generated from Labyricorn/labyricorn-project-template
50 lines
2.8 KiB
Markdown
50 lines
2.8 KiB
Markdown
_model: devlog-entry
|
||
---
|
||
schema_version: 1
|
||
---
|
||
title: Initial Phase 1 MVP Release: Desktop Simulation, Behavioral Assessment, and Certificate Verification
|
||
---
|
||
date: 2026-08-23
|
||
---
|
||
author: Labyricorn
|
||
---
|
||
summary:
|
||
|
||
Completed the Phase 1 MVP implementation of CyberSim-OS: an offline-first, browser-native cybersecurity simulation platform featuring a fictional enterprise desktop, simulated workplace applications, a 7-axis behavioral scoring engine, and verifiable cryptographic completion certificates.
|
||
---
|
||
tags: simulation, cybersecurity, training, offline-first, static-first, certificates, release
|
||
---
|
||
source_commit: 9028325dfcfce8174e45fe90f10138e90776a506
|
||
---
|
||
body:
|
||
|
||
### Milestone Overview
|
||
|
||
The Phase 1 MVP of CyberSim-OS establishes a browser-native, zero-dependency simulation environment designed to assess end-user cybersecurity behavior in a realistic workplace context.
|
||
|
||
### Key Deliverables Implemented
|
||
|
||
1. **Fictional Desktop Shell & Window Manager**:
|
||
- Original enterprise Windows-like theme with draggable and minimizable window frames, taskbar, start launcher, real-time clock, and Web Audio synthesized toast alerts.
|
||
|
||
2. **Core Workplace Application Suite**:
|
||
- **Inlook**: Email client with RFC envelope inspector (detects typosquatted sender domains), destination link hover inspection, and SOC incident reporting.
|
||
- **Navigator**: Simulated web browser supporting intranet directories, security policy hubs, and simulated credential-harvesting phishing portals.
|
||
- **Files & Doc Viewer**: Virtual corporate storage and multi-format renderer for financial spreadsheets (`.xlsx`), security policies (`.pdf`), and approved vendor lists.
|
||
- **Security Center**: Endpoint threat monitoring dashboard, alert feeds, and incident tracking.
|
||
|
||
3. **Behavioral Telemetry & Delayed Consequence Engine**:
|
||
- Granular event logging recording all learner interactions with timestamps and context.
|
||
- Delayed consequence scheduler that triggers realistic delayed alerts (e.g. anomalous login notifications following credential submissions) without arcade-like immediate feedback.
|
||
|
||
4. **7-Axis Behavioral Assessment & After-Action Report**:
|
||
- Comprehensive scoring rubric measuring *Threat Detection*, *Investigation*, *Safe Handling*, *Verification*, *Incident Reporting*, and *False Positive Control* on a 0–100 scale (80 passing threshold).
|
||
- Pedagogical debrief modal providing score breakdowns and constructive feedback.
|
||
|
||
5. **Cryptographic Certificate Verification**:
|
||
- SHA-256 scenario fingerprinting using the native Web Crypto API.
|
||
- Portable `*.cybercert` JSON credential export and standalone drag-and-drop offline verifier (`verify.html`).
|
||
|
||
6. **Standalone Offline Deployment**:
|
||
- Bundled Python 3 local server launcher (`launcher.py`) binding strictly to `127.0.0.1`.
|