mal-lang / coreLang

A probabilistic attack simulation language for the (abstract) IT domain
https://mal-lang.org/coreLang/
Other
10 stars 12 forks source link

Rework IAM assets to use a common abstract class #71

Closed andrewbwm closed 2 years ago

andrewbwm commented 2 years ago

Create IAMObject abstract asset that contains the basic identity access management role logic shared by Identity, Group, and Privileges assets. The core functionality is allowing the attacker to utilise all of the privileges associated with a particular role, other asset specific behaviour is handled in the individual classes.

Also included in this pull request is the account management association for IAMObject assets. This allows the attacker to use an IAMObject to assume the other IAMObjects which it manages.