1
0
Fork 0
Assistant for simple deployment and playing of adaptive cybersecurity games
This repository has been archived on 2024-01-30. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Lili (Tlapka) 229327b179 fix comment in level_requirements 2021-05-26 11:58:49 +02:00
adaptive_game_module flag checker implementation 2021-03-30 19:08:09 +02:00
resources fix comment in level_requirements 2021-05-26 11:58:49 +02:00
.gitignore update ignore with logs subfolder 2021-03-22 17:05:19 +01:00
LICENSE initial commit - move from thesis 2021-03-16 14:11:29 +01:00
README.md readme rewrite work 1 2021-05-18 14:51:14 +02:00
assistant.py remove debug thingy, put vagrant indexerror protec 2021-04-08 19:33:46 +02:00
python-requirements.txt improve python requirements = pyyaml version 5.1 2021-04-06 13:03:31 +02:00

README.md

Adaptive game assistant

The adaptive game assistant is a Python program allowing easy deployment and playing of adaptive cybersecurity games.

The assistant was made as a part of my bachelor's thesis for the university's KYPO lab, so it mainly extends the design of games at the KYPO Cyber Range. The original version included in the thesis appendix required that the player get some help from an instructor while playing. This improved version allows for the player to play through the game completely on their own.

The games the assistant can help with must be made with Vagrant and Ansible (as other games for the KYPO Cyber Range), and have all tasks in the Ansible playbooks tagged with tags. There's also a need for some config files in the resources subfolder.

Assistant usage

The adaptive game assistant is ran by running ./assistant.py or python assistant.py in the project folder. It automatically runs Vagrant commands to prepare levels of the game, checks flags when player completes level and provides hints when needed.

Basic commands:

  • (S)tart - starts the game from level 1.
  • (N)ext - continues the game to the next level.
  • (E)xit - properly ends the game and exits the assistant.
  • (C)eck - Checks versions of all required apps.
  • (H)elp - displays a full list of commands.

Requirements

The assistant requires Python 3.7 to run.

It also requires the PyYAML package of version 5.1 or higher. (You can install it with pip install -r python-requirements.txt)

The game the assistant will require Vagrant and VirtualBox to be installed. Virtualbox 6.0 or higher and Vagrant 2.2.5 or higher are recommended. (The requirements of individual games may differ.)

Python module structure

The assistant consists of a Game class, that represents the game itself, and a game_loop() function, which keeps an instance of a Game and translates inputs from the command line into method calls on the Game object.

The assistant is written with modularity in mind, so it should support other adaptive games, as long as they provide a correct levels.yml file, and has complete tagging in the Ansible playbooks.

Game and config files

levels.yml

levels.yml is the configuration file that tells the assistant what possible levels are in the game, what tags to run to set up that level, and what machines need to be provisioned for that level.

Every line in the file represents a level, and each line must have the following format:

level_name: {branch_name: [machines_to_provision]}

I want to try the assistant out, but I have no game on hand

??? Manual usage without the assistant

??? Common problems

  • prolly delete

Manual usage without assistant

How to play the game without using the adaptive game assistant.

  1. Run ANSIBLE_ARGS='--tags "setup"' vagrant up. During the instantiation of br machine, you will be prompted for network interface which connects you to internet (usually the first or second in the list).
  2. When the player finishes a level, it's time to prepare the next one. Some levels have multiple versions (level2a, level2b), some levels have only one version (level3). The file levels.yml lists all possible levels, along with the vagrant boxes that need an update for the level to be ran. To prepare the next level, run ANSIBLE_ARGS='--tags "<level>"' vagrant up <boxes> --provision, where <level> is a key from levels.yml, and <boxes> is the corresponding value from the same file. (Examples: ANSIBLE_ARGS='--tags "level2a"' vagrant up web attacker --provision, ANSIBLE_ARGS='--tags "level3"' vagrant up web --provision)
  3. After the game is finished, run vagrant destroy to remove the game components and virtual machines. The game can be reran after this step.

Troubleshooting

Set-up hangs on provisioning machine br

==> br: Running provisioner: ansible_local...

On Windows, the setup of the game rarely hangs on provisioning of the br machine. When playing via the assistant, you will have to exist by pressing Ctrl+C. Then, you should kill the stuck process in the task manager (usually called similarly to Ruby interpreter or Vagrant) Then you can resume the game by launching the assistant again, running abort, and then start again. (You can also attempt to make the assistant pick up where it ended before it got stuck, by not running abort, and running start only.)