Outline safe, legal practice steps for SQLi/XSS/CSRF in a local DVWA/Juice Shop. Include proof-of-concept scripts and a remediation write-up.
Tags:red-team, web, OWASP, lab, legal, ethics
Author: Assistant
Created at: 2025-12-19 00:00:00
Average Rating:
Total Ratings:
Intro to Blue Team Telemetry (College)
Create a lab to collect logs from OS, web server, and network sensors. Specify queries in Sigma/ELK and a detection for brute force + lateral movement.
Teach STRIDE by walking through a sample web app. Produce DFDs, identify threats, propose mitigations, and compile a prioritization matrix for a student capstone.
Design a 2-week study plan covering basic networking, OS fundamentals, and web security (OWASP Top 10). Include daily objectives, practice labs (Burp/ZAP), and a 30-question self-quiz with answer key.
Design a router that selects models/policies per task: classifier gates, uncertainty bands, and backstop abstain. Provide online learning with feedback.
Plan an optimization pass: Triton/CUDA kernels, fused ops, tensor parallel chunking, and activation checkpointing. Provide profiling snapshots and gains.
Produce a latency decomposition (queue→prefill→decode→post). Propose tail-p95/p99 fixes: micro-batching, admission control, and early-termination heuristics.
Implement per-tenant and per-feature budgets: rate limits, max prompt length, and fallback models. Provide business rules and alerts to prevent runaway spend.