HomeCybersecurityOIDC Trust Policy: Exposure Timeline Simulator

OIDC Trust Policy: Exposure Timeline Simulator

A 2D queueing-theory counterpart to the 3D workload-identity-federation sim: untrusted requests arrive as a genuine Poisson process, get thinned by the trust policy's subject-claim scope, and mint deterministic-TTL credentials whose live count is plotted as a scrolling exposure timeline against the exact Little's-Law prediction R = lambda(1-scope)T.

Cybersecurity2DAdvanced60 FPS📱 Mobile-adapted⇄ 3D version
2d-cybersec-topic-41 ↗ Open standalone

This is the 2D counterpart to the rotatable 3D trust-chain visualization of OIDC workload identity federation. Instead of watching packets fly through a rendered network, this view runs the exact same trust-policy model as a live queueing simulation: untrusted workload requests arrive as a genuine Poisson process, each is independently thinned by the trust policy's subject-claim scope, and every request that slips through mints a credential with a deterministic time-to-live — an M/D/∞ infinite-server queue. A scrolling event timeline shows every arrival and every credential's exact lifetime as a Gantt bar, while a second panel plots the live leaked-credential count over time against the closed-form Little's-Law prediction R = λ·(1−scope)·T, so you can watch the simulator's own measured average converge onto the formula in real time. Tune traffic rates, subject-claim pinning and credential TTL to see exactly how each lever drives real unauthorized-access exposure toward zero.

⚙ Under the hood

A 2D queueing-theory counterpart to the 3D OIDC workload-identity-federation sim: untrusted requests arrive as a genuine Poisson process, get thinned by the trust policy's subject-claim scope, and mint deterministic-TTL credentials whose live count scrolls across an event timeline and a live chart against the exact Little's-Law prediction R = lambda(1-scope)T — watch the measured running average converge onto the closed-form line.

oidcworkload-identityci-cd-securityzero-trustqueueing-theorypoisson-process

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)