Re: Lab setup for security learning

["Francois Yang" <francois.y () gmail com>]

Here are my suggestions.
a. can you setup vmware on one or two of the current machines?
that will give you the options to mess with the guess OS and roll back
if you break anything without having to reload everytime. will save
you alot of time.  Also if will allow you to setup alot more Os's to
play with rather than being limited to the three you currently have.

b. You might have to add, hardware/software firewall/router if
possible to mimic real life.

d. I would say, setup a network where you can simulate how an attacker
could own a box on the same network and how they would do it from the
outside thru a service such as http.

I think something like this should be a good start.


On 1/12/07, Ankur Jindal <divinepresence () gmail com> wrote:
> Hello all
> Me and a couple of friends wish to set up a lab of our own for
> learning network security. I'd like some suggestions about the setup
> of the lab with respect to
>
> a) The number of machines (We only have 3)
> b) Networking components (we have a 4 port switch and a 4-port hub)
> c) OS/Softwares (Win XP, Fedora Core 2, Backtrack (for all testing),
> windows disassemblers etc.)
> d) Setup architecture (both physical and software)
>
> Any suggestions for above are welcome. I'd appreciate it if you can
> provide any links/docs/tutorials etc.
>
> Thanks
> Ankur
>
> ---------------------------------------------------------------------------
> This list is sponsored by: ByteCrusher
>
> Detect Malicious Web Content and Exploits in Real-Time.
> Anti-Virus engines can't detect unknown or new threats.
> LinkScanner can. Web surfing just became a whole lot safer.
>
> http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
> ---------------------------------------------------------------------------

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------