# Script for PRACIS mechanism for privacy-preserving and aggregatable cybesecurity information sharing

# This script focuses on message aggregation testing

# AUTHORS: Jose Maria de Fuentes (jfuentes at inf.uc3m.es), Lorena Gonzalez (lgmanzan at inf.uc3m.es)

# Version: 2016-05-01

# Contains adapted fragments of STIXProject reference implementation. For this reason the following statement applies:

# Copyright (c) 2015, The MITRE Corporation

#All rights reserved.

#Redistribution and use in source and binary forms, with or without

#modification, are permitted provided that the following conditions are met:

# * Redistributions of source code must retain the above copyright

# notice, this list of conditions and the following disclaimer.

# * Redistributions in binary form must reproduce the above copyright

# notice, this list of conditions and the following disclaimer in the

# documentation and/or other materials provided with the distribution.

# * Neither the name of The MITRE Corporation nor the

# names of its contributors may be used to endorse or promote products

# derived from this software without specific prior written permission.

#THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND

#ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

#WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE

#DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR

#ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

#(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

#LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND

#ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

#(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS

#SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# This script uses parts of LibFTE. For this reason the following statement applies:

#The MIT License (MIT)

#Copyright (c) 2016, PRACIS authors

#Permission is hereby granted, free of charge, to any person obtaining a copy

#of this software and associated documentation files (the "Software"), to deal

#in the Software without restriction, including without limitation the rights

#to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

#copies of the Software, and to permit persons to whom the Software is

#furnished to do so, subject to the following conditions:

#The above copyright notice and this permission notice shall be included in

#all copies or substantial portions of the Software.

#THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

#IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

#FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

#AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

#LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

#OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

#THE SOFTWARE.

# This script uses the implementation of Paillier cryptosystem of Charm-crypto, produced by J Ayo Akinyele

# Refer to charm-crypto.com for further details

#### END OF COPYRIGHT OR LICENSING NOTICES ####

# python-cybox

from cybox.common import Hash

from cybox.objects.file_object import File

# python-stix

from stix.core import STIXPackage, STIXHeader

from datetime import datetime

from cybox.common import Time

from stix.incident import Incident,ImpactAssessment, AffectedAsset

from stix.incident import Time as incidentTime # different type than common:Time

from stix.common import InformationSource

from stix.common import Confidence

from stix.common import Identity

from stix.data_marking import Marking, MarkingSpecification

from stix.extensions.marking.simple_marking import SimpleMarkingStructure

# libfte

import sys

import time

import random

import unittest

sys.path.append('..')

sys.path.append('../thirdparty/ffx')

sys.path.append('../thirdparty/ranking-test-framework')

import fte

# end-libfte

# libfte-stable

import fte.encoder

import fte.encrypter

import regex2dfa

#end lifte-stable

#Paillier

from charm.schemes.pkenc.pkenc_paillier99 import Pai99

from charm.schemes.pkenc.pkenc_paillier99 import Ciphertext

from charm.toolbox.integergroup import RSAGroup

from charm.toolbox.integergroup import lcm

from charm.toolbox.integergroup import integer

#end Paillier

#AES

from Crypto.Cipher import AES

#Base64

import base64

#random

import random

from random import randrange

#Hash

from hashlib import sha1

import hmac

# key = CONSUMER_SECRET& #If you dont have a token yet

key = "CONSUMER_SECRET&TOKEN_SECRET"

ATTACK_TYPES=["DoS","Leakage","impersonation"]

pubKeyPaillier = {}

secKeyPaillier = {}

fpeKey=0

simmKey_ora_Leak = 0

simmKey_ibm_dos =0

aes_encSuite_ora = ""

aes_encSuite_ibm = ""

aes_decSuite_ora = ""

aes_decSuite_ibm = ""

pai =""

checkear=""

timer_creation_stix_FPE = 0

timer_revealing_stix_FPE =0

timer_aggregation_homo=0

timer_revealing_aggregation_homo=0

timer_setup=0

DICT_LEVEL={"High":"h","Medium":"m","Low":"l","None":"n","Unknown":"u"}

DICT_EFFECT={"Brand or Image Degradation":"Brand","Loss of Competitive Advantage":"LCAdv","Loss of Competitive Advantage - Economic":"Econo","Loss of Competitive Advantage - Military":"Milit","Data Breach or Compromise":"DataB","Degradation of Service":"Degra","Destruction":"Destr","Disruption of Service / Operations":"Disru","Financial Loss":"Finan","Loss of Confidential / Proprietary Information or Intellectual Property":"LossP","Regulatory, Compliance or Legal Impact":"RCLim","Unintended Access":"UnAcc","Loss of Competitive Advantage - Political":"Polit","User Data Loss":"UsrDL"}

DICT_TYPE={"Viruses":"virus","Worms":"worms","Trojans":"troja","Botnets":"botnt","APTs":"apert","Infostealer infections":"infst","Network scanning":"nscan","Exploitation of vulnerability":"explo","Backdoors":"backd","Brute force attacks":"brute","SQL injection attacks":"sqlin","Unauthorized elevation of privileges":"elevp","Buffer overflows":"bufov","Phising":"phisn","DoS":"deosv","DdoS":"ddosv","Jamming":"jammi","Hardware failures":"hwfai","Software failures":"swfai","Power failures":"pwfai","Network failures":"nwfai", "Unauthorised use of resources":"unres","Copyright infringement":"copyi","Miscofiguration of devices":"miscd","Abuse of privileges":"abuse","Loss/theft of devices (laptops, tablets, phones et)":"devis","Compromise of hard copy data such as loss of documents (e.g. sent via post)":"compd", "Transmission to wrong recipient (e.g. via fax).":"txerr","Flood":"flood", "Wind":"winds", "Lightening":"light","Fire":"fires","Vandalism":"vndls"}

DICT_ASSET={"Backup":"backu","Database":"datab","DHCP":"dhcps","Directory":"direc","DNS":"dnsss","File":"files","Log":"logss","Mail":"mails","Mainframe":"mainf","Payment switch":"paysw", "POS controller":"posco","Print":"print","Proxy":"proxy","Tablet":"table","Peripheral":"perip", "POS terminal":"poste","Kiosk":"kiosk","VoIP phone":"voipp","User Device":"userd","Tapes":"tapes","Disk media":"diskm","Documents":"docum","Manager":"manag","Partner":"partn","Remote access":"remot","SCADA":"scada","Web application":"webap","Server":"serve","Access reader":"accre","Camera":"camer","Firewall":"firew","HSM":"hsmss","IDS":"idsss"}

#SETUP METHOD - Initializes all crypto parameters

def setupFPE4Cyber():

aes_decSuite_ibm = AES.new(simmKey_ibm_dos, AES.MODE_CBC, 'This is an IV456')

def main():

print('Time aggregation paillier %0.50f s' % ((numA)))

####### STIX HANDLING SECTION ########

def buildSTIX(ident,confid,restconfid, effect, resteffect,typeIncident,resttype,asset,restasset,hashPkg):

return stix_package

def revealSTIX(stix_package, stix_header,restconfidence,resteffect,resttype,restasset):

#print("realConfidence=%s,realEffect=%s,realType=%s,realAsset=%s"%(realConfidence, realEffect,realType,realAsset))

##### END STIX HANDLING

###### FORMAT-PRESERVING ENCRYPTION SECTION #######

def encryptConfidence(key, inputValue):

return [list_values[0], output_raw[1:]]

def decryptConfidence(key, inputValue,restValue):

return output_raw

def encryptEffect(key, inputValue):

return [list_values[0], output_raw[5:]]

def decryptEffect(key, inputValue,restValue):

return output_raw

def encryptType(key, inputValue):

return [list_values[0], output_raw[5:]]

def decryptType(key, inputValue,restValue):

return output_raw

def encryptAsset(key, inputValue):

return [list_values[0], output_raw[5:]]

def decryptAsset(key, inputValue, restValue):

return output_raw

def FPEncrypt(regex, fixed_slice,input_plaintext):

return cifrado

def FPDecrypt(regex, fixed_slice,cifrado):

return output_plaintext

###### END FORMAT-PRESERVING ENCRYPTION SECTION #######

###### HOMOMORPHIC ENCRYPTION SECTION #######

def aggregatePackages(pkg1, pkg2):

#print(breach1_type)

def prepareIDPaillier(lenId,random):

return resultIDPaillier

def encryptIDPaillier(idPaillier):

return cipher_1

def understandIDPaillier(receivedID, fieldSize):

current = current +1

def aggregateIDs(ID1,ID2):

return ID1+ID2

###### END HOMOMORPHIC ENCRYPTION SECTION #######

def demoPaillier():

#print(bool2)

#DEMO FPE

def demoFPE():

print 'decrypted=' +Y

# DEMO AES Decryption

#plain_text = decryption_suite.decrypt(cipher_text)

if __name__ == '__main__':

main()