Supply chain attack simulator for defense programs. AXIOM maps a mission's full dependency graph, simulates how a single compromised vendor cascades into mission failure, and tells a commander what to do about it.
Built in 36 hours at the Bow Capital Defense Hackathon.
Defense supply chains run four to six tiers deep, and prime contractors rarely see past tier two. Attackers go after the vendor nobody is watching. One poisoned firmware update can ground a fleet. SolarWinds and XZ Utils happened because nobody mapped the path.
The demo mission is ISR-DEPLOY-21: 100 autonomous ISR drones to an Indo-Pacific base in a 21-day window.
- Dependency graph. 25 nodes across hardware, software, logistics and core subsystems, including single-source suppliers flagged as single points of failure.
- Attack propagation. A breadth-first engine walks the graph from an attack's entry node and lights up everything downstream.
- Six attack scenarios.
- Poisoned software update (SolarWinds / XZ Utils style, CVE-2024-3094)
- Battery supplier ransomware
- Taiwan chip delay
- Port shutdown
- Tier-3 subcontractor compromise
- GPS module export restriction
- Mission impact. Readiness, drones affected, and delay days for each scenario. In the flagship firmware attack, readiness drops from 92% to 54% and 37 drones are grounded.
- Recovery. Freeze the firmware, require an SBOM, switch to a backup supplier, and reroute through another port. Readiness recovers to 81% and the delay falls from 11 days to 4.
- Kill chain ranking. Six kill chains ranked by likelihood and blast radius, each with a concrete mitigation.
- Commander's brief. An auto-generated memo with root cause, actions and projected outcome.
React 19, TypeScript, Vite, React Flow (graph), Motion (animation), Vitest (tests).
npm install
npm run dev # http://127.0.0.1:5173
npm test # run the Vitest suitesThe graph propagation is computed live. Per-scenario impact figures (readiness, delay, drones affected) are modeled scenario values stored in src/data/axiom_data.json, not live telemetry.
Team project. Originally developed in Vihan-G/AXIOM, with Mufaddal Rajkotwala.