Demo: Synthesizing Realistic Enterprise Active Directory Attack Graphs with ADSynth
Nhu Long Nguyen, Nickolas Falkner, Hung Nguyen · 2024
Active Directory (AD) is a popular directory service for Windows domain networks and has been the target of numerous recent cyber attacks. In this demo, we demonstrate the mathematical model, architecture and inner workings of ADSynth - a realistic Active Directory graph generator. ADSynth aims to fill the gap in current AD research where no real data but only a few simplistic models are publicly available. ADSynth provides realistic AD data for research, development, product testing and education of AD security. Using ADSynth, a researcher can generate graphs with millions of nodes and edges that resemble the structure of realistic AD systems, especially AD misconfigurations. ADSynth has been shown to benefit a range of AD research and commercial products. The software is open source and is publicly available at https://github.com/adsynthesizer/ADSynth.git.