oxbrbtx/PrimAITE
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

#2689 Improved terminal session handling.

Browse Source
This commit is contained in:
Archer Bowen
2024-08-15 13:10:47 +01:00
parent e53ac84666
commit c50b005c37
3 changed files with 112 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
src/primaite/notebooks/Command-&-Control-E2E-Demonstration.ipynb
View File

@@ -1557,7 +1557,7 @@
"source": [
"The code cell below goes through 10 timesteps and displays the differences between the default and the current timestep.\n",
"\n",
"You will notice that the only observation space differences after 10 timesteps. This is due to the C2 Suite confirming their connection through sending ``Keep Alive`` traffic across the network."
"You will notice that the only two timesteps displayed observation space differences. This is due to the C2 Suite confirming their connection through sending ``Keep Alive`` traffic across the network every 5 timesteps."
]
},
{
@@ -1575,7 +1575,7 @@
"cell_type": "markdown",
"metadata": {},
"source": [
"Next, the code cells below configuring the C2 Beacon's Keep Alive Frequency to confirm connection on every timestep."
"Next, the code cells below configure the C2 Beacon to confirm connection on every timestep via changing the ``keep_alive_frequency`` to ``1``."
]
},
{
@@ -1593,7 +1593,7 @@
"cell_type": "markdown",
"metadata": {},
"source": [
"The code cells below demonstrate that the observation impacts of the Keep Alive can be seen on every timestep. "
"Demonstrating that the observation impacts of the Keep Alive can be seen on every timestep:"
]
},
{
@@ -1608,6 +1608,29 @@
" display_obs_diffs(default_obs, keep_alive_obs, blue_config_env.game.step_counter)"
]
},
{
"cell_type": "markdown",
"metadata": {},
"source": [
"Additionally, the keep_alive_frequency can also be used to configure the C2 Beacon to confirm connection less frequently. \n",
"\n",
"The code cells below demonstrate the impacts of changing the frequency rate to ``7`` timesteps."
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {},
"outputs": [],
"source": [
"c2_beacon.configure(c2_server_ip_address=\"192.168.10.21\", keep_alive_frequency=7)\n",
"\n",
"# Comparing the OBS of the default frequency to a timestep frequency of 7\n",
"for i in range(7):\n",
" keep_alive_obs, _, _, _, _ = blue_config_env.step(0)\n",
" display_obs_diffs(default_obs, keep_alive_obs, blue_config_env.game.step_counter)"
]
},
{
"cell_type": "markdown",
"metadata": {},
@@ -1618,8 +1641,17 @@
"\n",
"In the real world, Adversaries take defensive steps to reduce the chance that an installed C2 Beacon is discovered. One of the most commonly used methods is to masquerade c2 traffic as other commonly used networking protocols.\n",
"\n",
"In primAITE, red agents can begin to simulate stealth behaviour by configuring C2 traffic to use different protocols mid episode or between episodes. \n",
"Currently, red agent actions are limited to using ports: ``DNS``, ``FTP`` and ``HTTP`` and protocols: ``UDP`` and ``TCP``.\n",
"In primAITE, red agents can begin to simulate stealth behaviour by configuring C2 traffic to use different protocols mid episode or between episodes.\n",
"\n",
"Currently, red agent actions support the following port and protocol options:\n",
"\n",
"| Supported Ports | Supported Protocols |\n",
"|------------------|---------------------|\n",
"|``DNS`` | ``UDP`` |\n",
"|``FTP`` | ``TCP`` |\n",
"|``HTTP`` | |\n",
"\n",
"\n",
"\n",
"The next set of code cells will demonstrate the impact this option from a blue agent perspective."
]