Creating a scenario
To be able to start a simulation, you need to assign high value assets in the model i.e., the targets for the Attacker and the Attacker's entry point. This will also be basis of the simulation reports.
There are two main ways of creating a scenario, if you have never worked with securiCAD Enterprise before we recommend using the scenario wizard.
The scenario wizard is the easiest way to get started with scenarios and simulations.
Note: The scenario wizard requires securiCAD Enterprise 1.11.0 or newer.
Open the wizard
In the Project overview select the model you want to use as a base.
To the right of the "Start scenario" button there's an arrow, click that to show the dropdown menu and click "Scenario wizard".
Use the wizard
- Select asset type What kind of asset you are primarily interested in simulating attacks against?
securiCAD Enterprise will set consequence for all objects of this type, on the attackstep you choose in step 3.
- Select attack type What kind of attack are you interested in? This will narrow your selection of attacksteps in step 3.
Confidentiality I'm worried about someone reading my data.
Availability I'm worried about someone removing my data.
Integrity I'm worried about someone changing my data.
Some attacksteps will match multiple of these.
Select Attack Step What attacker end goal are you primarily worried about?
Now you are shown the standard Start scenario dialog where you can enter a name and description and start the scenario.
Setting high value assets
High value assets are the target for the attacker in the simulation and the basis for the simulation report. You can set multiple high value assets on different objects.
In the Project overview, click on the Modeler icon in the model list to open the modeling tool.
While in the Modeler, go to the Object Explorer to the left to get a list of all objects in the model. Drag-and-drop one or more objects to the canvas that you want to assign as high value assets.
Right-click on the object and click on Preferences to open the settings for the object. Under the Attack steps tab, you can see available attack steps for the object.
Set the consequence of any of the attack steps to assign a particular impact to the Attacker reaching that attack step. Where 10 is the worst thing that could happen.
Objects you have selected as high value assets will have a yellow background.
Click on Save to save your changes
You can also see all your high value assets in the High value assets view under the Views tab
Set high value assets at scale or automatically
High value assets can also be assigned at scale using Labs or automatically using the Enterprise SDK
Adding an Attacker
To be able to start a simulation, you need to add an attacker to the model. The attacker’s entry points are defined by connecting the attacker to existing objects in the model.
Automatically generated models
Models that are generated from environment data e.g., AWS and Azure will have an Attacker automatically generated and connected to the Internet for you. You can still change the entry point and add additional entry points for an existing attacker.
Drag and drop an Attacker object from the Objects tab to the canvas (if you don't already have one)
Hold the shift key and drag a new association from the Attacker object to the object that you want to connect the attacker to.
Once the association is created, you are given the option to select what attack step on the object that should be the entry point for the Attacker.
Click on Save to save your changes
Updated over 1 year ago