CyberSim-OS · Devlog
Initial Phase 1 MVP Release: Desktop Simulation, Behavioral Assessment, and Certificate Verification
Completed the Phase 1 MVP implementation of CyberSim-OS: an offline-first, browser-native cybersecurity simulation platform featuring a fictional enterprise desktop, simulated workplace applications, a 7-axis behavioral scoring engine, and verifiable cryptographic completion certificates.
Milestone Overview
The Phase 1 MVP of CyberSim-OS establishes a browser-native, zero-dependency simulation environment designed to assess end-user cybersecurity behavior in a realistic workplace context.
Key Deliverables Implemented
Fictional Desktop Shell & Window Manager:
- Original enterprise Windows-like theme with draggable and minimizable window frames, taskbar, start launcher, real-time clock, and Web Audio synthesized toast alerts.
Core Workplace Application Suite:
- Inlook: Email client with RFC envelope inspector (detects typosquatted sender domains), destination link hover inspection, and SOC incident reporting.
- Navigator: Simulated web browser supporting intranet directories, security policy hubs, and simulated credential-harvesting phishing portals.
- Files & Doc Viewer: Virtual corporate storage and multi-format renderer for financial spreadsheets (
.xlsx), security policies (.pdf), and approved vendor lists. - Security Center: Endpoint threat monitoring dashboard, alert feeds, and incident tracking.
Behavioral Telemetry & Delayed Consequence Engine:
- Granular event logging recording all learner interactions with timestamps and context.
- Delayed consequence scheduler that triggers realistic delayed alerts (e.g. anomalous login notifications following credential submissions) without arcade-like immediate feedback.
7-Axis Behavioral Assessment & After-Action Report:
- Comprehensive scoring rubric measuring Threat Detection, Investigation, Safe Handling, Verification, Incident Reporting, and False Positive Control on a 0–100 scale (80 passing threshold).
- Pedagogical debrief modal providing score breakdowns and constructive feedback.
Cryptographic Certificate Verification:
- SHA-256 scenario fingerprinting using the native Web Crypto API.
- Portable
*.cybercertJSON credential export and standalone drag-and-drop offline verifier (verify.html).
Standalone Offline Deployment:
- Bundled Python 3 local server launcher (
launcher.py) binding strictly to127.0.0.1.
- Bundled Python 3 local server launcher (