mal-lang / coreLang

A probabilistic attack simulation language for the (abstract) IT domain
https://mal-lang.org/coreLang/
Other
11 stars 13 forks source link

Fix Specific Access Application Network Connection Through Response #97

Closed andrewbwm closed 1 year ago

andrewbwm commented 1 year ago

When attempting to write Data from an Application where the attacker has gained low-level privileges, specificAccess, we check to see if they have attained the required permissions. This should also be the case for a respond connect attack as it is the attacker manipulating the received Data to induce the creation of responses that give it control. This pull request introduces the authorizedApplicationRespondConnectThroughData attack step to implement that.