
maybe eight RAM slots in your system,
00:00
which you can grow a lot of RAM in
00:00
a cost effective way versus
00:00
having two single slots like in an old laptop.
00:00
But only that having desktop great RAM
00:00
sometimes can be less expensive or you can
00:00
get more out of it than in
00:00
a small form factor system
00:00
due to the way that he propagates in
00:00
smaller and closed systems versus a more
00:00
powerful, bigger, built physically.
00:00
After that, like I mentioned earlier,
00:00
you have to assess if you have
00:00
any type of access to refurbish or recycle an equipment.
00:00
Sometimes, if you're working for a big corporation,
00:00
you might be able to get your hands
00:00
on a free system so you can use to introduce.
00:00
Is not as nice-looking as having one big system,
00:00
like a server rack.
00:00
But at the same time,
00:00
you're seeing a lot of money when you do this.
00:00
When you look at recycled refurbished equipment,
00:00
you also can look into
00:00
even old [NOISE] server for
00:00
it will be a lot cheaper than a new server affirm.
00:00
It maybe 50 percent performance for the same power usage,
00:00
but at the same time it costs you
00:00
25 percent less than a new system.
00:00
Another thing to consider is,
00:00
what is your experience building or upgrading a system?
00:00
If you're experienced enough
00:00
or confident in your knowledge,
00:00
you can save a considerate amount of money performing
00:00
small upgrades such as upgrading the RAM.
00:00
The last question is
00:00
what type of lab you're trying to build?
00:00
As I mentioned in the first question,
00:00
while you're looking out of it,
00:00
are you looking basically to have
00:00
a live system or something
00:00
where you just replicate
00:00
your embarment to familiarize with the dashboards.
00:00
The reason I asked this is
00:00
because if you're hiring what I'd
00:00
like to call a cold lab,
00:00
you don't need as many resources
00:00
as these applications tell you.
00:00
Publication might tell you need a gigs,
00:00
but since you don't have actual data going in,
00:00
maybe we wanted to get it
00:00
should be more than enough and therefore you
00:00
will save money in these type of
00:00
configuration when we talk
00:00
into the hardware configuration itself.
00:00
Now let's take a short break.
00:00
When we're back, we'll discuss the benefits and
00:00
the disadvantages of each
00:00
of these labs that I just mentioned.
00:00
What are the pros of
00:00
a cold lab versus a system that is basically
00:00
life similar to those that you
00:00
have in your corporate environment.
00:00
>> See you soon.
Up Next