From c82b3a590c982d70749a4c2bf1cf8cb82b4c883c Mon Sep 17 00:00:00 2001
From: thomashaw <thomashaw@gmail.com>
Date: Thu, 18 Mar 2021 15:17:43 +0000
Subject: [PATCH] CyBOK: Example scenarios

---
 scenarios/examples/cybok_example.xml          | 58 +++++++++++++++++++
 .../examples/cybok_example_no_systems.xml     | 54 +++++++++++++++++
 2 files changed, 112 insertions(+)
 create mode 100644 scenarios/examples/cybok_example.xml
 create mode 100644 scenarios/examples/cybok_example_no_systems.xml

diff --git a/scenarios/examples/cybok_example.xml b/scenarios/examples/cybok_example.xml
new file mode 100644
index 000000000..fc6b1bda9
--- /dev/null
+++ b/scenarios/examples/cybok_example.xml
@@ -0,0 +1,58 @@
+<?xml version="1.0"?>
+
+<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
+	   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	   xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
+
+	<name>A CyBOK tagged lab with VMs</name>
+	<author>Thomas Shaw</author>
+	<description>
+		Example description of the lab. Includes one reading and one video.
+	</description>
+	<type>ctf-lab</type>
+	<type>hackerbot-lab</type>
+	<type>lab-sheet</type>
+	<difficulty>easy</difficulty>
+
+
+	<CyBOK KA="AAA">
+		<topic>Authorisation</topic>
+		<keyword>access control</keyword>
+		<keyword>ACCESS CONTROL - DAC (DISCRETIONARY ACCESS CONTROL)</keyword>
+		<keyword>Unix File Permissions</keyword>
+	</CyBOK>
+	<CyBOK KA="C">
+		<topic>Cryptography</topic>
+		<keyword>stream ciphers</keyword>
+		<keyword>substitution ciphers</keyword>
+	</CyBOK>
+
+	<video>
+		<url>www.example.com</url>
+		<title>A video!</title>
+		<description>This is the text section of the video description.</description>
+		<CyBOK KA="OSV">
+			<topic>OS Security Principles</topic>
+			<keyword>security models</keyword>
+		</CyBOK>
+	</video>
+
+	<!-- Zero to many readings, with zero to many CyBOK areas: -->
+	<reading>
+		<url>www.example2.com</url>
+		<title>An article to read</title>
+		<CyBOK KA="OSV">
+			<topic>OS Security Principles</topic>
+			<keyword>security models</keyword>
+		</CyBOK>
+	</reading>
+
+	<!-- random system with random vuln, as an example -->
+	<system>
+		<system_name>example_system</system_name>
+		<base />
+		<vulnerability/>
+		<network type="private_network" range="dhcp"/>
+	</system>
+
+</scenario>
diff --git a/scenarios/examples/cybok_example_no_systems.xml b/scenarios/examples/cybok_example_no_systems.xml
new file mode 100644
index 000000000..56e719d5a
--- /dev/null
+++ b/scenarios/examples/cybok_example_no_systems.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0"?>
+
+<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
+	   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	   xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
+
+	<name>A CyBOK tagged lab without VMs</name>
+	<author>Thomas Shaw</author>
+	<description>
+		Example description of the lab. Includes one reading and one video.
+	</description>
+	<type>no-systems</type>
+	<difficulty>easy</difficulty>
+
+	<!-- Scenario wide CyBOK tags. A scenario can have one to many knowledge areas: -->
+	<CyBOK KA="AAA">
+		<topic>Authorisation</topic>
+		<keyword>access control</keyword>
+		<keyword>ACCESS CONTROL - DAC (DISCRETIONARY ACCESS CONTROL)</keyword>
+		<keyword>Unix File Permissions</keyword>
+	</CyBOK>
+	<CyBOK KA="C">
+		<topic>Cryptography</topic>
+		<keyword>stream ciphers</keyword>
+		<keyword>substitution ciphers</keyword>
+	</CyBOK>
+
+	<!--
+		Content tags (i.e. video and reading) are implicitly connected to the scenario level knowledge areas to reduce duplication.
+		In the case that a piece of content covers knowledge areas outside of the scenario's CyBOK tags, they can have additional content-wide CyBOK tags as seen below.
+	 -->
+
+	<!-- Zero to many videos, with zero to many CyBOK areas: -->
+	<video>
+		<url>www.example.com</url>
+		<title>A video!</title>
+		<description>This is the text section of the video description.</description>
+		<CyBOK KA="OSV">
+			<topic>OS Security Principles</topic>
+			<keyword>security models</keyword>
+		</CyBOK>
+	</video>
+
+	<!-- Zero to many readings, with zero to many CyBOK areas: -->
+	<reading>
+		<url>www.example2.com</url>
+		<title>An article to read</title>
+		<CyBOK KA="OSV">
+			<topic>OS Security Principles</topic>
+			<keyword>security models</keyword>
+		</CyBOK>
+	</reading>
+
+</scenario>