Automatically Generating Models of IT Systems

Information technology system (ITS), informally, consists of hardware and software infrastructure (e.g., workstations, servers, laptops, installed packages, databases, LANs, firewalls, etc.), along with physical logical connections inter-dependencies between various items. Nowadays, every company owns operates an ITS, but detailed information about the is rarely publicly available. However, there are many situations where availability such data would be beneficial. For example, cyber ranges need descriptions complex realistic IT systems in order to provide effective training education platform. Furthermore, algorithms cybersecurity, particular attack tree generation, validated on models systems. In this paper, we describe a call Generator that, based high-level requirements as number employees business area target belongs to, generates model ITS that satisfies given requirements. We put special emphasis following two criteria: generated large amount details, ideally resembles real system. Our survey related literature found no sufficiently similar prior works, so believe first attempt building something like this. created proof-of-concept implementation Generator, it by generating for simplified fictional financial institution, analyzed Generators performance respect problem size. The research was done iterative manner, coauthors continuously providing feedback intermediate results. (...) intend extend prototype allow probabilistic generation when only subset parameters explicitly defined, further develop validate our approach help domain experts.