O31E Lab in a box demo

Infra for Dashboard ( Setting up Lighthouse)

This environment is used to create a dashboard that display the vulnerability assessment report and available patches. It will essentially provide a graphical representation of all accessible assessment reports. Each infra is basically an abstraction of the lab instance.

Dashboard Infra composition:

1. Substrate

A Substrate is a virtual environment that is straightforward or basic. Depending on the environment, it can be a single VM or several VMs. The Substrate is transformed into specific environments using the tool installed using ansible roles.

For dashboard infrastructure composition, we will be using, Single VM (OAH-BES-VM)

2. Ansible Roles:

ansible role for Hygieia

This ansible role will install the dashboard tool called Hygieia.

Hygieia or basically Hygieia dashboards assist in achieving process transparency and therefore help establish feedback loops that are the underlying concept of lean and DevOps. They contain interactive elements which enable drill-down and linking to the connected tools.

Hygieia appears in two self-contained dashboards – one for engineers and another for executives - that visually depict CICD pipelines. In essence, Hygieia itself is an aggregator that pulls data from various DevOps tools that teams use in their CICD pipeline, making it easily digestible in dashboard view(s).

Hygieia’s dashboards simplify the ability to view CICD pipelines in near real-time. The dashboards enable DevOps engineers and executives to monitor the health of code commit to deployment in final production. Between those two points – inception (commit) to completion (prod) – the dashboards also provide crucial information about the overall vitality and performance metrics of your software operations.

ansible role for chrome

This ansible role will install chrome browser.

3. Environments:

bes_O31E_lab_dashboard_ce

4. Playbook

TO DO List

• Confirmation and creation of substrate
• Identification of s/w to be bundled into the Dashboard environment
• Creation of ansible roles for the s/w to be installed in the Dashboard environment
• Identification of playbooks
• Creation of playbooks

Infra for setting up Red teaming & Blue teaming

This environment used for installing tools necessary for red teaming and blue teaming activities.

Red teaming & Blue teaming infra composition

1. Substrate

Multiple VM (OAH-BES-VM)

2. Ansible Roles:

ansible role for SonarQube

ansible role for chrome

3. Environments:

bes_O31E_lab_secTest_ce

4. Playbook

TO DO List

• Confirmation and creation of substrate
• Identification of s/w to be bundled into the Dashboard environment
• Creation of ansible roles for the s/w to be installed in the Red teaming environment and Blue teaming environment
• Identification of playbooks
• Creation of playbooks

Infra for open source Repo Scan

Environment designed to install tools for performing repository scan and fuzzing.

Open Source Repo Scan Infra composition:

1. Substrate

Single VM (OAH-BES-VM)

2. Ansible Roles:

ansible role for OSS-Fuzz

3. Environments:

bes_O31E_lab_assessment_ce

4. Playbook

TO DO List

• Confirmation and creation of substrate
• Identification of s/w to be bundled into the Dashboard environment
• Creation of ansible roles for the s/w to be installed in the Red teaming environment and Blue teaming environment
• Identification of playbooks
• Creation of playbooks

Infra for Reporting & Patches

Environment for automated preparation of Reports and publishing Patches to the dashboard

Infra composition for Reporting & Patches :

1. Substrate

Single VM (OAH-BES-VM)

2. Ansible Roles:

TBD

3. Environments:

bes_O31E_lab_report_ce

4. Playbook

TO DO List

• Identify the necessary playbooks