Skip to content

Commit

Permalink
Frontpage updates (#76)
Browse files Browse the repository at this point in the history
* updates frontpage to include updated framework language, application descriptions, and platform links
  • Loading branch information
sei-rlehman authored Oct 2, 2024
1 parent 9b9c03e commit fba775b
Show file tree
Hide file tree
Showing 10 changed files with 197 additions and 34 deletions.
1 change: 1 addition & 0 deletions docs/assets/img/crucible-app-seer.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions docs/assets/img/crucible-icon-seer.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions docs/assets/img/fortress-app.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions docs/assets/img/gauntlet-app.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/assets/img/ghosts_new.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
107 changes: 103 additions & 4 deletions docs/index.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,103 @@
---
template: home.html
title: Crucible Simulation Framework
---
# ![An icon representing the Crucible application suite icon](../assets/img/home/cruciblelogo.svg "Crucible Application Suite Icon"){: style="height:75px;width:75px"} Introducing Crucible

**Crucible** is an open-source application framework for operating a cyber range. Crucible aims to be both simple and powerful, highly extensible, and cost effective.
Since 2018, Crucible has effectively enabled large-scale Department of Defense (DoD) cyber exercises to increase operator performance. Crucible is now available to the public under open-source licensing.

### Key Features
* Open-source cyber-range application framework
* Modular design with extensive application programming interfaces
* Customizable, immersive, browser-based user interface
* “Infrastructure as code” approach to topology building—enabling scalability, iteration, and reuse
* Flexible integration of powerful, third-party, open-source tools
* Scenario-based exercising
* Efficiency through automation
* Interoperability through open standards

### Addressing Persistent Challenges
Cyber range administrators confront persistent challenges:
* manual configurations leads to high-labor costs and excessive human error—with limited scalability and automation
* proprietary range software leads to vendor lock-in and increasing costs
CMU SEI developed Crucible in response to a decade of experiencing these frictions.

### Automating Cyber Experimentation and Exercise
Crucible automates creation of virtual cyber environments featuring modeled topologies, simulated user activity, and scripted scenario events. These environments power individual labs, team-based exercises, and operational experimentation. These simulations can be fully automated or facilitated. Crucible content developers create new templates by specifying a topology, scenario, assessments, and user interfaces. Participants are challenged to perform mission-essential tasks and individual qualification requirements. Each Crucible application is built using the open-source Angular and .NET Core software frameworks.

## Designing User Interfaces
![Player Logo](../assets/img/crucible-icon-player.svg){: style="height:75px;width:75px"}
Crucible’s **Player** application is the user’s window into the virtual environment. Player enables
assignment of team membership as well as customization of a responsive, browser-based user-interfaces using various integrated applications. A Crucible system administrator can shape how scenario information, assessments, and virtual environments are presented through the use of integrated applications.

### Open-Source Integrations:
* **osTicket**, a support ticket system, manages cyber range service requests.
* **Mattermost**, a chat service for real-time communications.
* **Rocketchat**, a chat service for real-time communications.
* **Roundcube**, an email service, provides web-based email.

## Coding a Topology
![Caster Logo](../assets/img/crucible-icon-caster.svg){: style="height:75px;width:75px"}
Crucible’s **Caster** application enables the “coded” design and deployment of a cyber topology. Using Caster Designs, a novice content developer can avoid scripting OpenTofu code by simply defining variables within pre-configured OpenTofu modules. Caster supports the design and deployment of virtual environments to three types of hypervisors:

* VMware vSphere ESXi
* Microsoft Azure HyperV (public-cloud)
* Proxmox Virtual Environment KVM (open source)

### Open-Source Integrations:
* **OpenTofu**, an “infrastructure-as-code” tool, enables scripted deployment of cyber infrastructure.
* **GitLab**, a version control system and code-repository, is used to store OpenTofu modules.

## Crafting a Scenario
![Blueprint Logo](../assets/img/blueprint-logo.png)
Crucible’s **Blueprint** application enables the collaborative creation and visualization of a master scenario event list (MSEL) for an exercise. Scenario events are mapped to specific simulation objectives.

![Steamfitter Logo](../assets/img/crucible-icon-steamfitter.svg){: style="height:75px;width:75px"}Crucible’s **Steamfitter** application enables the organization and execution of scenario tasks on virtual machines.

### Open-Source Integrations:
* **StackStorm**, an event-driven automation platform, scripts scenario events and senses the virtual environment.
* **Ansible**, a software provisioning, configuration management, and application deployment tool, enables post-deployment provisioning of services to infrastructure.

## Animating Activity
![GHOSTS Logo](../assets/img/ghosts_new.png){: style="height:75px;width:75px"}Crucible’s **GHOSTS** Non-Player Character (NPC) automation and orchestration framework deploys and shapes the activities of NPCs using Generative AI models.

Open-Source Integrations:
* **Ollama**, a platform designed to run llama 2, mistral, and other open source large language models locally on your machine.

## Evaluating Threats
![CITE Logo](../assets/img/cite-logo.png)Crucible’s **Collaborative Incident Threat Evaluator (CITE)** application enables participants from different organizations to evaluate, score, and comment on cyber incidents. CITE also provides a situational awareness dashboard that allows teams to track their internal actions and roles.

## Displaying Incident Information
![Gallery Logo](../assets/img/gallery-logo.png)Crucible’s **Gallery** application enables
participants to review cyber incident information based on source type (intelligence, reporting, orders, news, social media, telephone, email) categorized by critical infrastructure sector
or any other organization.

## Assessing Performance
![GHOSTS Logo](../assets/img/crucible-icon-seer.svg){: style="height:75px;width:75px"} "SEER Application Icon")
Crucible’s **SEER** application enables assessment of team performance. Assessment reports map training objectives to scenario events to performance assessments.

### Open-Source Integrations:
* **Moodle/H5P**, an interactive learning management system, eases the embedding of interactive quiz content. Assessments and other user-experience data can be recorded to a learning record store using the Experience API (xAPI).
* **TheHIVE**, a scalable security incident response platform, is tightly integrated with the malware information sharing platform (MISP).

## Launching a Simulation
![Alloy Logo](../assets/img/crucible-icon-alloy.svg){: style="height:75px;width:75px"}Crucible’s **Alloy** application enables users to launch an on-demand event or join an instance of an already-running simulation. Following the event, reports can provide a summary of knowledge and performance assessments.

## Operational Deployment
Crucible applications implement the OpenID Connect authentication protocol and are integrated with **Keycloak**, an open-source identity authentication service.
Crucible applications are deployed as **Docker** containers, which employ operating system level virtualization to isolate containers from each other. Container deployment, scaling, and management services are obtained using Kubernetes, a popular container-orchestration system. **Kubernetes** workflow and cluster management are performed using **Argo**, a popular open-source GitOps toolset.
A pre-configured Crucible Appliance virtual machine is available for download.
Beyond government-owned instances, the SEI owns and operates on-premises and cloud-based instances of Crucible:

![Fortress Logo](../assets/img/fortress-app.svg){: style="height:75px;width:75px"}
**Fortress** [fortress.sei.cmu.edu](https://fortress.sei.cmu.edu)

![Gauntlet Logo](../assets/img/gauntlet-app.svg){: style="height:75px;width:75px"}
**Gauntlet** [gauntlet.sei.cmu.edu](https://gauntlet.sei.cmu.edu)










4 changes: 4 additions & 0 deletions docs/index.md.htmlbak
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
---
template: home.html
title: Crucible Simulation Framework
---
94 changes: 66 additions & 28 deletions material/overrides/home.html
Original file line number Diff line number Diff line change
Expand Up @@ -24,41 +24,44 @@
<div class="tx-hero__content">
<h1 id="crucible-overview">Crucible: A Cyber Simulation Framework</h1>
<p>
Crucible delivers cost-effective, scalable, and dynamic virtual environments that feature a modeled topology, simulated user activity,
and scenario events to improve performance of mission-essential tasks or individual qualification requirements.
Crucible is an open-source application framework for operating a cyber range. Crucible aims to be both simple and powerful, highly extensible, and cost effective. Since 2018, Crucible has effectively enabled large-scale Department of Defense (DoD) cyber exercises to increase operator performance. Crucible is now available to the public under open-source licensing.

<br><br>
</p><br>
<p>
&#9679 <strong>
Open-source cyber simulation framework
<strong>
Key Features:
</strong> <br>
&#9679 <strong>
<p>
&#9679
Open-source cyber simulation framework
<br>
&#9679
Modular design featuring extensive APIs
</strong> <br>
&#9679 <strong>
<br>
&#9679
Customizable, immersive, browser-based user interface
</strong> <br>
&#9679 <strong>
<br>
&#9679
“Infrastructure as code” approach to topology
building
</strong> <br>
&#9679 <strong>
<br>
&#9679
Flexible integration of powerful, third-party
open-source tools
</strong> <br>
&#9679 <strong>
<br>
&#9679
Scenario-based simulation and assessment
</strong> <br>
&#9679 <strong>
<br>
&#9679
Support for multiple on-prem and cloud virtualization platforms
</strong> <br>
&#9679 <strong>
<br>
&#9679
Efficiency through automation
</strong> <br>
&#9679 <strong>
<br>
&#9679
Interoperability through open standards
</strong> <br><br>
<br><br>

<a
href="{{ page.next_page.url | url }}"
Expand Down Expand Up @@ -89,8 +92,37 @@ <h1 id="crucible-overview">Crucible: A Cyber Simulation Framework</h1>
<!-- 2nd Section -->
<!-- Crucible apps? -->
<section class="tx-container-9">
<div class="md-grid md-typeset">
<div class="tx-hero__image-9" style="margin-top: 10px">
<div class="tx-hero">
<div class="tx-hero__content-9">

<h1 id="">Automating Cyber Experimentation and Exercise</h1><br>
<p>
Cyber range administrators confront persistent challenges:<br><br>

Manual configurations leads to high-labor costs and
excessive human error—with limited scalability and automation<br>
Proprietary range software leads to vendor lock-in and increasing costs
CMU SEI developed Crucible in response to a decade of experiencing these frictions.<br>

Each application is designed around a robust API that encourages interoperability with other Crucible Framework applications
as well as powerful third-party tools.

</p><br>
</div>
</div>
<div class="tx-hero">
<div class="tx-hero__content-9">

<h1 id="">Addressing Persistent Challenges</h1><br>
<p>
Crucible automates creation of virtual cyber environments featuring modeled topologies, simulated user activity,
and scripted scenario events. These environments power individual labs, team-based exercises, and operational experimentation.
These simulations can be fully automated or facilitated. Crucible content developers create new templates by specifying a topology,
scenario, assessments, and user interfaces. Participants are challenged to perform mission-essential tasks and individual qualification requirements.
Each Crucible application is built using the open-source Angular and .NET Core software frameworks.

</p><br>
<!--<div class="tx-hero__image-9" style="margin-top: 10px">
<img
src="assets/img/home/crucible_apps2.png"
alt=""
Expand All @@ -99,23 +131,29 @@ <h1 id="crucible-overview">Crucible: A Cyber Simulation Framework</h1>
draggable="false"
align="left"
>
</div> -->
</div>
<div class="tx-hero">
<!-- Hero content -->
</div>
<!--<div class="tx-hero">
<div class="tx-hero__content-9">
<h1 id="">The Framework</h1><br>
<h1 id="">Addressing Persistent Challenges</h1><br>
<p>
The Crucible Framework applications work together to provide simulation developers with the tools they need
to develop high quality cyber security training events<br><br>
Cyber range administrators confront persistent challenges:<br><br>
&#9679 Manual configurations leads to high-labor costs and
excessive human error—with limited scalability and automation<br>
&#9679 Proprietary range software leads to vendor lock-in and increasing costs<br><br>
CMU SEI developed Crucible in response to a decade of experiencing these frictions.<br><br>
Each application is designed around a robust API that encourages interoperability with other Crucible Framework applications
as well as powerful third-party tools.<br>
</p><br>
</div>
</div>
</div>
</div> -->
</section>

<!-- 3th Section -->
Expand Down
Loading

0 comments on commit fba775b

Please sign in to comment.