Zero Trust Security

Chapter 4 Initial Design of the Juice Factory Network

The first 90 days goes with trying to understanding your team and the different leaders to help you understand how security can help improve the business. That is not all. You also have to understand the environment we will work in.

Let’s get started with understanding the environment we will work in. In this chapter, we will discuss the initial design of the Juice Factory environment. The environment we will explore throughout this book is a very simplified version of an organisation’s. This environment helps us understand the foundational concepts of cybersecurity.

4.1 Services and Docker Images

The first thing we should look at is the Docker configuration that we will work with. It will be the basis for this environment. It defines the services and applications available in the initial environment design of Juice Factory.

services:
  juice:
    image: bkimminich/juice-shop
    container_name: webapp
    ports:
      - 8080:3000
  bottle-filling_plc:
      image: paradoxxs/virtuaplant:plc
      container_name: bottle-filling_plc
      ports:
        - 5020:5020
        - 3001:3000
  bottle-filling_hmi:
      image: paradoxxs/virtuaplant:hmi
      environment:
        - PLC_SERVER_IP=bottle-filling_plc
        - PLC_SERVER_PORT=5020
      ports:
        - 3002:3000
      depends_on:
        - bottle-filling_plc
  vuln_samba:
    image: vulhub/samba:4.6.3
    container_name: samba
    tty: true
    volumes:
    - ./samba/smb.conf:/usr/local/samba/etc/smb.conf
    - ./samba/data:/storage
    ports:
    - "4450:445"
  postgres:
 image: ...