mal-toolbox 1.2.1__tar.gz → 2.1.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {mal_toolbox-1.2.1/mal_toolbox.egg-info → mal_toolbox-2.1.0}/PKG-INFO +8 -75
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/README.md +5 -74
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0/mal_toolbox.egg-info}/PKG-INFO +8 -75
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/mal_toolbox.egg-info/SOURCES.txt +20 -2
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/mal_toolbox.egg-info/requires.txt +2 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/__init__.py +2 -2
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/attackgraph/__init__.py +2 -2
- mal_toolbox-2.1.0/maltoolbox/attackgraph/attackgraph.py +309 -0
- mal_toolbox-2.1.0/maltoolbox/attackgraph/factories.py +68 -0
- mal_toolbox-2.1.0/maltoolbox/attackgraph/generate.py +338 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/attackgraph/node.py +1 -0
- mal_toolbox-2.1.0/maltoolbox/attackgraph/node_getters.py +36 -0
- mal_toolbox-2.1.0/maltoolbox/attackgraph/ttcs.py +28 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/language/__init__.py +2 -2
- mal_toolbox-2.1.0/maltoolbox/language/compiler/__init__.py +5 -0
- mal_toolbox-2.1.0/maltoolbox/language/compiler/distributions.py +158 -0
- mal_toolbox-2.1.0/maltoolbox/language/compiler/exceptions.py +37 -0
- mal_toolbox-2.1.0/maltoolbox/language/compiler/lang.py +5 -0
- mal_toolbox-2.1.0/maltoolbox/language/compiler/mal_analyzer.py +920 -0
- mal_toolbox-2.1.0/maltoolbox/language/compiler/mal_compiler.py +1071 -0
- mal_toolbox-2.1.0/maltoolbox/language/detector.py +43 -0
- mal_toolbox-2.1.0/maltoolbox/language/expression_chain.py +218 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_asset.py +180 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_assoc.py +147 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_attack_step.py +129 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_builder.py +282 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_loaders.py +7 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_lookup.py +140 -0
- mal_toolbox-2.1.0/maltoolbox/language/language_graph_serialization.py +5 -0
- mal_toolbox-2.1.0/maltoolbox/language/languagegraph.py +492 -0
- mal_toolbox-2.1.0/maltoolbox/language/step_expression_processor.py +491 -0
- mal_toolbox-2.1.0/maltoolbox/py.typed +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/pyproject.toml +4 -3
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/tests/test_model.py +2 -1
- mal_toolbox-1.2.1/maltoolbox/attackgraph/attackgraph.py +0 -737
- mal_toolbox-1.2.1/maltoolbox/language/compiler/__init__.py +0 -500
- mal_toolbox-1.2.1/maltoolbox/language/compiler/mal_lexer.py +0 -232
- mal_toolbox-1.2.1/maltoolbox/language/compiler/mal_parser.py +0 -3159
- mal_toolbox-1.2.1/maltoolbox/language/languagegraph.py +0 -1784
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/AUTHORS +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/LICENSE +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/mal_toolbox.egg-info/dependency_links.txt +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/mal_toolbox.egg-info/entry_points.txt +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/mal_toolbox.egg-info/top_level.txt +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/__main__.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/attackgraph/analyzers/__init__.py +0 -0
- /mal_toolbox-1.2.1/maltoolbox/patternfinder/__init__.py → /mal_toolbox-2.1.0/maltoolbox/attackgraph/file_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/exceptions.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/file_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/model.py +0 -0
- /mal_toolbox-1.2.1/maltoolbox/py.typed → /mal_toolbox-2.1.0/maltoolbox/patternfinder/__init__.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/patternfinder/attackgraph_patterns.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/str_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/translators/__init__.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/translators/networkx.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/translators/updater.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/visualization/__init__.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/visualization/draw_io_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/visualization/graphviz_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/visualization/neo4j_utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/maltoolbox/visualization/utils.py +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/setup.cfg +0 -0
- {mal_toolbox-1.2.1 → mal_toolbox-2.1.0}/tests/test_visualization.py +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: mal-toolbox
|
|
3
|
-
Version:
|
|
3
|
+
Version: 2.1.0
|
|
4
4
|
Summary: A collection of tools used to create MAL models and attack graphs.
|
|
5
5
|
Author-email: Andrei Buhaiu <buhaiu@kth.se>, Joakim Loxdal <loxdal@kth.se>, Nikolaos Kakouros <nkak@kth.se>, Jakob Nyberg <jaknyb@kth.se>, Giuseppe Nebbione <nebbione@kth.se>, Sandor Berglund <sandor@kth.se>
|
|
6
6
|
License: Apache Software License
|
|
@@ -25,6 +25,8 @@ Requires-Dist: docopt
|
|
|
25
25
|
Requires-Dist: PyYAML
|
|
26
26
|
Requires-Dist: py2neo
|
|
27
27
|
Requires-Dist: networkx
|
|
28
|
+
Requires-Dist: tree-sitter-mal~=1.0.0
|
|
29
|
+
Requires-Dist: tree-sitter
|
|
28
30
|
Provides-Extra: dev
|
|
29
31
|
Requires-Dist: pytest; extra == "dev"
|
|
30
32
|
Dynamic: license-file
|
|
@@ -36,37 +38,9 @@ MAL ([Meta Attack Language](https://mal-lang.org/)) models and attack graphs.
|
|
|
36
38
|
|
|
37
39
|
Attack graphs can be used to run simulations in [MAL Simulator](https://github.com/mal-lang/mal-simulator) or run your own custom analysis on.
|
|
38
40
|
|
|
39
|
-
- [MAL Toolbox
|
|
41
|
+
- [MAL Toolbox Wiki](https://github.com/mal-lang/mal-toolbox/wiki)
|
|
40
42
|
- [MAL Toolbox tutorial](https://github.com/mal-lang/mal-toolbox-tutorial)
|
|
41
43
|
|
|
42
|
-
## The Language Module
|
|
43
|
-
|
|
44
|
-
The language module provides various tools to process MAL languages.
|
|
45
|
-
|
|
46
|
-
## The Model Module
|
|
47
|
-
|
|
48
|
-
With a MAL language a Model (a MAL instance model) can be created either
|
|
49
|
-
from a model file or empty.
|
|
50
|
-
|
|
51
|
-
The model class will store all of the relevant information to the MAL
|
|
52
|
-
instance model, most importantly the assets and their associations.
|
|
53
|
-
|
|
54
|
-
Model objects can be used to generate attack graphs with the AttackGraph module.
|
|
55
|
-
|
|
56
|
-
## The Attack Graph Module
|
|
57
|
-
|
|
58
|
-
The attack graph module contains tools used to generate attack graphs from
|
|
59
|
-
existing MAL instance models and analyse MAL attack graphs. The function used
|
|
60
|
-
to generate the attack graph is `generate_graph` and it requires the instance
|
|
61
|
-
model and language specification. The resulting attack graph will contain
|
|
62
|
-
nodes for each of the attack steps. The structure of the attack node data
|
|
63
|
-
class can be seen in `attackgraph/node.py` file. Of note are the lists of
|
|
64
|
-
children and parents which allow for easy reference to the other attack step
|
|
65
|
-
nodes related and the asset field which will contain the object in the model
|
|
66
|
-
instance to which this attack step belongs to, if this information is
|
|
67
|
-
available.
|
|
68
|
-
|
|
69
|
-
|
|
70
44
|
# Usage
|
|
71
45
|
|
|
72
46
|
## Installation
|
|
@@ -147,50 +121,9 @@ Notes:
|
|
|
147
121
|
compiler) or a .mal file containing the DSL written in MAL.```
|
|
148
122
|
```
|
|
149
123
|
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
To find more code examples and tutorials, visit the
|
|
153
|
-
[MAL Toolbox Tutorial](https://github.com/mal-lang/mal-toolbox-tutorial/tree/main) repository.
|
|
154
|
-
|
|
155
|
-
### Load a language
|
|
156
|
-
```python
|
|
157
|
-
|
|
158
|
-
from maltoolbox.language import LanguageGraph
|
|
159
|
-
|
|
160
|
-
# Will load the MAL language (.mal/.mar) or a saved language graph (yml/json)
|
|
161
|
-
lang_graph = LanguageGraph.load_from_file(lang_file_path)
|
|
162
|
-
|
|
163
|
-
```
|
|
164
|
-
|
|
165
|
-
### Generate a model
|
|
166
|
-
```python
|
|
167
|
-
from maltoolbox.model import Model
|
|
168
|
-
|
|
169
|
-
# Create an empty model
|
|
170
|
-
instance_model = Model("Example Model", lang_graph)
|
|
171
|
-
|
|
172
|
-
# Create and add assets of type supported by the MAL language
|
|
173
|
-
asset1 = instance_model.add_asset('Application', 'Application1')
|
|
174
|
-
asset2 = instance_model.add_asset('Application', 'Application2')
|
|
175
|
-
|
|
176
|
-
# Create association between the assets
|
|
177
|
-
asset1.add_associated_assets('appExecutedApps', asset2)
|
|
178
|
-
```
|
|
179
|
-
|
|
180
|
-
## Generate an attack graph
|
|
181
|
-
|
|
182
|
-
```python
|
|
183
|
-
|
|
184
|
-
from maltoolbox.attackgraph import AttackGraph
|
|
185
|
-
|
|
186
|
-
attack_graph = AttackGraph(lang_graph, model)
|
|
187
|
-
|
|
188
|
-
```
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
## Contributing
|
|
124
|
+
# Contributing
|
|
192
125
|
|
|
193
|
-
|
|
126
|
+
## CI Pipeline
|
|
194
127
|
|
|
195
128
|
Checks are made with:
|
|
196
129
|
|
|
@@ -200,12 +133,12 @@ Checks are made with:
|
|
|
200
133
|
|
|
201
134
|
Make sure pipeline passes before PR is marked "Ready for review".
|
|
202
135
|
|
|
203
|
-
|
|
136
|
+
## Tests
|
|
204
137
|
There are unit tests inside of ./tests.
|
|
205
138
|
|
|
206
139
|
To run all tests, use the `pytest` command. To run just a specific file or test function use `pytest tests/<filename>` or `pytest -k <function_name>`.
|
|
207
140
|
|
|
208
|
-
|
|
141
|
+
## Making a release
|
|
209
142
|
|
|
210
143
|
1. Make a PR with one commit that updates the version number in `pyproject.toml` and `maltoolbox/__init__.py`.
|
|
211
144
|
Follow [Semantic versioning](https://semver.org/).
|
|
@@ -5,37 +5,9 @@ MAL ([Meta Attack Language](https://mal-lang.org/)) models and attack graphs.
|
|
|
5
5
|
|
|
6
6
|
Attack graphs can be used to run simulations in [MAL Simulator](https://github.com/mal-lang/mal-simulator) or run your own custom analysis on.
|
|
7
7
|
|
|
8
|
-
- [MAL Toolbox
|
|
8
|
+
- [MAL Toolbox Wiki](https://github.com/mal-lang/mal-toolbox/wiki)
|
|
9
9
|
- [MAL Toolbox tutorial](https://github.com/mal-lang/mal-toolbox-tutorial)
|
|
10
10
|
|
|
11
|
-
## The Language Module
|
|
12
|
-
|
|
13
|
-
The language module provides various tools to process MAL languages.
|
|
14
|
-
|
|
15
|
-
## The Model Module
|
|
16
|
-
|
|
17
|
-
With a MAL language a Model (a MAL instance model) can be created either
|
|
18
|
-
from a model file or empty.
|
|
19
|
-
|
|
20
|
-
The model class will store all of the relevant information to the MAL
|
|
21
|
-
instance model, most importantly the assets and their associations.
|
|
22
|
-
|
|
23
|
-
Model objects can be used to generate attack graphs with the AttackGraph module.
|
|
24
|
-
|
|
25
|
-
## The Attack Graph Module
|
|
26
|
-
|
|
27
|
-
The attack graph module contains tools used to generate attack graphs from
|
|
28
|
-
existing MAL instance models and analyse MAL attack graphs. The function used
|
|
29
|
-
to generate the attack graph is `generate_graph` and it requires the instance
|
|
30
|
-
model and language specification. The resulting attack graph will contain
|
|
31
|
-
nodes for each of the attack steps. The structure of the attack node data
|
|
32
|
-
class can be seen in `attackgraph/node.py` file. Of note are the lists of
|
|
33
|
-
children and parents which allow for easy reference to the other attack step
|
|
34
|
-
nodes related and the asset field which will contain the object in the model
|
|
35
|
-
instance to which this attack step belongs to, if this information is
|
|
36
|
-
available.
|
|
37
|
-
|
|
38
|
-
|
|
39
11
|
# Usage
|
|
40
12
|
|
|
41
13
|
## Installation
|
|
@@ -116,50 +88,9 @@ Notes:
|
|
|
116
88
|
compiler) or a .mal file containing the DSL written in MAL.```
|
|
117
89
|
```
|
|
118
90
|
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
To find more code examples and tutorials, visit the
|
|
122
|
-
[MAL Toolbox Tutorial](https://github.com/mal-lang/mal-toolbox-tutorial/tree/main) repository.
|
|
123
|
-
|
|
124
|
-
### Load a language
|
|
125
|
-
```python
|
|
126
|
-
|
|
127
|
-
from maltoolbox.language import LanguageGraph
|
|
128
|
-
|
|
129
|
-
# Will load the MAL language (.mal/.mar) or a saved language graph (yml/json)
|
|
130
|
-
lang_graph = LanguageGraph.load_from_file(lang_file_path)
|
|
131
|
-
|
|
132
|
-
```
|
|
133
|
-
|
|
134
|
-
### Generate a model
|
|
135
|
-
```python
|
|
136
|
-
from maltoolbox.model import Model
|
|
137
|
-
|
|
138
|
-
# Create an empty model
|
|
139
|
-
instance_model = Model("Example Model", lang_graph)
|
|
140
|
-
|
|
141
|
-
# Create and add assets of type supported by the MAL language
|
|
142
|
-
asset1 = instance_model.add_asset('Application', 'Application1')
|
|
143
|
-
asset2 = instance_model.add_asset('Application', 'Application2')
|
|
144
|
-
|
|
145
|
-
# Create association between the assets
|
|
146
|
-
asset1.add_associated_assets('appExecutedApps', asset2)
|
|
147
|
-
```
|
|
148
|
-
|
|
149
|
-
## Generate an attack graph
|
|
150
|
-
|
|
151
|
-
```python
|
|
152
|
-
|
|
153
|
-
from maltoolbox.attackgraph import AttackGraph
|
|
154
|
-
|
|
155
|
-
attack_graph = AttackGraph(lang_graph, model)
|
|
156
|
-
|
|
157
|
-
```
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
## Contributing
|
|
91
|
+
# Contributing
|
|
161
92
|
|
|
162
|
-
|
|
93
|
+
## CI Pipeline
|
|
163
94
|
|
|
164
95
|
Checks are made with:
|
|
165
96
|
|
|
@@ -169,12 +100,12 @@ Checks are made with:
|
|
|
169
100
|
|
|
170
101
|
Make sure pipeline passes before PR is marked "Ready for review".
|
|
171
102
|
|
|
172
|
-
|
|
103
|
+
## Tests
|
|
173
104
|
There are unit tests inside of ./tests.
|
|
174
105
|
|
|
175
106
|
To run all tests, use the `pytest` command. To run just a specific file or test function use `pytest tests/<filename>` or `pytest -k <function_name>`.
|
|
176
107
|
|
|
177
|
-
|
|
108
|
+
## Making a release
|
|
178
109
|
|
|
179
110
|
1. Make a PR with one commit that updates the version number in `pyproject.toml` and `maltoolbox/__init__.py`.
|
|
180
111
|
Follow [Semantic versioning](https://semver.org/).
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: mal-toolbox
|
|
3
|
-
Version:
|
|
3
|
+
Version: 2.1.0
|
|
4
4
|
Summary: A collection of tools used to create MAL models and attack graphs.
|
|
5
5
|
Author-email: Andrei Buhaiu <buhaiu@kth.se>, Joakim Loxdal <loxdal@kth.se>, Nikolaos Kakouros <nkak@kth.se>, Jakob Nyberg <jaknyb@kth.se>, Giuseppe Nebbione <nebbione@kth.se>, Sandor Berglund <sandor@kth.se>
|
|
6
6
|
License: Apache Software License
|
|
@@ -25,6 +25,8 @@ Requires-Dist: docopt
|
|
|
25
25
|
Requires-Dist: PyYAML
|
|
26
26
|
Requires-Dist: py2neo
|
|
27
27
|
Requires-Dist: networkx
|
|
28
|
+
Requires-Dist: tree-sitter-mal~=1.0.0
|
|
29
|
+
Requires-Dist: tree-sitter
|
|
28
30
|
Provides-Extra: dev
|
|
29
31
|
Requires-Dist: pytest; extra == "dev"
|
|
30
32
|
Dynamic: license-file
|
|
@@ -36,37 +38,9 @@ MAL ([Meta Attack Language](https://mal-lang.org/)) models and attack graphs.
|
|
|
36
38
|
|
|
37
39
|
Attack graphs can be used to run simulations in [MAL Simulator](https://github.com/mal-lang/mal-simulator) or run your own custom analysis on.
|
|
38
40
|
|
|
39
|
-
- [MAL Toolbox
|
|
41
|
+
- [MAL Toolbox Wiki](https://github.com/mal-lang/mal-toolbox/wiki)
|
|
40
42
|
- [MAL Toolbox tutorial](https://github.com/mal-lang/mal-toolbox-tutorial)
|
|
41
43
|
|
|
42
|
-
## The Language Module
|
|
43
|
-
|
|
44
|
-
The language module provides various tools to process MAL languages.
|
|
45
|
-
|
|
46
|
-
## The Model Module
|
|
47
|
-
|
|
48
|
-
With a MAL language a Model (a MAL instance model) can be created either
|
|
49
|
-
from a model file or empty.
|
|
50
|
-
|
|
51
|
-
The model class will store all of the relevant information to the MAL
|
|
52
|
-
instance model, most importantly the assets and their associations.
|
|
53
|
-
|
|
54
|
-
Model objects can be used to generate attack graphs with the AttackGraph module.
|
|
55
|
-
|
|
56
|
-
## The Attack Graph Module
|
|
57
|
-
|
|
58
|
-
The attack graph module contains tools used to generate attack graphs from
|
|
59
|
-
existing MAL instance models and analyse MAL attack graphs. The function used
|
|
60
|
-
to generate the attack graph is `generate_graph` and it requires the instance
|
|
61
|
-
model and language specification. The resulting attack graph will contain
|
|
62
|
-
nodes for each of the attack steps. The structure of the attack node data
|
|
63
|
-
class can be seen in `attackgraph/node.py` file. Of note are the lists of
|
|
64
|
-
children and parents which allow for easy reference to the other attack step
|
|
65
|
-
nodes related and the asset field which will contain the object in the model
|
|
66
|
-
instance to which this attack step belongs to, if this information is
|
|
67
|
-
available.
|
|
68
|
-
|
|
69
|
-
|
|
70
44
|
# Usage
|
|
71
45
|
|
|
72
46
|
## Installation
|
|
@@ -147,50 +121,9 @@ Notes:
|
|
|
147
121
|
compiler) or a .mal file containing the DSL written in MAL.```
|
|
148
122
|
```
|
|
149
123
|
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
To find more code examples and tutorials, visit the
|
|
153
|
-
[MAL Toolbox Tutorial](https://github.com/mal-lang/mal-toolbox-tutorial/tree/main) repository.
|
|
154
|
-
|
|
155
|
-
### Load a language
|
|
156
|
-
```python
|
|
157
|
-
|
|
158
|
-
from maltoolbox.language import LanguageGraph
|
|
159
|
-
|
|
160
|
-
# Will load the MAL language (.mal/.mar) or a saved language graph (yml/json)
|
|
161
|
-
lang_graph = LanguageGraph.load_from_file(lang_file_path)
|
|
162
|
-
|
|
163
|
-
```
|
|
164
|
-
|
|
165
|
-
### Generate a model
|
|
166
|
-
```python
|
|
167
|
-
from maltoolbox.model import Model
|
|
168
|
-
|
|
169
|
-
# Create an empty model
|
|
170
|
-
instance_model = Model("Example Model", lang_graph)
|
|
171
|
-
|
|
172
|
-
# Create and add assets of type supported by the MAL language
|
|
173
|
-
asset1 = instance_model.add_asset('Application', 'Application1')
|
|
174
|
-
asset2 = instance_model.add_asset('Application', 'Application2')
|
|
175
|
-
|
|
176
|
-
# Create association between the assets
|
|
177
|
-
asset1.add_associated_assets('appExecutedApps', asset2)
|
|
178
|
-
```
|
|
179
|
-
|
|
180
|
-
## Generate an attack graph
|
|
181
|
-
|
|
182
|
-
```python
|
|
183
|
-
|
|
184
|
-
from maltoolbox.attackgraph import AttackGraph
|
|
185
|
-
|
|
186
|
-
attack_graph = AttackGraph(lang_graph, model)
|
|
187
|
-
|
|
188
|
-
```
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
## Contributing
|
|
124
|
+
# Contributing
|
|
192
125
|
|
|
193
|
-
|
|
126
|
+
## CI Pipeline
|
|
194
127
|
|
|
195
128
|
Checks are made with:
|
|
196
129
|
|
|
@@ -200,12 +133,12 @@ Checks are made with:
|
|
|
200
133
|
|
|
201
134
|
Make sure pipeline passes before PR is marked "Ready for review".
|
|
202
135
|
|
|
203
|
-
|
|
136
|
+
## Tests
|
|
204
137
|
There are unit tests inside of ./tests.
|
|
205
138
|
|
|
206
139
|
To run all tests, use the `pytest` command. To run just a specific file or test function use `pytest tests/<filename>` or `pytest -k <function_name>`.
|
|
207
140
|
|
|
208
|
-
|
|
141
|
+
## Making a release
|
|
209
142
|
|
|
210
143
|
1. Make a PR with one commit that updates the version number in `pyproject.toml` and `maltoolbox/__init__.py`.
|
|
211
144
|
Follow [Semantic versioning](https://semver.org/).
|
|
@@ -17,13 +17,31 @@ maltoolbox/py.typed
|
|
|
17
17
|
maltoolbox/str_utils.py
|
|
18
18
|
maltoolbox/attackgraph/__init__.py
|
|
19
19
|
maltoolbox/attackgraph/attackgraph.py
|
|
20
|
+
maltoolbox/attackgraph/factories.py
|
|
21
|
+
maltoolbox/attackgraph/file_utils.py
|
|
22
|
+
maltoolbox/attackgraph/generate.py
|
|
20
23
|
maltoolbox/attackgraph/node.py
|
|
24
|
+
maltoolbox/attackgraph/node_getters.py
|
|
25
|
+
maltoolbox/attackgraph/ttcs.py
|
|
21
26
|
maltoolbox/attackgraph/analyzers/__init__.py
|
|
22
27
|
maltoolbox/language/__init__.py
|
|
28
|
+
maltoolbox/language/detector.py
|
|
29
|
+
maltoolbox/language/expression_chain.py
|
|
30
|
+
maltoolbox/language/language_graph_asset.py
|
|
31
|
+
maltoolbox/language/language_graph_assoc.py
|
|
32
|
+
maltoolbox/language/language_graph_attack_step.py
|
|
33
|
+
maltoolbox/language/language_graph_builder.py
|
|
34
|
+
maltoolbox/language/language_graph_loaders.py
|
|
35
|
+
maltoolbox/language/language_graph_lookup.py
|
|
36
|
+
maltoolbox/language/language_graph_serialization.py
|
|
23
37
|
maltoolbox/language/languagegraph.py
|
|
38
|
+
maltoolbox/language/step_expression_processor.py
|
|
24
39
|
maltoolbox/language/compiler/__init__.py
|
|
25
|
-
maltoolbox/language/compiler/
|
|
26
|
-
maltoolbox/language/compiler/
|
|
40
|
+
maltoolbox/language/compiler/distributions.py
|
|
41
|
+
maltoolbox/language/compiler/exceptions.py
|
|
42
|
+
maltoolbox/language/compiler/lang.py
|
|
43
|
+
maltoolbox/language/compiler/mal_analyzer.py
|
|
44
|
+
maltoolbox/language/compiler/mal_compiler.py
|
|
27
45
|
maltoolbox/patternfinder/__init__.py
|
|
28
46
|
maltoolbox/patternfinder/attackgraph_patterns.py
|
|
29
47
|
maltoolbox/translators/__init__.py
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
# MAL Toolbox
|
|
1
|
+
# MAL Toolbox v2.1.0
|
|
2
2
|
# Copyright 2025, Andrei Buhaiu.
|
|
3
3
|
#
|
|
4
4
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"""
|
|
20
20
|
|
|
21
21
|
__title__ = "maltoolbox"
|
|
22
|
-
__version__ = "
|
|
22
|
+
__version__ = "2.1.0"
|
|
23
23
|
__authors__ = [
|
|
24
24
|
"Andrei Buhaiu",
|
|
25
25
|
"Giuseppe Nebbione",
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
models and analyze attack graphs.
|
|
3
3
|
"""
|
|
4
4
|
|
|
5
|
-
from .attackgraph import AttackGraph
|
|
5
|
+
from .attackgraph import AttackGraph
|
|
6
|
+
from .factories import create_attack_graph
|
|
6
7
|
from .node import AttackGraphNode
|
|
7
8
|
|
|
8
9
|
__all__ = [
|
|
9
10
|
"AttackGraph",
|
|
10
11
|
"AttackGraphNode",
|
|
11
|
-
"Attacker",
|
|
12
12
|
"create_attack_graph"
|
|
13
13
|
]
|