Developed by Carnegie Mellon University's Software Engineering Institute (SEI), the GHOSTS Framework is an open-source software framework designed for creating, deploying, and orchestrating complex non-player character (NPC) activity within training, exercises, simulations, and educational environments.
Watch GHOSTS in action:
Check out this quick three-minute introductory video on YouTube:
At its core, GHOSTS consists of a client and an API server. The client runs on simulated user devices (e.g., workstations), while the API server is managed centrally. Clients simulate user activities based on timelines and NPCs:
- Timelines: Preconfigured scripts that define user behavior (tasks, operations, and durations).
- NPCs: Autonomous actors that simulate human-like interactions, working independently or in groups, and can be reprogrammed via the API.
Visit the official GHOSTS documentation for detailed information on setup, usage, and configuration. If you need further help, feel free to ask questions in our community discussions.
- NPCs (Non-Player Characters): Simulated users with personalities, jobs, and behaviors, driven by GHOSTS' Animator. NPCs perform activities such as browsing, document creation, or sending emails.
- Timeline: A sequence of tasks defining actions a machine will perform (e.g., start time, duration, operation type).
- Machine: Any device running the GHOSTS client, assigned to carry out activities according to its timeline.
- Machine Group: A collection of machines. Timelines assigned to a group apply to all machines within it.
GHOSTS is commonly deployed in virtualized networks (cyber ranges) used for training, exercises, and simulations. For more on building high-fidelity, realistic cyber ranges, check out CERT's report Foundation of Cyber Ranges.
???+ tip "Run GHOSTS on the Crucible Framework"
GHOSTS runs efficiently on the SEI's Crucible Framework, a modular system for creating and managing virtual environments for training and exercises. Find more on Crucible's source code and Crucible Docs.
The GHOSTS framework originated from SEI's desire to create realistic NPCs for cyber warfare training. Our initial technical report, GHOSTS in the Machine: A Framework for Cyber-Warfare Exercise NPC Simulation, outlines how GHOSTS replicates user behavior as observed in real-life scenarios.
Since its inception, GHOSTS has expanded to include features like:
- Content serving for realistic environments
- Detailed NPC creation with customizable behaviors
- Machine learning engines for decision-making
These features, initially separate, have now been fully integrated into the GHOSTS framework.
Found a bug? Please report it through the GHOSTS issue tracker. Include detailed steps for reproducing the issue and any relevant error messages.
Have a feature request? Submit new ideas through the GHOSTS issue tracker with a description of how it could benefit the community.
[DISTRIBUTION STATEMENT A] This material has been approved for public release and unlimited distribution.
Copyright 2018 Carnegie Mellon University. See the LICENSE.md for more details.