CyberSecurity Scoring System (CSSS)

CyberSecurity Scoring System (CSSS) is a program to assist with training for the CyberPatriot / CyberCenturion competitions.

While it is currently possible to create your own practice images, there is only a scoring client for Windows computers. To assist with training competitors with Windows, Ubuntu and Debian Operating Systems, this program has been created to provide a scoring system for them.

Contents

• Build Info
• Requirements
• Installing
• Running
• Contributing
• License Terms
  • NuGet Packages
  • Other Projects
• Copyright
• Disclaimer

Build Info

Branch	Status (Windows Build)	Status (Linux Build)	Last Commit
Master
Develop

Requirements

To run CSSS, you will need to have an image running one of the supported operating systems:

• Windows:
  • Desktop:
    • Windows 7
    • Windows 8
    • Windows 10
  • Server:
    • Windows Server 2008 R2
    • Windows Server 2012
    • Windows Server 2012 R2
    • Windows Server 2016
    • Windows Server 2019
• Linux:
  • Ubuntu 16.04
  • Ubuntu 18.04
  • Debian 9

Other operating systems should work, but they are not supported as the CyberPatriot / CyberCenturion competitions do not use them.

Installing

Before CSSS will run, the following additional programs need to be installed onto your image:

• Windows:
  • The .Net framework versions 4.0 or 4.5 (which one is required depends on if your image contains any of the needed Service Packs). Please follow the usual installation steps (Next, Next, ..., Finish)
• Linux:
  • The Mono client should be installed. Please follow their instructions on the Install Mono on Linux help article (summary: run the 3 lines of terminal commands from the top of the article, then run sudo apt-get install -y mono-devel)
  • For Debian images, the libnotify package also needs to be installed (sudo apt-get install libnotify-bin)

Running

Double-clicking on CSSS will cause it to quickly show the usage window, then close itself. This is by design. To run CSSS properly, a number of arguments need to be passed to the program, which are:

Usage:
  CSSS.exe -c | -o | -p [--shutdown] | -s | [-h] | [-m]

Examples:
  CSSS.exe -c
  CSSS.exe -o -m
  CSSS.exe -p
  CSSS.exe -p --shutdown
  CSSS.exe -s
  CSSS.exe -h


Required arguments (at least one is needed):
  -c, --check:    Checks the config files for any problems
  -o, --observe:  Observes CSSS running before preparing it (implies '-c')
  -p, --prepare:  Prepares CSSS ready for image release (implies '-c')
  -s, --start:    Starts the scoring system


Optional arguments:
  -h, --help:     Shows this help message
  --shutdown:     Shuts down the computer
                  Can be used with -p / --prepare to aid image capture


Developer arguments (all optional):
  -m, --multiple: Allows multiple instances of CSSS to run concurently

The required arguments have been chosen to spell 'COPS', as competitors are 'policing' the security of the computer.

Under normal image building, the -o option should be passed, as this allows CSSS to run as it would for training, but without affecting the files used to list the 'issues'.

When you are ready to release the image, with administrative privileges (e.g. sudo, "Run as administrator") run CSSS with the -p option to prepare the necessary files and allow CSSS to start automatically on computer reboots.

⚠️ Running CSSS with the -p argument will encrypt the issue files. Make sure that you have a snapshot of your image before you run this command, otherwise you will need to set everything up again should there be any problems.

Contributing

Thanks for your interest in CSSS. Read more about contributing to the project to get started.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

License Terms

CSSS is publised under the GNU GPL v3 License, see the LICENSE file for more information.

NuGet Packages

This project uses NuGet packages. Their project source code pages and licenses can be found below:

• HtmlAgilityPack
• Newtonsoft.Json
• NLog
• NUnit

Other Projects

The following projects and source code are included in CSSS. Their licenses project pages can be found below:

• OSVersionInfo

Copyright

CyberPatriot is copyright of US Air Force Association

CyberCentrurion is copyright of Cyber Security Challenge UK

Disclaimer

This program is designed to score the state of a computer image against a pre-defined checklist of "issues". It is not designed to rate your computer security, provide security advice, or anything else that isn't related to the CyberPatriot / CyberCenturion competitions.