enterpriseLang

The enterpriseLang is a MAL-based domain specific language for assessing the cyber security of enterprise systems.

Table of contents

• Quick Info
  • Project links
• Description
• Work Products
• Resources

Quick Info

• Active members:
  • Wenjun Xiong
• Status: running 🟢
• Timeline: 2019-2021

Project links

• enterpriseLang

Description

enterpriselang is a domain-specific MAL language based on the MITRE ATT&CK® Matrix, which intends to assess the cyber security of enterprise systems from a holistic point of view.

• We keep updating the file enterpriselang.mal and the folder securiCAD_models. The files within the folder single_attacks are not up-to-date, please refer to the file enterpriselang.mal. The pom.xml shall be used to support advanced distributions.
• The test cases can be found in src/test/java/org/mal_lang/enterpriselang/test/, while another pom.xml in the folder src shall be used for testing.
• Please compile the language with the following command on the command line run in securiCAD:

mvn clean package -PsecuriCAD -Dmaven.test.skip

This project can be built according to exampleLang instructions (https://github.com/mal-lang/exampleLang)

• The file pom.xml is the Maven configuration file of the project, make sure that <kernelcad.version> is 1.6.2-SNAPSHOT in pom.xml.
• The directory src/main/mal contains the MAL specification exampleLang.mal, which is the MAL specification of exampleLang.
• The directory src/main/resources/icons contains SVG icons for the assets in exampleLang.
• The directory src/test/java/org/mal_lang/examplelang/test contains the unit tests of exampleLang.
• It requires a new alpha version of securiCAD Professional. The instructions on how to download it here: https://github.com/foreseeti/foreseeti-maven-repo.

Work Products

• enterpriseLang v1 - threat modeling
• enterpriseLang v2 - attack simulations (in progress)
• enterpriseLang - validation / testing

Resources

• enterpriseLang
• MAL - Meta Attack Language
• SecuriCAD

---

This is a project run by the Software Systems Architecture and Security research group within the Division of Network and Systems Engineering at the Department of Computer Science at the School of Electrical Engineering and Computer Science @ KTH university.

For more of our projects, see the SSAS page at github.com.