Discover cmu-sei/MORE Open Source project

GHOSTS is a realistic user simulation framework for cyber experimentation, simulation, training, and exercise

1,547

GHOSTS

463

SCALe

SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.

285

gbtl

GraphBLAS Template Library (GBTL): C++ graph algorithms and primitives using semiring algebra as defined at graphblas.org

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file tickets, bug reports, or pull requests at the upstream home in @CERTCC: https://github.com/certcc/kaiju

129

kaiju

Java

125

BigGrep

A scalable search index for binary files

The SCADA Simulator is a configurable system that presents itself as a SCADA system within an exercise environment. It has a web-accessible user interface and generates modbus traffic on the network.

114

SCADASim

A tool to extract structured cyber information from incident reports.

108

cyobstract

A tool to host an Internet simulation

greybox

Scripts to generate an Internet simulation

topgen

Wireless adapter emulation

welled

juneberry

Juneberry improves the experience of machine learning experimentation by providing a framework for automating the training, evaluation and comparison of multiple models against multiple datasets, reducing errors and improving reproducibility.

Demangles C++ symbol names genarated by Microsoft Visual C++ in order to retrieve the original C++ declarations.

pharos-demangle

Crucible is a modular framework for creating, deploying, and managing virtual environments to support training, education, and exercises.

crucible

A simple virtual lab builder/player

TopoMojo

sa-bAbI

sa-bAbI is a software assurance dataset generator similar to the natural language dataset generator

GHOSTS Animator is a library and API for generating realistic NPCs for training and exercise.

GHOSTS-ANIMATOR

pdfrankenstein

Python tool for bulk PDF feature extraction. This tool is a prototype.

This program generates cyber attack scenarios for use in cyber training exercises, red team planning, blue team planning, automated attack execution, and cybersecurity policy analysis.

CDAS

FinSim is a financial simulation tool for exercise environments. It provides students the opportunity to investigate a model financial system and its associated security concerns.

finsim

A virtual appliance for building cyber labs, challenges and competitions

foundry-appliance

SPECTRE enables GHOSTS clients to have and build individual preferences over time.

GHOSTS-SPECTRE

vtunnel

vTunnel is a tool that proxies IP traffic between guest and host networks.

AASPE

A set of modeling tools for security analysis (attack tree, attack impact) and a code generator to produce code for the seL4 platform from AADL models.

Java

TopoMojo-v1

Virtual Lab builder and player

nabu

Graphical analysis of PDF structure.

Tools to identify complexity in software models (e.g., SCADE, AADL).

eraces

Tcl

usersim

An agent that performs user actions on a workstation

cmu-sei.github.io

SEI GitHub landing page.

Source Code Analysis Integrated Framework Environment (SCAIFE) API: YAML specification

SCAIFE-API

Polar is a secure and scalable knowledge graph framework, designed to address the challenges posed by building big data systems in highly regulated environments, and improve observability for DevSecOps Organizations.

Polar

Rust

feud

AI Division, Reverse Engineering CNN Trojans

SEER is a platform for assessing the performance of cybersecurity training and exercise participants.

cert-rosecheckers

SEER

JavaScript

DRAT

Deployment Recovery Automation Technology

An application to search BGP Update files for CIDR blocks or Autonomous Systems.

bgpuma

Spacefaring cyber competition video game

cubespace

DevSecOps-Model

Valkyrie Framework is an open source suite of tools that enable hunt teams to locate and identify hidden cybersecurity threats lurking in network traffic.

Valkyrie_Framework

SilkWeb

topomojo-ui-v1

A wiki knowledge base the links architecture principles to NoSQL product features to support designers of scalable data-intensive systems.

quabasebd

PHP

redemption

Redemption is a tool that automatically repairs C/C++ code given a set of static-analysis alerts

Augur is a toolset that helps simulate and detect drift in different types of datasets, to define the best metrics that can be used to predict drift before it happens.

augur-code

Crucible.Appliance

A role to install and configure the SiLK analysis and collection tools.

ansible-role-silk

Stormbox is an "internet user simulator" that is designed to simulate the transient, temporary, and anonymous nature of typical internet users during a cyber wargame.

Stormbox

The Virtualization Abstraction Layer is a proof-of-concept library to allow projects that rely on hypervisors to easily switch between virtualization technologies.

Identity

virtualization-abstraction-layer

Cyber-Ticket-Studio

CTS is a tool that enables users to explore, search, sort, mine, and visualize large numbers of cyber incident tickets (and some other kinds of tickets) at the same time.

Player.Ui

Player is the centralized interface where users, teams, and administrators go to configure and participate in the cyber exercise.

Gameboard is a flexible web platform that provides game design capabilities and a competition-ready user interface.

gameboard-ui-v2

Console.Ui is a UI application that displays and interacts with VMware virtual machine consoles. The Crucible VM project uses Console.Ui to display virtual machines.

Console.Ui

cloud-migration-for-managers

topomojo-ui

Code in support of SEI 2022 Line project on threat hunting games.

threat-hunting-games

AUTOCATS is the automated code analysis testing suite, used by projects like CERT Kaiju. This repository is a "mirror" -- please file tickets, bug reports, or pull requests at the upstream home in @CERTCC: https://github.com/certcc/autocats

autocats

The Collaborative Incident Threat Evaluator allows exercise participants to assess the severity of an incident using a scale such as the National Cyber Incident Scoring System.

Gameboard

CITE.Ui

Caster is the primary deployment component of the Crucible framework. Caster provides a web interface that gives exercise developers a way to create, share, and manage topology configurations.

Caster.Api

helm-charts

Smarty

gameboard-v2

Gameboard is a flexible web platform that provides game design capabilities and a competition-ready user interface.

vessel

Vessel is a project with the goal of promoting reproducible container builds. The first version of the Vessel tool compares two built container images and reports on differences between them, flagging as many known issues as possible.

Steamfitter.Ui

Steamfitter.Ui gives exercise developers the ability to create scenarios consisting of a series of scheduled tasks, manual tasks, and injects which run against virtual machines in a view.

Caster is the primary deployment component of the Crucible framework. Caster provides a web interface that gives exercise developers a way to create, share, and manage topology configurations.

Caster.Ui

An ansible role for configuring and managing the rwflowpack service.

ansible-role-rwflowpack

A sample workspace for the Juneberry machine learning tool.

juneberry-example-workspace

This repository hosts Eclipse-related files for the Enabling Evidence-Based Modernization project.

eem

Java

TEC

A tool that allows users to detect ML Mismatch during the development, deployment, and maintenance of a ML component.

Vue

ghosts-cyber-range-and-exercise-simulation-tools

Range and simulation tools for executing realistic training and exercise events

FALSA-model-problem

The FALSA model problem is a software that simulates an autonomous drone mission and its intended use is for research in assurance.

scir-oss is a tool that integrates public data and information regarding open source software projects and their products into a Project, Product, Protection, and Policy report (OSS-P4/R).

scir-oss

gamebrain

Official dockerfile for the Ubuntu based SiLK Live! training system.

certccsilklive

Dockerfile

osticket-crucible

A plugin for osTicket that provides authentication against an OAuth2 identity server and posts ticket event notifications to the Crucible API.

PHP

Player.Api

Player is the centralized interface where users, teams, and administrators go to configure and participate in the cyber exercise.

AppMailRelay

Gallery.Ui

Gallery is an exercise inject visualization tool. It allows various types of inject data to be displayed, categorized, and searched by exercise participants.

A set of descriptors used to support TEC the ML Mismatch detection tool, and other future tools.

ml-mismatch-descriptors

REST

REST is a simple J2EE based application that is designed to exposed RDBMS database via webservices. REST software is designed to simplify integration of several RDBMS datasources to a JSON/XML for frameworks like jQuery etc.

JavaScript

UnitML

The Vm.Api is the backend restful API for the VM application that integrates with Player to display and manage virtual machines.

Vm.Api

augur-results

Augur is a toolset that helps simulate and detect drift in different types of datasets. This repo contains the results of experiments run using the toolset.

Blueprint.Ui

An ansible role for installing, configuring, and managing the YAF service.

ansible-role-yaf