CyberSim-OS · Devlog

Initial Phase 1 MVP Release: Desktop Simulation, Behavioral Assessment, and Certificate Verification

Completed the Phase 1 MVP implementation of CyberSim-OS: an offline-first, browser-native cybersecurity simulation platform featuring a fictional enterprise desktop, simulated workplace applications, a 7-axis behavioral scoring engine, and verifiable cryptographic completion certificates.

Milestone Overview

The Phase 1 MVP of CyberSim-OS establishes a browser-native, zero-dependency simulation environment designed to assess end-user cybersecurity behavior in a realistic workplace context.

Key Deliverables Implemented

  1. Fictional Desktop Shell & Window Manager:

    • Original enterprise Windows-like theme with draggable and minimizable window frames, taskbar, start launcher, real-time clock, and Web Audio synthesized toast alerts.
  2. Core Workplace Application Suite:

    • Inlook: Email client with RFC envelope inspector (detects typosquatted sender domains), destination link hover inspection, and SOC incident reporting.
    • Navigator: Simulated web browser supporting intranet directories, security policy hubs, and simulated credential-harvesting phishing portals.
    • Files & Doc Viewer: Virtual corporate storage and multi-format renderer for financial spreadsheets (.xlsx), security policies (.pdf), and approved vendor lists.
    • Security Center: Endpoint threat monitoring dashboard, alert feeds, and incident tracking.
  3. Behavioral Telemetry & Delayed Consequence Engine:

    • Granular event logging recording all learner interactions with timestamps and context.
    • Delayed consequence scheduler that triggers realistic delayed alerts (e.g. anomalous login notifications following credential submissions) without arcade-like immediate feedback.
  4. 7-Axis Behavioral Assessment & After-Action Report:

    • Comprehensive scoring rubric measuring Threat Detection, Investigation, Safe Handling, Verification, Incident Reporting, and False Positive Control on a 0–100 scale (80 passing threshold).
    • Pedagogical debrief modal providing score breakdowns and constructive feedback.
  5. Cryptographic Certificate Verification:

    • SHA-256 scenario fingerprinting using the native Web Crypto API.
    • Portable *.cybercert JSON credential export and standalone drag-and-drop offline verifier (verify.html).
  6. Standalone Offline Deployment:

    • Bundled Python 3 local server launcher (launcher.py) binding strictly to 127.0.0.1.

View the complete CyberSim-OS devlog →