示例#1
0
 private static void PopulateHrTickets(InsiderThreatProfile insiderThreatProfile)
 {
     var selectedTicket = new[] { "Policy Violation", "Disruptive Behavior", "Financial Hardship", "Job Performance Problem" }.RandomElement();
     var newEvent = new RelatedEvent
     {
         Reported    = AnimatorRandom.Date(),
         Description = selectedTicket
     };
 }
示例#2
0
        public static InsiderThreatProfile GetInsiderThreatProfile()
        {
            var raw = File.ReadAllText("config/insider_threat.json");
            var o   = JsonConvert.DeserializeObject <InsiderThreatManager>(raw);

            var insiderThreatProfile = new InsiderThreatProfile();

            foreach (var profile in o.Profiles)
            {
                if (profile == null || !profile.Items.Any())
                {
                    continue;
                }

                // some random % get a violation get violation from o
                if (AnimatorRandom.Rand.Next(0, 100) > 72)
                {
                    var selectedEvent = profile.Items.RandomElement();

                    var newEvent = new RelatedEvent
                    {
                        Reported    = AnimatorRandom.Date(),
                        Description = selectedEvent.Name,
                        ReportedBy  = Name.GetName().ToString()
                    };
                    if (selectedEvent.Violation)
                    {
                        var c = o.CorrectiveActions.RandomElement();
                        newEvent.CorrectiveAction = c.Name;
                    }

                    switch (profile.Name)
                    {
                    case "AccessProfile":
                        insiderThreatProfile.Access.RelatedEvents.Add(newEvent);
                        break;

                    case "CriminalViolentOrAbusiveConductProfile":
                        insiderThreatProfile.CriminalViolentOrAbusiveConduct.RelatedEvents.Add(newEvent);
                        break;

                    case "FinancialConsiderationsProfile":
                        insiderThreatProfile.FinancialConsiderations.RelatedEvents.Add(newEvent);
                        break;

                    case "ForeignConsiderationsProfile":
                        if (Npc.NpcProfile.ForeignTravel.Trips.Any())    //probably need a trip in order to have event
                        {
                            insiderThreatProfile.ForeignConsiderations.RelatedEvents.Add(newEvent);
                        }
                        break;

                    case "JudgementCharacterAndPsychologicalConditionsProfile":
                        insiderThreatProfile.JudgementCharacterAndPsychologicalConditions.RelatedEvents.Add(newEvent);
                        break;

                    case "ProfessionalLifecycleAndPerformanceProfile":
                        insiderThreatProfile.ProfessionalLifecycleAndPerformance.RelatedEvents.Add(newEvent);
                        break;

                    case "SecurityAndComplianceIncidentsProfile":
                        insiderThreatProfile.SecurityAndComplianceIncidents.RelatedEvents.Add(newEvent);
                        break;

                    case "SubstanceAbuseAndAddictiveBehaviorsProfile":
                        insiderThreatProfile.SubstanceAbuseAndAddictiveBehaviors.RelatedEvents.Add(newEvent);
                        break;

                    case "TechnicalActivityProfile":
                        insiderThreatProfile.TechnicalActivity.RelatedEvents.Add(newEvent);
                        break;
                    }
                }
            }

            PopulateAccess(insiderThreatProfile);
            PopulateHrTickets(insiderThreatProfile);

            return(insiderThreatProfile);
        }