Enterprise Security (Cloud and IoT)

Part 2: Cloud Security

Lecturer: Enda Lee

Contact/ Email: enda.lee@tudublin.ie

---

Lab 1

📄 Set up a virtualized Linux server environment

Lab 2

📄 2.1 Introduction

📄 2.2 Environment Setup

📄 2.3 TLS/ HTTPS

📄 2.4 Ingress - Reverse Proxy and Routes

📄 2.5 Internal Apps and Services

📄 2.6 Logging and Troubleshooting

📄 2.7 Rate Limiting with Traefik

Lab 3

📄 1. Introduction

📄 2. Keycloak Setup

📄 3. Keycloak Login and Management

📄 4. Protect a single Application

📄 5. Single Sign On (SSO)

📄 6. Troubleshooting

Lab 4

📄 1. Overview and Architecture

📄 2.Prepare the Environment

📄 3. Traefik Access Logs and Add CrowdSec

📄 4. Test CrowdSec Decisions, Remediation, and Blocking Workflow

📄 5. Vulnerability Scanning with Trivy

📄 6. Web Application Testing with OWASP ZAP

📄 7. Coraza WAF Add-On

📄 8. Troubleshooting, Review, and Final Exercises

Lab 5

📄 1. Overview and Architecture

📄 2. Prepare the Environment

📄 3. Logging with Dozzle

📄 4. Loki and Promtail

📄 5. cAdvisor and Prometheus

📄 6. Visualisation and Alerting with Grafana

📄 7. Using Logs and Metrics Together

📄 8. Hardening the Observability Stack

📄 9. Troubleshooting, Review, and Final Exercises

Using VS Code to work with VMs and Containers

Read and try for this for labs: VS Code Remote Development using SSH

1. Install the Remote - SSH Extension in VS Code.

2. Install the Remote Development Extension in VS Code.

3. Use remote explorer in VS Code to connect to your VM.

   Use the ssh command ssh -p 2222 lab-user@localhost to connect VS Code to your VM and enter your password when prompted.

4. Once connected, use open folder to open you home directory on the VM (enter ~ or the full path, e.g. /home/lab-user

5. Use VS Code file explorer and terminal to work with your VM.

Reading

Linux Journey (Highly Recommended)

• Why: The absolute best starting point. It breaks Linux down into small, bite-sized modules. It covers permissions, processes, and text processing visually.
• Focus: Complete the "Command Line" and "Text" sections for this module.

OverTheWire: Bandit Wargame (Gamified)

• Why: A game where you learn Linux commands to "hack" into the next level. Level 1 requires SSH, Level 2 requires file reading, etc.
• Focus: Levels 0–10 are perfect for practicing SSH, grep, find, and file permissions.

The Linux Command Line (Free Book)

• Why: The standard textbook for Linux. The author, William Shotts, offers the PDF for free.
• Focus: Chapter 6 (Redirection) and Chapter 19 (Regular Expressions/Grep).

Docker Curriculum

• Why: A comprehensive, plain-English tutorial created by a developer, not a corporation. It covers everything from "Hello World" to deploying on AWS.
• Focus: Sections 1 through 4 (Basics to Docker Compose).

Play with Docker

• Why: An official browser-based sandbox. If your local VM breaks or you don't have enough RAM, you can spin up a Docker instance inside your web browser for free (requires Docker Hub account).
• Focus: Use this to practice multi-container networking without breaking your own laptop.

Print these out or keep them bookmarked during Labs.

• Docker CLI Cheatsheet (Official PDF)
• Linux Command Line Cheatsheet (Cheatography)
• Crontab.guru: Essential for understanding Linux scheduled tasks (cron jobs).

Useful Links & Resources

🔗 World's Biggest Data Breaches & Hacks

🔗 https://webutils.io/

🔗 Traefik Examples

🔗 Mermaid Charts for Markdown

🔗 Kroki - Diagrams as code

---

Enda Lee 2026