[TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854
-
Updated
Jun 28, 2024 - Python
[TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
Synthesize realistic Active Directory, Entra ID and hybrid identity attack graphs for Neo4j and BloodHound CE (DSN 2024)
Enterprise-grade vulnerability management platform with AI-powered analysis, interactive attack graph visualization (NetworkX), and intelligent chatbot for security consultation. Integrates OpenCTI threat intelligence.
AAPP-MART is a cybersecurity engine for AI-powered autonomous attack path prediction and multi-agent red team simulation. These capabilities include adversary emulation, threat modeling, security validation, risk assessment, and MITRE ATT&CK alignment.
Cyber-physical attack-graph generator for smart grids: chains recon → network → ICS/physical impact and ranks defensive chokepoints. Defensive research only.
Hybrid LSTM-Markov attack chain forecasting for MITRE ATT&CK. Learns from 4,849 campaign chains + 8,437 real intrusion traces. Generates 26,051 risk-ranked multi-step attack futures via constrained beam search. 86% next-step accuracy, 0.76 Pearson correlation with NCISS severity. SECRYPT 2026 submission.
Visual IAM attack graph for AWS. Instantly analyze permissions, detect privilege-escalation risks, and audit IAM roles — locally, securely.
Static + plan-time Terraform security analysis with attack-graph prioritisation, MITRE ATT&CK mapping, and one-click PR fix suggestions. 215 rules, 100% fix_hcl coverage.
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
1337 Security Workbench — open security workstation and model-agnostic security execution, state, and evidence platform
Neuro-symbolic RL agent that learns to pentest networks it has never seen — GPT-4o compiles CVE preconditions into a Z3 action mask over a GraphSAGE PPO policy. Zero-shot attack-graph transfer, negatives disclosed.
Formal-model-first lab for agents: finite-state models with Z3 bounded checks, gated execution with an intent ledger and reconciliation, field-level prediction-vs-observation diffs, model revision with regression cases, and offline replay bundles. Local-first: Temporal · FastAPI · React. Domain plugins: MAL, CAGE 4.
Model-agnostic MCP attack brain backed by Sibyl Memory and gated H3RETIK Kali workers
Lightweight Autonomous Intrusion Detection and Response System — real-time packet capture, adaptive baseline learning, micro-honeypot deception layer, causal attack graphs, and explainable automated blocking for small-scale networks.
PRISM (Team FORTZ, Byteathon BYT04): correlates Windows Security, Sysmon and Zeek DNS logs into one explainable attack story: where it started, where the attacker is now, and a predicted next target. Rule-based correlation, MITRE ATT&CK mapping, 9 evidence-grounded investigation agents, real-time feed. FastAPI + React.
AWS exploit chain prover, finds cross-service privilege escalation paths
To associate your repository with the attack-graph topic, visit your repo's landing page and select "manage topics."