Welcome to our course on secure architecture design.
My name is Brian Olliff, and I am a defensive engineering
instructor, cybersecurity instructor here at INE.
Got all my contact information there up on the screen.
So if you ever have any questions about any
of the content in this course, or any other courses I teach,
or any cybersecurity anything, really,
feel free to reach out to me.
You've got my email there, my Twitter, and my LinkedIn
as well.
I will say email is probably the best way to get a hold of me,
it's the one I'll check the most often.
But again, if you have any questions about anything
cybersecurity related, please don't
hesitate to reach out and ask.
So with that, what are we going to be
talking about in this course?
What is secure architecture design
and what are we going to do with this?
First of all, we're going to talk
about a lot of the principles behind secure architecture,
what it is, what is secure infrastructure
is, then we'll get into the designing portions of it.
We'll start with how to design a secure architecture
around a user controls, things like authentication
and authorization.
Then we'll move into the infrastructure design
itself, things like the network, the servers,
all the things that make up your actual infrastructure.
We'll talk about proper design and how to design it
in a secure manner there.
In addition to designing, we're going
to talk about how to plan out your secure architecture,
how to plan out the infrastructure and everything
connected to it in a way that it can be as secure as possible.
We'll also get into logging because no secure architecture
and no infrastructure is complete
without proper logging setup.
But in order to be secure, you've
got to have something monitoring and logging
all of your systems.
Then we'll talk about backup and disaster recovery as well.
Because just like logging, no system
is secure without a proper way to recover
from a disaster and that's where backup and disaster recovery
both come in.
And to round it off, we'll talk about documentation
because everything in IT and cybersecurity needs
documentation, and designing, and documenting
a secure architecture go hand in hand there.
When you're designing it, you have to document it
at the same time.
So we'll definitely talk about documentation there.
So what can you hope to get out of this course?
First of all, you'll be able to understand
a lot of the basic principles behind a secure infrastructure,
what a secure infrastructure is, how to design one and so forth.
You'll understand a lot of the goals
behind why we're trying to design a secure infrastructure,
what we're trying to accomplish here
and why it's important to have a proper design in place
before you really just start diving in and just start
deploying systems.
It's important to have a proper design
and know how the infrastructure is going to look ahead of time,
especially when you're trying to make it secure.
You'll also be familiar--
be able to be familiar with a lot of the design
techniques for developing authorization,
authentication systems and how to integrate those
into your network in a secure manner.
You be able to explain a lot of the proper methods
for designing a secure network infrastructure as well.
So in addition to the user-based controls,
we'll talk about how to design a secure network infrastructure
as far as network devices, network
segmentation, and servers and the rest
of your infrastructure.
It's not just the network itself,
but it's the entire infrastructure.
So you'll be able to explain a lot of the methods
behind that and how and why to do it.
You also understand a lot of the various threat Modeling
techniques, how to use them, where to use them,
why they're important, why they exist,
and how to integrate them into your planning process
and your design process.
You'll know why proper planning is
important before implementation, especially if you're
trying to design a secure infrastructure
in a secure architecture, you've got to have that planning first
and you'll know why that's important,
we'll demonstrate that as well.
You'll be familiar with how a lot of the logging systems
can fit into the overall structure
of a secure architecture, why logging is important and how
that all ties together in addition to knowing--
understanding various backup recovery methods
and how they tie-in to things like disaster recovery
and business continuity.
And you'll again, you'll know how
various methods of documentation,
why they're important, and when and how you should
use various methods when it comes
to designing the secure infrastructure
and planning it all out.
So with all that out of the way, let's
go ahead and jump in to our course
on the secure architecture design.