da20c0e9e6
- Removed bool apply_implicit_rule - Set default implicit_rule to EXPLICIT DENY - Added position to ACLs in laydown configs - Removed apply_implicit_rule from training configs
103 lines
1.8 KiB
YAML
103 lines
1.8 KiB
YAML
- item_type: PORTS
|
|
ports_list:
|
|
- port: '80'
|
|
- port: '53'
|
|
- item_type: SERVICES
|
|
service_list:
|
|
- name: TCP
|
|
- name: UDP
|
|
|
|
########################################
|
|
# Nodes
|
|
- item_type: NODE
|
|
node_id: '1'
|
|
name: PC1
|
|
node_class: SERVICE
|
|
node_type: COMPUTER
|
|
priority: P5
|
|
hardware_state: 'ON'
|
|
ip_address: 192.168.1.1
|
|
software_state: COMPROMISED
|
|
file_system_state: GOOD
|
|
services:
|
|
- name: TCP
|
|
port: '80'
|
|
state: GOOD
|
|
- name: UDP
|
|
port: '53'
|
|
state: GOOD
|
|
- item_type: NODE
|
|
node_id: '2'
|
|
name: SERVER
|
|
node_class: SERVICE
|
|
node_type: SERVER
|
|
priority: P5
|
|
hardware_state: 'ON'
|
|
ip_address: 192.168.1.2
|
|
software_state: GOOD
|
|
file_system_state: GOOD
|
|
services:
|
|
- name: TCP
|
|
port: '80'
|
|
state: GOOD
|
|
- name: UDP
|
|
port: '53'
|
|
state: OVERWHELMED
|
|
- item_type: NODE
|
|
node_id: '3'
|
|
name: SWITCH1
|
|
node_class: ACTIVE
|
|
node_type: SWITCH
|
|
priority: P2
|
|
hardware_state: 'ON'
|
|
ip_address: 192.168.1.3
|
|
software_state: GOOD
|
|
file_system_state: GOOD
|
|
|
|
########################################
|
|
# Links
|
|
- item_type: LINK
|
|
id: '4'
|
|
name: link1
|
|
bandwidth: 1000
|
|
source: '1'
|
|
destination: '3'
|
|
- item_type: LINK
|
|
id: '5'
|
|
name: link2
|
|
bandwidth: 1000
|
|
source: '3'
|
|
destination: '2'
|
|
|
|
#########################################
|
|
# IERS
|
|
- item_type: GREEN_IER
|
|
id: '5'
|
|
start_step: 0
|
|
end_step: 5
|
|
load: 999
|
|
protocol: TCP
|
|
port: '80'
|
|
source: '1'
|
|
destination: '2'
|
|
mission_criticality: 5
|
|
|
|
#########################################
|
|
# ACL Rules
|
|
- item_type: ACL_RULE
|
|
id: '6'
|
|
permission: ALLOW
|
|
source: 192.168.1.1
|
|
destination: 192.168.1.2
|
|
protocol: TCP
|
|
port: 80
|
|
position: 0
|
|
- item_type: ACL_RULE
|
|
id: '7'
|
|
permission: ALLOW
|
|
source: 192.168.1.2
|
|
destination: 192.168.1.1
|
|
protocol: TCP
|
|
port: 80
|
|
position: 0
|