Security › Module 1 › Lesson 3
No Offensive Playbooks
No offensive architecture means Cyberlium teaches defensive design literacy — write the ethics card into YOUR $ARCH_LAB notes; never draft attack cookbooks or unauthorized target blueprints.
Visual · t41_no_offensive
Defensive design only. $ARCH_LAB only. Original Cyberlium.
Opening
Design literacy is not attack planning — Cyberlium teaches named defensive patterns so you know when to stop at fictional boundaries, not when to blueprint real targets.
Security architecture education covers defense-in-depth layers, zero trust principles, STRIDE threat categories for design review, DMZ segmentation, and cloud reference patterns — vocabulary for interviews and design conversations. Drafting attack paths against real organizations, unauthorized infrastructure, or third-party environments is out of scope — courseware teaches defenders to design well, not attackers to breach live targets. Cyberlium practices ethics sentences on YOUR $ARCH_LAB — 'I practice architecture literacy on fictional org LAB-ARCH-001 and refuse offensive attack cookbooks' — never copy lab threat notes into unauthorized penetration plans against real systems. Next: Lab Setup.
1. Defensive vs offensive boundaries (named)
Defensive: naming trust boundaries, layering controls, documenting STRIDE mitigations on $ARCH_LAB templates, reviewing fictional DMZ designs. Offensive: attack cookbooks against live targets, unauthorized target architecture, breach playbooks for real environments — explicitly refused in Topic 41.
On $ARCH_LAB, write three refusal triggers — e.g., real company diagram import, attack path against live IP, employer architecture without ticket — where you stop and rewrite to fictional scope.
Command guide
Try these commands — Defensive vs offensive boundaries (named)
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
OWASP Threat Modeling — https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html Microsoft SDL threat modeling — https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
cat > "$ARCH_LAB/notes/defensive-only.txt" <<'EOF'
SCOPE: YOUR lab folder $HOME/cyberlium-lab/t41-arch/ — fictional LAB-ARCH-001 templates only
EDUCATIONAL: defensive architecture literacy — NOT penetration testing against strangers
NEVER: offensive attack cookbooks; exploit chains against production or third-party systems
NEVER: bypass how-tos intended to defeat real controls without authorization
ALLOWED: STRIDE worksheets (markdown); architecture diagrams (markdown/mermaid-style text)
ALLOWED: DFD markdown; defense-in-depth layer diagrams; SABSA attribute stubs
ALLOWED: control selection tables; review checklists; curl public framework literacy pages
LABEL: all artifacts LAB SAMPLE — fictional LAB-ARCH-001 literacy only
EOFCommand — copy this
grep -E 'SCOPE|NEVER|ALLOWED|LAB SAMPLE' "$ARCH_LAB/notes/defensive-only.txt"
python3 -c "print('Ethics: defensive architecture literacy only — no attack cookbooks')"Primary tools to practice this lesson: grep, python3. Reference sites: OWASP Threat Modeling (https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html); Microsoft SDL threat modeling (https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Why ethics protects learners and employers
Misrepresenting courseware literacy as authorization to attack real systems creates liability for you and your organization. Victim harm: unauthorized architecture mapping enables real breaches. Defenders design controls and document boundaries — students practice naming refusal habits on lab scenarios only.
Students document ethics habits on notes — production architecture follows change control and authorized assessment programs.
3. Ethics card habit
Forbidden: presenting $ARCH_LAB diagrams as live target maps, sharing attack cookbooks in lab notes, importing employer production VLAN exports without scope. Allowed: ethics card — defensive scope, NEVER list, refusal sentence for offensive architecture.
Ship: architecture ethics card with defensive disclaimer and one refusal sentence. Next: Lab Setup.
4. What you ship: architecture ethics card with defensive disclaimer
Defensive scope, NEVER offensive architecture list, refusal sentence. $ARCH_LAB named. chmod 600.
5. What you record before the next lesson
Date. Ethics card. $ARCH_LAB named. File t41-m01-l03-no-offensive.txt chmod 600.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Tell classmate lab STRIDE notes are attack plan for real company. Skip ethics card because 'it's obvious.'
Right
Write architecture ethics card with defensive disclaimer for YOUR $ARCH_LAB. Next: Lab Setup.
Mission: write YOUR no-offensive-architecture ethics habit
1) List three NEVER items (attack cookbooks, unauthorized target blueprints, employer diagram imports without scope). 2) Write one refusal sentence for offensive architecture requests. 3) Name defensive scope of $ARCH_LAB and LAB-ARCH-001. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Name defensive patterns for literacy — refuse attack cookbooks and unauthorized target maps.
Knowledge Check
APPLY: No offensive architecture on Cyberlium means:
Multiple choice
Knowledge Check
APPLY: True or False: Cyberlium architecture lessons are defensive design literacy — not attack cookbooks.
True or False
Knowledge Check
APPLY: Forum post shares attack cookbook against live company — you:
Multiple choice