8c0ca8cfbc
- Re-added the hard-coded mean rewards per episode values from a rpe-trained agent to the deterministic test in test_seeding_and_deterministic_session.py - Partially tidies up some tests in test_observation_space.py; Still some work to be done on this at a later date.
340 lines
12 KiB
Python
340 lines
12 KiB
Python
"""Test env creation and behaviour with different observation spaces."""
|
|
|
|
import numpy as np
|
|
import pytest
|
|
|
|
from primaite.environment.observations import NodeLinkTable, NodeStatuses, ObservationsHandler
|
|
from tests import TEST_CONFIG_ROOT
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_without_obs.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
def test_default_obs_space(temp_primaite_session):
|
|
"""Create environment with no obs space defined in config and check that the default obs space was created."""
|
|
with temp_primaite_session as session:
|
|
session.env.update_environent_obs()
|
|
|
|
components = session.env.obs_handler.registered_obs_components
|
|
|
|
assert len(components) == 1
|
|
assert isinstance(components[0], NodeLinkTable)
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_without_obs.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
def test_registering_components(temp_primaite_session):
|
|
"""Test regitering and deregistering a component."""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
handler = ObservationsHandler()
|
|
component = NodeStatuses(env)
|
|
handler.register(component)
|
|
assert component in handler.registered_obs_components
|
|
handler.deregister(component)
|
|
assert component not in handler.registered_obs_components
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_NODE_LINK_TABLE.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
class TestNodeLinkTable:
|
|
"""Test the NodeLinkTable observation component (in isolation)."""
|
|
|
|
def test_obs_shape(self, temp_primaite_session):
|
|
"""Try creating env with box observation space."""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
env.update_environent_obs()
|
|
|
|
# we have three nodes and two links, with two service
|
|
# therefore the box observation space will have:
|
|
# * 5 rows (3 nodes + 2 links)
|
|
# * 6 columns (four fixed and two for the services)
|
|
assert env.env_obs.shape == (5, 6)
|
|
|
|
def test_value(self, temp_primaite_session):
|
|
"""
|
|
Test that the observation is generated correctly.
|
|
|
|
The laydown has:
|
|
* 3 nodes (2 service nodes and 1 active node)
|
|
* 2 services
|
|
* 2 links
|
|
|
|
Both nodes have both services, and all states are GOOD, therefore the expected observation value is:
|
|
|
|
* Node 1:
|
|
* 1 (id)
|
|
* 1 (good hardware state)
|
|
* 3 (compromised OS state)
|
|
* 1 (good file system state)
|
|
* 1 (good TCP state)
|
|
* 1 (good UDP state)
|
|
* Node 2:
|
|
* 2 (id)
|
|
* 1 (good hardware state)
|
|
* 1 (good OS state)
|
|
* 1 (good file system state)
|
|
* 1 (good TCP state)
|
|
* 4 (overwhelmed UDP state)
|
|
* Node 3 (active node):
|
|
* 3 (id)
|
|
* 1 (good hardware state)
|
|
* 1 (good OS state)
|
|
* 1 (good file system state)
|
|
* 0 (doesn't have service1)
|
|
* 0 (doesn't have service2)
|
|
* Link 1:
|
|
* 4 (id)
|
|
* 0 (n/a hardware state)
|
|
* 0 (n/a OS state)
|
|
* 0 (n/a file system state)
|
|
* 999 (999 traffic for service1)
|
|
* 0 (no traffic for service2)
|
|
* Link 2:
|
|
* 5 (id)
|
|
* 0 (good hardware state)
|
|
* 0 (good OS state)
|
|
* 0 (good file system state)
|
|
* 999 (999 traffic service1)
|
|
* 0 (no traffic for service2)
|
|
"""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
# act = np.asarray([0,])
|
|
obs, reward, done, info = env.step(0) # apply the 'do nothing' action
|
|
|
|
assert np.array_equal(
|
|
obs,
|
|
[
|
|
[1, 1, 3, 1, 1, 1],
|
|
[2, 1, 1, 1, 1, 4],
|
|
[3, 1, 1, 1, 0, 0],
|
|
[4, 0, 0, 0, 999, 0],
|
|
[5, 0, 0, 0, 999, 0],
|
|
],
|
|
)
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_NODE_STATUSES.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
class TestNodeStatuses:
|
|
"""Test the NodeStatuses observation component (in isolation)."""
|
|
|
|
def test_obs_shape(self, temp_primaite_session):
|
|
"""Try creating env with NodeStatuses as the only component."""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
assert env.env_obs.shape == (15,)
|
|
|
|
def test_values(self, temp_primaite_session):
|
|
"""
|
|
Test that the hardware and software states are encoded correctly.
|
|
|
|
The laydown has:
|
|
* one node with a compromised operating system state
|
|
* one node with two services, and the second service is overwhelmed.
|
|
* all other states are good or null
|
|
Therefore, the expected state is:
|
|
* node 1:
|
|
* hardware = good (1)
|
|
* OS = compromised (3)
|
|
* file system = good (1)
|
|
* service 1 = good (1)
|
|
* service 2 = good (1)
|
|
* node 2:
|
|
* hardware = good (1)
|
|
* OS = good (1)
|
|
* file system = good (1)
|
|
* service 1 = good (1)
|
|
* service 2 = overwhelmed (4)
|
|
* node 3 (switch):
|
|
* hardware = good (1)
|
|
* OS = good (1)
|
|
* file system = good (1)
|
|
* service 1 = n/a (0)
|
|
* service 2 = n/a (0)
|
|
"""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
obs, _, _, _ = env.step(0) # apply the 'do nothing' action
|
|
print(obs)
|
|
assert np.array_equal(obs, [1, 3, 1, 1, 1, 1, 1, 1, 1, 4, 1, 1, 1, 0, 0])
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_LINK_TRAFFIC_LEVELS.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
class TestLinkTrafficLevels:
|
|
"""Test the LinkTrafficLevels observation component (in isolation)."""
|
|
|
|
def test_obs_shape(self, temp_primaite_session):
|
|
"""Try creating env with MultiDiscrete observation space."""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
env.update_environent_obs()
|
|
|
|
# we have two links and two services, so the shape should be 2 * 2
|
|
assert env.env_obs.shape == (2 * 2,)
|
|
|
|
def test_values(self, temp_primaite_session):
|
|
"""
|
|
Test that traffic values are encoded correctly.
|
|
|
|
The laydown has:
|
|
* two services
|
|
* three nodes
|
|
* two links
|
|
* an IER trying to send 999 bits of data over both links the whole time (via the first service)
|
|
* link bandwidth of 1000, therefore the utilisation is 99.9%
|
|
"""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
obs, reward, done, info = env.step(0)
|
|
obs, reward, done, info = env.step(0)
|
|
|
|
# the observation space has combine_service_traffic set to False, so the space has this format:
|
|
# [link1_service1, link1_service2, link2_service1, link2_service2]
|
|
# we send 999 bits of data via link1 and link2 on service 1.
|
|
# therefore the first and third elements should be 6 and all others 0
|
|
# (`7` corresponds to 100% utiilsation and `6` corresponds to 87.5%-100%)
|
|
assert np.array_equal(obs, [6, 0, 6, 0])
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"temp_primaite_session",
|
|
[
|
|
[
|
|
TEST_CONFIG_ROOT / "obs_tests/main_config_ACCESS_CONTROL_LIST.yaml",
|
|
TEST_CONFIG_ROOT / "obs_tests/laydown_ACL.yaml",
|
|
]
|
|
],
|
|
indirect=True,
|
|
)
|
|
class TestAccessControlList:
|
|
"""Test the AccessControlList observation component (in isolation)."""
|
|
|
|
def test_obs_shape(self, temp_primaite_session):
|
|
"""Try creating env with MultiDiscrete observation space."""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
env.update_environent_obs()
|
|
|
|
# we have two ACLs
|
|
assert env.env_obs.shape == (18,)
|
|
|
|
def test_values(self, temp_primaite_session):
|
|
"""Test that traffic values are encoded correctly.
|
|
|
|
The laydown has:
|
|
* two services
|
|
* three nodes
|
|
* two links
|
|
* an IER trying to send 999 bits of data over both links the whole time (via the first service)
|
|
* link bandwidth of 1000, therefore the utilisation is 99.9%
|
|
"""
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
obs, reward, done, info = env.step(0)
|
|
obs, reward, done, info = env.step(0)
|
|
|
|
# the observation space has combine_service_traffic set to False, so the space has this format:
|
|
# [link1_service1, link1_service2, link2_service1, link2_service2]
|
|
# we send 999 bits of data via link1 and link2 on service 1.
|
|
# therefore the first and third elements should be 6 and all others 0
|
|
# (`7` corresponds to 100% utiilsation and `6` corresponds to 87.5%-100%)
|
|
print(obs)
|
|
assert np.array_equal(obs, [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 1, 2])
|
|
|
|
def test_observation_space_with_implicit_rule(self, temp_primaite_session):
|
|
"""
|
|
Test observation space is what is expected when an agent adds ACLs during an episode.
|
|
|
|
Observation space at the end of the episode.
|
|
At the start of the episode, there is a single implicit Deny rule = 1,1,1,1,1,0
|
|
(0 represents its initial position at top of ACL list)
|
|
(1, 1, 1, 2, 1, 2, 0) - ACTION
|
|
On Step 5, there is a rule added at POSITION 2: 2,2,3,2,3,0
|
|
(1, 3, 1, 2, 2, 1) - SECOND ACTION
|
|
On Step 7, there is a second rule added at POSITION 1: 2,4,2,3,3,1
|
|
THINK THE RULES SHOULD BE THE OTHER WAY AROUND IN THE CURRENT OBSERVATION
|
|
"""
|
|
# TODO: Refactor this at some point to build a custom ACL Hardcoded
|
|
# Agent and then patch the AgentIdentifier Enum class so that it
|
|
# has ACL_AGENT. This then allows us to set the agent identified in
|
|
# the main config and is a bit cleaner.
|
|
# Used to use env from test fixture but AtrributeError function object has no 'training_config'
|
|
with temp_primaite_session as session:
|
|
env = session.env
|
|
|
|
training_config = env.training_config
|
|
for episode in range(0, training_config.num_train_episodes):
|
|
for step in range(0, training_config.num_train_steps):
|
|
# Send the observation space to the agent to get an action
|
|
# TEMP - random action for now
|
|
# action = env.blue_agent_action(obs)
|
|
action = 0
|
|
print("Episode:", episode, "\nStep:", step)
|
|
if step == 2:
|
|
# [1, 1, 2, 1, 1, 1, 1(position)]
|
|
# NEED [1, 1, 1, 2, 1, 1, 1]
|
|
# Creates an ACL rule
|
|
# Allows traffic from server_1 to node_1 on port FTP
|
|
action = 43
|
|
elif step == 4:
|
|
action = 96
|
|
|
|
# Run the simulation step on the live environment
|
|
obs, reward, done, info = env.step(action)
|
|
|
|
# Break if done is True
|
|
if done:
|
|
break
|
|
obs = env.env_obs
|
|
print("what i am testing", obs)
|
|
# acl rule 1
|
|
# source is 1 should be 4
|
|
# dest is 3 should be 2
|
|
# [2 2 3 2 3 0 2 1?4 3?2 3 3 1 1 1 1 1 1 2]
|
|
# np.array_equal(obs, [2, 2, 3, 2, 3, 0, 2, 4, 2, 3, 3, 1, 1, 1, 1, 1, 1, 2])
|
|
assert np.array_equal(obs, [2, 2, 3, 2, 3, 0, 2, 4, 2, 3, 3, 1, 1, 1, 1, 1, 1, 2])
|
|
# assert obs == [2, 2, 3, 2, 3, 0, 2, 4, 2, 3, 3, 1, 1, 1, 1, 1, 1, 2]
|