Skip to content

Match CybORG decoy exploit effects and SQL execution - #39

Draft
PaulHax wants to merge 1 commit into
experiment-env-contractfrom
parity-ci-repair
Draft

PaulHax wants to merge 1 commit into
experiment-env-contractfrom
parity-ci-repair

Conversation

@PaulHax

@PaulHax PaulHax commented Oct 27, 2026 •

Copy link
Copy Markdown
Collaborator

Decoy exploits diverge from CybORG

The strict random-Blue campaign
exposes missing random draws and Blue alerts for decoy exploits. Execution also
treats Vsftpd's web decoy as an FTP service and rejects MySQL exploits when a
decoy supplies the observed web port.

Match native process selection and execution effects

Preserve native-process precedence, consume the success draw before a decoy
failure, and retain the network alert without creating a session. Match the
actual decoy process types and require MySQL for SQL execution, keeping its
observed web-port prerequisite in action selection. Extend strict RNG replay for
HTTPS and Haraka decoys and compare the resulting Blue observations with CybORG.

Depends on #36, stacked on #38. Targets experiment-env-contract.

@PaulHax
PaulHax changed the base branch from cotraining-ci-cleanup to experiment-env-contract October 27, 2026 00:17
@PaulHax
PaulHax added this pull request to stack #24 October 27, 2026 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant