splonebox is an open source network assessment tool with focus on modularity. It offers an ongoing analysis of a network and its devices. One major design decision features development of custom plugins.
Supervisory Control And Data Acquisition (SCADA) is the buzzword that summarises devices of Industry Control Systems (ICS). These devices are highly specialised on controlling industry processes like production lines or even hole plants. Typically an ICS consists of Programmable Logic Controllers (PLCs), actuators and sensors. It is common, that industry networks also consist of additional devices like Human-Machine-Interfaces (HMI) or gateways
The splonebox consists of three components, which communicate through a central API. On the one hand, there is a core component that enforces security. On the other hand, we have several plugins, that do the actual work. Using this API the plugins are able to communicate with the splonebox core or even with other plugins.
Since the core API relies on msgpack, it's possible to develope plugins in a wide variety of progamming languages. So in the future, we want to provide plugins in multiple programming languages (e.g. python).
In order to provide an optimal analysis, we're working on plugins that gather information in different ways. One ways is to scan networks actively while other plugins will sniff the traffic.
The modular architecture basically makes everything a plugin. Hence, the graphical user interface is a plugin, too. In future releases, there will be multiple user interfaces that cover different aspects and needs.