This work was supported by the Engineering and Physical Sciences Research Council (EPSRC) (Grant number EP/V038710/1 https://www.sciencedirect.com/science/article/pii/S0167404823003644#gs0001).
-
Projects
-
Dependency Model and IR Playbook Projects
- example-project.zip: Contains a basic Dependency Model and Playbook. Use this project as a base to help create your own.
- workshop-example-sqli-injection.zip: Contains an expanded use case for small translation company. There is a small dependency model and playbook process linked. The scenario is malware has been detected on one of their file servers.
-
IR Playbook Projects
- CACAOex.zip and IACDex.zip: Two FRIPP projects from the paper "Model-Based Incident Response Playbooks"1. CACAO's example details a preventative playbook for the malware FuzzyPanda. The IACD example details mitigation of a high risk device.
-
Intrusion Modelling
- Intrusion-modelling.zip contains nine ICS intrusions modelled using FRIPP as part of an forthcoming paper2.
-
-
Dependency Model Examples
- SCADA.dependencymodel: The complete SCADA model from the paper "A Configurable Dependency Model of a SCADA System for Goal-Oriented Risk Assessment"3
- example-probabilities.dependencymodel: An example dependency model showing simple probabilities and relationships.
-
Playbook Templates
- Web Injection Analysis.fripp and Web Injection Containment/Eradication.fripp: An example of a detailed IR Playbook showing the Analysis, Containment, and Eradication phases. By Muhammad Huzaifa Jamil.
This work is licensed under CC BY-SA 4.0.
Footnotes
-
Shaked, Avi, et al. “Model-Based Incident Response Playbooks.” Proceedings of the 17th International Conference on Availability, Reliability and Security, ACM, 2022, pp. 1–7, https://doi.org/10.1145/3538969.3538976. ↩
-
Currently under review. ↩
-
Cherdantseva Y, Burnap P, Nadjm-Tehrani S, Jones K. A Configurable Dependency Model of a SCADA System for Goal-Oriented Risk Assessment. Applied Sciences. 2022; 12(10):4880. https://doi.org/10.3390/app12104880 ↩