The document outlines the setup and plan for the second iteration of a test environment called "The Hunt for Blue Leader". It details the virtual machines and IP addresses that will be used, including reusing some existing VMs and creating new ones. It also performs a risk assessment that identifies potential threats like unpatched systems, no security policies, and confidential data being at risk from hackers or industrial espionage.

2. Setup of test environment

3. 2 November 2011

8. Backstory - Recap

9. Test environment

12. IP plan IP Host 172.16.1.0 Servers/Tech Lan 172.16.1.1 Mail 172.16.1.2 Webserver 172.16.1.3 Database 172.16.1.4 Deb admin 172.16.1.255 Broadcast 172.16.2.0 Office/Lab Lan 172.16.2.1 Windows XP office WS 172.16.2.2 Windows XP lab WS 172.16.2.3 Rouge AP 172.16.2.255 Broadcast

14. Unknown no of WS

15. 2 subnets +

16. 1 VPN connection

18. Research data Selected characteristics & summary No host inventory Network Misconfigured servers Un-patched Workstations No policy enforced Confidential data

20. Risk Determination

22. Q&A session

23. See more at http://itsecproject.wordpress.com/