The library documents itself · Security & governance
stzSecurityDrill
28 own methods · 0 forms written with extensions, listed under their method
the source: base/security/stzSecurityDrill.ring(opens in a new tab) · All classes · The area reference: Security & governance
Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean
No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.
Method
Explanation, as the source carries it
init
(no comment in the source: the name reads as a sentence) initno extension
Name
(no comment in the source: the name reads as a sentence) nameno extension
SetKey
(no comment in the source: the name reads as a sentence) set keyno extension
SetEvidencePath
(no comment in the source: the name reads as a sentence) set evidence pathno extension
EvidencePath
(no comment in the source: the name reads as a sentence) evidence pathno extension
Port
(no comment in the source: the name reads as a sentence) portno extension
SpawnTarget
the target ---------------------------------------------------- Spawn the application under attack: a real stzAppServer child with an open ledger, a real stzAuth, and a real signed-request gate.no extension
WaitReady
(no comment in the source: the name reads as a sentence) wait readyno extension
FireCredentialStuffing
the attacks --------------------------------------------------- Guess a password until the account's failure counter says so.no extension
FireForgery
Present a signature that does not verify.no extension
FireReplay
Send a VALID signed request twice -- the second is a replay.no extension
Expectations
(no comment in the source: the name reads as a sentence) expectationsno extension
CollectEvidence
acquisition: evidence crosses the boundary -------------------- Ask the target to seal its ledger, then VERIFY the file and rebuild a working ledger from it. The parent believes nothing it has not verified.no extension
OpenVictimSession
containment: the loop closes ---------------------------------- Log the victim in for real BEFORE the attack, so containment has a live session to end and the drill can prove it ended.no extension
Contain
Contain what the evidence shows, as poOperator. The plan is derived FROM THE ACQUIRED EVIDENCE (an incident per credential-stuffing finding), governed HERE -- MayCommit is judged on the operator, and an LLM actor is refused -- and carried to the target, whose REAL responder (stzAuthResponder over its own stzAuth) performs it. Then containment is VERIFIED from outside: the right password must now be refused, and the session opened before the attack must be dead. Returns the number of actions committed.no extension
ContainmentHolds
Verified from outside the target: the correct password is refused, and the pre-attack session no longer answers.no extension
TimeToDetectMs
The two numbers a drill exists to produce, in milliseconds of wall time: from the first attack sent to the evidence showing every expected detection, and from there to containment applied and verified. -1 when that point was never reached.no extension
TimeToContainMs
(no comment in the source: the name reads as a sentence) time to contain msno extension
Containment
(no comment in the source: the name reads as a sentence) containmentno extension
AcquiredLedger
(no comment in the source: the name reads as a sentence) acquired ledgerno extension
Attestor
(no comment in the source: the name reads as a sentence) attestorno extension
AcquisitionWhy
(no comment in the source: the name reads as a sentence) acquisition whyno extension
FiredDetections
(no comment in the source: the name reads as a sentence) fired detectionsno extension
Passed
Did every expected detection actually fire?no extension
MissedDetections
(no comment in the source: the name reads as a sentence) missed detectionsno extension
Explain
legibilityno extension
Show
(no comment in the source: the name reads as a sentence) showno extension
Destroy
(no comment in the source: the name reads as a sentence) destroyno extension