Security Attack Simulator

Replay realistic attack paths against this student data environment and watch how each AWS control activates in sequence—from network isolation, to IAM, to GuardDuty alerts.

Fully simulated — no real AWS calls are made.

Live Security Posture

Attacks Blocked

Security Alerts Generated

100%

Detection Rate (Simulated)

Data Breaches

Select an attack to launch a guided simulation.

Three-Tier VPC Path

🥷

🌐

Internet

Untrusted

🚧

Gateway

ALB + WAF

⚙️

App Tier

Private

🗄️

Database

Isolated

Security Groups

Network ACLs

IAM Policies

KMS Encryption

GuardDuty

Security Event Stream

[--:--:--] Security monitoring active. Select an attack scenario to begin.

💻 Select an attack to see what the attacker would run.

🔍 When an attack runs, a GuardDuty-style finding will appear here.

🛠️ Incident response steps will appear here.

What's Happening

This simulator walks through realistic attack paths against a FERPA-aligned AWS environment. Each step shows which control fires (network, IAM, encryption, or monitoring) and why the attacker ultimately fails.

🏠 Real-World Analogy

🏢 Think of a secured university records office: a receptionist up front, badge-locked doors between zones, cameras everywhere, and strict rules on who can open the filing cabinets. This AWS design applies the same concept in the cloud.

Why This Matters

Student information systems hold grades, addresses, and financial aid details. A single misconfigured control can turn into a reportable breach. These simulations show how layered AWS controls help keep FERPA-regulated data safe.