A Proof-of-Concept for Implementing Automated Cloud Deployments of Red Team Infrastructure скачать в хорошем качестве

A Proof-of-Concept for Implementing Automated Cloud Deployments of Red Team Infrastructure

This presentation was given at the Consortium for Computing Sciences in Colleges (CCSC) Eastern's 41st Annual Regional Conference at Arcadia University, Glenside, Pennsylvania, on October 25th, 2025. Marymount University students Natasha Menon (B.S. in Computer Science, Spring 2025) and Richard Flores (B.S. in Cybersecurity, Fall 2025) presented work completed in a nearly one-year long research project. It covered a potential solution for an easily configurable, secure, and rapidly deployable red team infrastructure through automating the deployment into the cloud using Infrastructure as Code (IaC). It was believed that such an automated deployment process could be valuable to any organization, especially those with limited financial, experience, or human capital resources, such as Small and Medium Businesses (SMBs), in addressing their cybersecurity risks. Combining declarative and imperative code solutions was assessed, the Terraform and Ansible products respectively, to complement each other for consistent deployments. Security best practices were implemented such as segmented subnetting, system hardening, automated key pair creation, and more. The proposed solution is viewed as proof-of-concept that red team infrastructure for engagements could be deployed to the cloud in a secure, predictable, and customizable manner while saving time and money. This work is pending publication in the Journal of Computing Sciences in Colleges.