Attack graph
State-based exploration: progressive construction of every path an attacker can take through the topology.
Complementary to strategic scenarios
Strategic scenarios start from stakeholders and move down to a target. The attack graph starts from the compromise state and explores what it makes possible. The two approaches overlap without replacing each other.
What a node is
A node is not a zone: it is a zone + the compromise states already acquired. The same zone can therefore appear several times in the graph, with different compromise levels — an attacker who has obtained credentials is not in the same state as one who has just arrived.
The initial state is denoted ∅ (no state).
Iterative construction
The page works through successive iterations:
- The analysis queue lists the active nodes of the current iteration.
- For each node, the applicable actions are proposed, with their target zone, the link used, the resulting states and the vulnerabilities involved.
- You select the actions to keep and click Apply.
- The new nodes enter the queue for the next iteration.
The exploration stops when no node is active anymore: the graph is complete or no action is applicable.
A node is marked TERMINAL when it leads nowhere, or TERMINAL (cycle) when it leads back to an already-reached state.
The built graph
A table summarizes each arc: source node, action, phase, target zone, destination node and terminal status. A second table lists all nodes with their badge (active / terminal).
Prerequisite
The page stays empty until at least one zone is defined: first configure the facility and the topology.
The Reset button clears the graph and starts over from the initial state.