Mercator

Mercator is a web application allowing to manage the mapping of an information system as described in the Mapping The Information System Guide of the ANSSI.

Read this in other languages: French

Introduction

Computer attacks occur in a constantly changing environment. To meet these challenges, it is necessary to implement a global approach to risk management within the organization.

The mapping of the Information System allows to have a global view of all the elements which compose the information system to obtain a better readability, and thus a better control.

The elaboration of a cartography participates in the protection, the defense and the resilience of the information system. It is an essential tool for the control of its information system (IS) and is an obligation for Operators of Vital Importance (OVI) and is part of a global risk management and a global risk management approach.

Major functions

• Graphical views of the ecosystem, information system, administration, logical, applications, and physical infrastructure
• Generate information system architecture report
• Draw mapping diagrams
• Compute compliance levels
• Search for CVE with CVE-Search
• Extraction in Excel, CSV, PDF ... of all lists
• REST API with JSON
• Multi-user with role management
• Multilingual
• Connection to LDAP or Active Directory

Screens

Main page

Compliance Levels

Input screen

Drawing of the cartography

Data model

Technologies

• PHP, Javascript, Laravel
• Supported databases: MySQL, Postgres, SQLite, SQL Server (see: Laravel/Databases/introduction )
• WebAssembly + Graphviz
• ChartJS

Installation

• Installation
• Deployment under Docker

Changelog

All notable changes to this project are documented.

License

Mercator is an open source software distributed under GPL.