mal-lang / coreLang

A probabilistic attack simulation language for the (abstract) IT domain
https://mal-lang.org/coreLang/
Other
11 stars 13 forks source link
domain-specific-language mal threat-modeling

coreLang

coreLang is a probabilistic modeling and simulation language for the abstract domain of IT. More specifically, it is a domain specific language (DSL) created with MAL (the Meta Attack Language).

Project's file structure

This project has the following structure:

Since this is a Maven project it is ought to be opened by any compatible IDE or to be used with the mvn command line tool.

Acknowledgements

This work has received funding from the European Union's H2020 research and innovation programme under the project SOCCRATES and Grant Agreement no. 833481, the Swedish Civil Contingencies Agency through the research centre Resilient Information and Control Systems (RICS), as well as the ERA-NET project HONOR, funded under grant agreement no. 646039 and no. 7759750.

Previous work

Project Link
Old coreLang https://github.com/pontusj101/coreLang
Core MAL specification of awsLang https://gist.github.com/maxwalls/ace99182d064087d2023553337e953c4
Paper Link
Katsikeas, S. et al. Development and validation of coreLang: A threat modeling language for the ICT domain, Computers & Security, 2024 https://doi.org/10.1016/j.cose.2024.104057
Katsikeas, S. et al. Empirical evaluation of a threat modeling language as a cybersecurity assessment tool, Computers & Security, 2024 https://doi.org/10.1016/j.cose.2024.103743
Katsikeas, S. et al. An Attack Simulation Language for the IT Domain. In: Eades III, H., Gadyatskaya, O. (eds) Graphical Models for Security. GraMSec 2020. Lecture Notes in Computer Science https://doi.org/10.1007/978-3-030-62230-5_4

License

Copyright © 2019-2021 coreLang contributors

All files distributed in the coreLang project are licensed under the Apache License, Version 2.0, except for the following files:

File License
Application.svg Application.svg "code" icon by iconsphere from the Noun Project is licensed under CC BY 3.0.
ConnectionRule.svg Connection.svg "connection" icon by faisalovers from the Noun Project is licensed under CC BY 3.0.
Credentials.svg Credentials.svg "Key" icon by Eagle Eye from the Noun Project is licensed under CC BY 3.0.
Data.svg Data.svg "Data" icon by Aybige from the Noun Project is licensed under CC BY 3.0.
Exploit.svg Exploit.svg "Biohazard" icon by lastspark from the Noun Project is licensed under CC BY 3.0.
Identity.svg Identity.svg "identity card" icon by SBTS from the Noun Project is licensed under CC BY 3.0.
Information.svg Information.svg "Information" icon by Vincencio from the Noun Project is licensed under CC BY 3.0.
Network.svg Network.svg "Network" icon by mardjoe from the Noun Project is licensed under CC BY 3.0.
PhysicalZone.svg PhysicalZone.svg "Location" icon by Sergey Novosyolov from the Noun Project is licensed under CC BY 3.0.
RoutingFirewall.svg RoutingFirewall.svg "Router" icon by SBTS from the Noun Project is licensed under CC BY 3.0.
SoftwareProduct.svg SoftwareProduct.svg "code" icon by Cassandra Cappello from the Noun Project is licensed under CC BY 3.0.
System.svg System.svg "Server" icon by Icons Field from the Noun Project is licensed under CC BY 3.0.
User.svg User.svg "profile" icon by Gagana from the Noun Project is licensed under CC BY 3.0.
Vulnerability.svg Vulnerability.svg "Shield broken" icon by Yuri Mazursky from the Noun Project is licensed under CC BY 3.0.
Group.svg Group.svg "group" icon by beth bolton from the Noun Project is licensed under CC BY 3.0.

See LICENSE and NOTICE for details.