Security Catch and Release Automation Manager (SCRAM) v1.0

Abstract

This is a security automation tool heavily influenced by the tool written at NCSA https://github.com/ncsa/bhr-site. The tool is a web interface that aims to centralize information on blocking malicious traffic. There is a list of currently blocked traffic, a place for other tools to automatically add traffic they deem malicious, as well as for human users to input blocks. * Logging and auditing, to determine who made what change and when * Automated expiration of changes (e.g. an exception is added for 2 weeks, after which time it will be removed) * Validation of changes and verification that the change has been applied * Fine-grained role-based access