All posts

Building a security lab (literally)

logo design concept

I’ve seen a few ‘how to build your own security testing lab’ documents in the past, but many have struck me as being ‘what I would do’ rather than ‘what I did’. Here you can follow us building a security lab (literally).

Having gone through the process myself at least three times over the last 15 years I thought some people might be interested in seeing a series of photos on our new blog, taken while we were literally building SE Labs from scratch.

Boxing clever

Building a security lab (literally)First things first. You can never have enough boxes. And never throw them away, because they’ll come in handy later – such as when you move from your temporary space into the permanent office.

Why not start out and build the lab where you mean to end up? Because having a commercial office space ‘fitted out’ takes a lot longer than you might imagine. Choosing the right time of year can help speed this up.

Start-up tip #1: Don’t plan on anything happening fast over the Thanksgiving/ Christmas/ New Year period. Everyone except you will be on a go-slow/ stop. It will make you angry.

22bservers-2232148Ideally you would have all of your expensive servers locked away somewhere safe from thieves, vandals and pretty much anyone carrying too many cups of coffee.

Without that luxury you might have to set up on a desk, near the door, and plaster the windows with paper so people can’t see your new company’s crown jewels sitting vulnerably exposed in an insecure office.

Guerrilla networking

32bworking-5073504When you work from a serviced office you have a choice: rely on their networking infrastructure or create your own. We created our own because sending exploits over someone else’s network is not very friendly and there might be some liability issues too.

One problem with creating your own network in a serviced office is that you can’t really run your networking cables under the floor.

This can mean using cardboard, gaffa tape and cable ties to construct a sort-of over-floor networking setup that is fractionally less hazardous than simply having cables looping all over the floor.

At this stage we were at least able to start work, although we quickly discovered the limitation of cheap network switches and, thanks to the speed of Amazon Prime, managed to upgrade without too much disruption.

Sketchy designs

42bearly2bdesign-7242406While the testers were busy attacking systems and logging how the security products handled these threats, we also had to start work designing the award logos that we would eventually hand out to any vendors who did a great job.

Here are the early sketches, made in the Easy Hotel adjacent to the developing office. As you will see from our reports, the design we ended up with was the round badge. Did we make the right decision?

42bearly2bdesign2b2-2156384Construction time

While all of this was going on, the main office was under construction. You can see the progress below, as the main open-plan office, the server room and our corner office take shape.

Why is there no furniture, even right at the end? Because there was a problem with the delivery and our desks were stuck on a boat somewhere near Europe, while we worked from temporary, bolted-together desks. At least we had chairs…

52bshell2boffice-9428961
One large, empty shell…
62bno2bserver2broom-7992335
The area to the right will become the server room.
72bserver2broom-7726157
The new server room is visible through the window on the right.
82bcorner2boffice-7086269
The corner office, full of junk.
92bcorner2boffice2bempty-8201836
A tidy corner office.
102boffice2bempty-4198428
The open-plan area starts to take shape.
112bmoving2bin-3169822
We moved into the new office with zero days to spare.
122bsignage-4909866
Our name is on the door (sort of).
132bexternal-3721324
After a busy night we head to the pub. This is now our new home.
(The building in the photo. Not the pub.)
142bcorner2boffice2bfull2bagain-3057827
The corner office is now full of junk again.
152bno2bfurniture-9301066
We have chairs but little else.
162bserver2broom2bfilling2bup-5292186
The server room starts to take shape.
 
172bcorner2boffice2bpacked-1388116
A working office space!
182boperating2bserver2broom-4984412
All systems go. Neatly.
202bmessy2bwiring-1314672
Well, neat on the face of it…
192btest2bsystems-9898214
We use physical systems for most tests. So we need a lot of them.

What became of the cardboard boxes? Rumour has it that after the move one of the guys took them all home in a van and built a massive fort for his children.

Contact us

Give us a few details about yourself and describe your inquiry. We will get back to you as soon as possible.

Get in touch

Feel free to reach out to us with any questions or inquiries

info@selabs.uk Connect with us Find us