search

mal-lang / coreLang

A probabilistic attack simulation language for the (abstract) IT domain
https://mal-lang.org/coreLang/
Other
10 stars 12 forks source link

Transit Data Access Fix #38

Closed andrewbwm closed 3 years ago

andrewbwm commented 3 years ago

This commit makes it so that the read, write, and delete attack steps only trigger via eavesdrop(only read) or man in the middle(all three) attack steps.

In addition to the changes discussed with @skatsikeas this commit also removes access via accessNetworkData. I believe that is the intention, but I may be incorrect. @skatsikeas can you confirm that we only expect to expose data transiting over the network via eavesdrop and man in the middle?

skatsikeas commented 3 years ago

In addition to the changes discussed with @skatsikeas this commit also removes access via accessNetworkData. I believe that is the intention, but I may be incorrect. @skatsikeas can you confirm that we only expect to expose data transiting over the network via eavesdrop and man in the middle?

I do think that this is what we would actually want to have. The only reason for not having it previously is, most probably, that I have implemented the eavesdrop and MiTM defenses after the dataInTransit were introduced and were therefore forgotten unchanged.