Mad Jack's cyber range instrumentation
Named after Mad Jack Churchill, the Mad Jack's Range is used by SOFWERX to produce relevant data sets pertaining to home automation devices. Using that data, we hope to evaluate software and combine open-source information, technology, and software to build prototypes to assist in defend against attacks targeting a home network.
In planning this project, we used a number of readily-available devices from manufacturers such as Google or Amazon. All the devices that were tested are available for purchase on the open-market. Also, the software and software prototypes were also open-source.
The physical scenario of the exercise was built around the concept of war games. With war games, there are always biases on each side of the battle; however, what insights, information, and questions arise before, during and after an operation? These questions could not be addressed until the Mad Jack’s Range began research in January 2018.
The first phase was a physical structure populated with IoT devices and typical network infrastructure to be used for cyber attack and defense.
The second phase expanded the scope beyond the Safehouse structure to encompass the entire Sofwerx building, with the primary deliverable as a video showing active attacker scenarios and mitigation.
Please check out the wiki for the documentation of the efforts.
- althea-firmware - Althea - Blockchain Incentivized wifi mesh firmware based on OpenWRT
- docker-aletheios-cicd - Aletheios ROM builder - a LineageOS ROM for Android Pixel2XL phones
- android-apache-spot - How to run Apache SPOT on an Android phone with TermUX
- android-tensorflow-gun-classification - Mobile app for image recognition (related to Mad Jack’s)
- android-tensorflow-object-detection - Mobile app for object detection (related to Mad Jack’s)
- assault-rifle-detection - For video Act I, gun detection software
- cybercity - Cybercity project in partnership with Cyber Florida
- docker-domoticz - Dockerized Domoticz IoT home automation service
- docker-maplab - Dockerized MapLab (ROS based drone flying engine)
- docker-spot - Dockerized Apache SPOT packet capture and machine learning IDS service
- docker-tello-facetrack - Automatically flies a tello drone remotely without human intervention, following a face.
- es-domoticz-notify - ElasticSearch bridge for domoticz notify POSTs
- es-gammarf - ElasticSearch bridge for gammarf posts
- es-ifttt - ElasticSearch bridge for IFTTT webhook POSTs
- es-json - ElasticSearch bridge for generic HTTP JSON POSTs
- es-sync - ElasticSearch synchronization service
- es-tshark - ElasticSearch bridge for tshark pcap capturing
- gun-detect - For video Act I and II, SOFWERX building camera gun detection
- gun-detection - Part of the Smart Safe House
- mad-jacks-p2-transfer-learning - For video Act III, the algorithm used for a drone to identify a target
- object-recognition-detection - Algorithm for identifying objects at far distance
- pistol-detection - For video Act II, used for Gimble to identify face of target
- safehouse - Cesium.js based SafeHouse model with ElasticSearch animated elements
- safehouse-algorithm - Used to identify if the adversary was conducting attack behavior to the safehouse.
- safehouse-data - Data acquired during Mad Jack’s Safehouse
- safehouse-data-transformations - Data wrangling process for the Safehouse operation
- safehouse-elasticsearch-queries - Data queries for the Safehouse operation
- safehouse-scada - Documentation of the SCADA Lane for the Safehouse project at SOFWERX.
- tensorflow-gun-detection - For the Safehouse, gun detection software for Nerf gun system
- tensorflow-object-detection-docker - Reproducible environment for object detection development environment
- tensorflow-person-detection - For the Safehouse, identifying a person at the front door