Skill UI

This comprehensive guide details the deployment and configuration of Tofino industrial firewalls to secure critical SCADA and PLC systems. It utilizes Deep Packet Inspection (DPI) capabilities for core OT protocols (Modbus, EtherNet/IP, S7comm), ensuring strict access control and enforcing IEC 62443 zone boundaries. Ideal for segmenting control networks and providing compensating controls for unpatchable legacy equipment.

This guide details the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following the stringent standards of IEC 62443-3-2. It enables risk-based network partitioning, assigning Security Level Targets (SL-T), and enforcing granular conduit controls. Use this when retrofitting flat OT networks or designing greenfield facilities to achieve IEC 62443 compliance, validating boundaries against the Purdue Reference Model.

This skill details implementing robust container supply chain security using Cosign, a Sigstore tool. It supports both key-based and keyless (OIDC) signing, integrating with Fulcio and Rekor. Use it to verify image provenance, attach critical attestations (like SBOMs and SLSA), and enforce secure image policies in Kubernetes environments.

Automate security scanning for Infrastructure as Code (IaC) using best-in-class tools like Checkov and tfsec. This method analyzes Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations, enforce policy-based governance, and prevent common security vulnerabilities (e.g., public S3 buckets) before deployment. Essential for establishing secure CI/CD pipelines and meeting compliance standards.

This skill details how to implement robust network segmentation and zero-trust security within Kubernetes clusters using Calico's NetworkPolicy and GlobalNetworkPolicy resources. It covers advanced concepts such as default-deny rules, policy ordering, and service-account-based selectors, making it essential for building and auditing secure east-west and north-south traffic controls.

Guides the implementation of Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. This process involves labeling namespaces with security profiles (Privileged, Baseline, Restricted) and enforcing policies via 'enforce', 'audit', or 'warn' modes. It is crucial for hardening container workloads, migrating away from deprecated PodSecurityPolicy, and ensuring compliance at the namespace level.

This guide details implementing microsegmentation using Akamai Guardicore Segmentation. It helps map application dependencies, visualize east-west traffic flows, and establish granular, least-privilege network policies across diverse environments (VMs, containers, bare metal, cloud). Essential for achieving zero-trust architecture and meeting compliance standards like PCI DSS or HIPAA by preventing lateral movement.

A comprehensive guide detailing the implementation of 802.1X port-based Network Access Control (NAC) using RADIUS authentication and platforms like PacketFence. This solution enforces identity-based access, performs endpoint posture assessment, and dynamically assigns VLANs. It is essential for establishing zero-trust networks, meeting stringent compliance standards (PCI-DSS, HIPAA), and automating the onboarding of BYOD devices.

This guide details the deployment of Cisco Identity Services Engine (ISE) for comprehensive Network Access Control (NAC). It utilizes 802.1X authentication, MAC Authentication Bypass (MAB), and posture assessment to enforce security policies. Key features include integrating with Active Directory, assigning dynamic VLANs, and applying TrustSec Security Group Tags (SGTs) for advanced network segmentation in enterprise environments.

A comprehensive guide for deploying and managing network deception systems using industry-leading honeypot platforms like OpenCanary, T-Pot, and Cowrie. This skill helps security professionals detect unauthorized access attempts, trace lateral movement, and gather critical threat intelligence by simulating vulnerable services within a controlled environment. Ideal for enhancing network security architecture and creating early warning indicators for intrusions.

This guide details the deployment and configuration of Suricata as a high-performance, inline Intrusion Prevention System (IPS). It covers setting up NFQueue mode, writing custom detection rules, managing commercial and community rulesets (like Emerging Threats), and optimizing performance for active, real-time blocking of malicious network traffic. Essential for robust security architecture and compliance.

A comprehensive guide to implementing Kubernetes NetworkPolicies, which enforce granular ingress and egress rules at the pod level. This skill enables zero-trust microsegmentation by defining default-deny rules, allowing specific traffic flows (like DNS or inter-service communication), and blocking sensitive access (e.g., cloud metadata). Essential for securing containerized workloads and preventing lateral movement within a cluster.