search

mal-lang / coreLang

A probabilistic attack simulation language for the (abstract) IT domain
https://mal-lang.org/coreLang/
Other
11 stars 13 forks source link

Make Identities hierarchical #20

Closed skatsikeas closed 4 years ago

skatsikeas commented 4 years ago

Allow hierarchical identities to inherit the privileges of the parent ones. This will work as Groups of Identities.

skatsikeas commented 4 years ago

This simple top-to-bottom inheritance of privileges was implemented in https://github.com/mal-lang/coreLang/commit/7276d184ac2f1d7e47fc05c895ae6535070d927b.

What is left to do/investigate is if we also need bottom-to-top inheritance (i.e. as it happens on a domain name based scheme)

skatsikeas commented 4 years ago

This topic was enhanced even more with the addition of Groups on https://github.com/mal-lang/coreLang/commit/e0872a388156dae9d79f0c36c662d999959ae822. Right now, compromising a Group does not lead to assumption of all the Identities that belong on that group but does provide all the privileges that are assigned on that Group and on the parent Group. While, compromising an Identity that groups other Identities (i.e. group of assumed privileges) leads to assumption of all the parent Identities.