How To

Red Team Versus Blue Team: How to Run an Effective Simulation

Playing the role of an attacker can make your team better at defense. Our step by step guide to war gaming your security infrastructure--from involving the right people to weighing a hypothetical vs. live event.

By Robin Mejia

"Many people migrate from a wired network to a wireless one assuming it works exactly the same, because from their perspective it does work the same," explains Parks. "They don't realize that there are different characteristics that provide different attack surfaces."

"Red-teaming is good at helping the customer understand interdependencies," says Clem, who advocates bringing a red-team mentality to design decisions. He wants his clients to think, How does that added functionality affect security? What could the bad guy do if we do that?

Robin Mejia is a freelance writer based in California. Send feedback to Editor Derek Slater at dslater@cxo.com.

• Email
• Print
• Comments
• Digg This
• SlashDot

• Tabletop Exercises: Three Sample Scenarios
• Security Simulations: This Is Only A Test
• Details: A Scenarios Played Out In The Financial Services ISAC Tabletop Exercise In April
• EBay Aims to Help Security Officers through Red Team Confab