CIA Triad Defense Balance | mysimulator.uk

Defense Budget (cap 150)

🔵 Confidentiality 50

🟠 Integrity 50

🔴 Availability 50

Spent 150 / 150balanced

Attack rate 5 / 10s

Live Readouts

Blocked

Breached

Breach rate

Phishing / data-theft → Confidentiality Malware / tampering → Integrity DDoS flood → Availability

How it works

The CIA triad names the three pillars of information security: Confidentiality (only authorized parties read the data), Integrity (data isn't tampered with), and Availability (systems stay up under load). Real budgets can't max out all three — money spent on encryption isn't spent on redundant servers.

Budget constraint:  C + I + A ≤ 150   (0-100 each)
Block probability:  P_block = 1 − e^(−k · P / 100),  k = 2.5
Breach probability: P_breach = 1 − P_block = e^(−k · P / 100)

Each pillar's protection score P (0-100) sets its block probability through this exponential-decay curve: near 0 investment, almost every attack gets through; by ~80-100, the curve has nearly saturated and extra spend buys little more. Every simulated attack rolls against the target pillar's current P at the moment it lands — so dragging a slider mid-attack changes outcomes in real time.

Sliders — set each pillar's investment; raising one above the 150-point cap proportionally pulls the other two down.
Attack rate — how many phishing / tampering / DDoS events spawn per 10 seconds.
Pylon height & glow ring — a direct readout of that pillar's current protection score.

Real-world relevance: this is the same trade-off a CISO faces allocating a fixed security budget — and the same exponential-return curve shows up in penetration-test pass rates as defenses mature.

Confidentiality Integrity Availability

⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.