CyBOK: Example scenarios

This commit is contained in:
thomashaw
2021-03-18 15:17:43 +00:00
parent a4299f57f4
commit c82b3a590c
2 changed files with 112 additions and 0 deletions

View File

@@ -0,0 +1,58 @@
<?xml version="1.0"?>
<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
<name>A CyBOK tagged lab with VMs</name>
<author>Thomas Shaw</author>
<description>
Example description of the lab. Includes one reading and one video.
</description>
<type>ctf-lab</type>
<type>hackerbot-lab</type>
<type>lab-sheet</type>
<difficulty>easy</difficulty>
<CyBOK KA="AAA">
<topic>Authorisation</topic>
<keyword>access control</keyword>
<keyword>ACCESS CONTROL - DAC (DISCRETIONARY ACCESS CONTROL)</keyword>
<keyword>Unix File Permissions</keyword>
</CyBOK>
<CyBOK KA="C">
<topic>Cryptography</topic>
<keyword>stream ciphers</keyword>
<keyword>substitution ciphers</keyword>
</CyBOK>
<video>
<url>www.example.com</url>
<title>A video!</title>
<description>This is the text section of the video description.</description>
<CyBOK KA="OSV">
<topic>OS Security Principles</topic>
<keyword>security models</keyword>
</CyBOK>
</video>
<!-- Zero to many readings, with zero to many CyBOK areas: -->
<reading>
<url>www.example2.com</url>
<title>An article to read</title>
<CyBOK KA="OSV">
<topic>OS Security Principles</topic>
<keyword>security models</keyword>
</CyBOK>
</reading>
<!-- random system with random vuln, as an example -->
<system>
<system_name>example_system</system_name>
<base />
<vulnerability/>
<network type="private_network" range="dhcp"/>
</system>
</scenario>

View File

@@ -0,0 +1,54 @@
<?xml version="1.0"?>
<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
<name>A CyBOK tagged lab without VMs</name>
<author>Thomas Shaw</author>
<description>
Example description of the lab. Includes one reading and one video.
</description>
<type>no-systems</type>
<difficulty>easy</difficulty>
<!-- Scenario wide CyBOK tags. A scenario can have one to many knowledge areas: -->
<CyBOK KA="AAA">
<topic>Authorisation</topic>
<keyword>access control</keyword>
<keyword>ACCESS CONTROL - DAC (DISCRETIONARY ACCESS CONTROL)</keyword>
<keyword>Unix File Permissions</keyword>
</CyBOK>
<CyBOK KA="C">
<topic>Cryptography</topic>
<keyword>stream ciphers</keyword>
<keyword>substitution ciphers</keyword>
</CyBOK>
<!--
Content tags (i.e. video and reading) are implicitly connected to the scenario level knowledge areas to reduce duplication.
In the case that a piece of content covers knowledge areas outside of the scenario's CyBOK tags, they can have additional content-wide CyBOK tags as seen below.
-->
<!-- Zero to many videos, with zero to many CyBOK areas: -->
<video>
<url>www.example.com</url>
<title>A video!</title>
<description>This is the text section of the video description.</description>
<CyBOK KA="OSV">
<topic>OS Security Principles</topic>
<keyword>security models</keyword>
</CyBOK>
</video>
<!-- Zero to many readings, with zero to many CyBOK areas: -->
<reading>
<url>www.example2.com</url>
<title>An article to read</title>
<CyBOK KA="OSV">
<topic>OS Security Principles</topic>
<keyword>security models</keyword>
</CyBOK>
</reading>
</scenario>