splonebox · Offering an Automated Solution

splonebox GUI mockup

Idea

What's behind it

splonebox is an open source network assessment tool with focus on modularity. It offers an ongoing analysis of a network and its devices. One major design decision features development of custom plugins.

Motivation

Supervisory Control And Data Acquisition (SCADA) is the buzzword that summarises devices of Industry Control Systems (ICS). These devices are highly specialised on controlling industry processes like production lines or even hole plants. Typically an ICS consists of Programmable Logic Controllers (PLCs), actuators and sensors. It is common, that industry networks also consist of additional devices like Human-Machine-Interfaces (HMI) or gateways

Architecture

The splonebox consists of three components, which communicate through a central API. On the one hand, there is a core component that enforces security. On the other hand, we have several plugins, that do the actual work. Using this API the plugins are able to communicate with the splonebox core or even with other plugins.

Planned features

A Wide Variety Of Plugins

Since the core API relies on msgpack, it's possible to develope plugins in a wide variety of progamming languages. So in the future, we want to provide plugins in multiple programming languages (e.g. python).

SCADA Plugins

One of our interests is industrial security. As a consequence, we're looking forward to provide plugins that support industrial communications like Modbus or PROFINET.

Network Scan Plugins

In order to provide an optimal analysis, we're working on plugins that gather information in different ways. One ways is to scan networks actively while other plugins will sniff the traffic.

Graphical User Interface

The modular architecture basically makes everything a plugin. Hence, the graphical user interface is a plugin, too. In future releases, there will be multiple user interfaces that cover different aspects and needs.

Become part of it! Check out our github project.

FAQ

  1. Yes, it's possible via our github project. But keep in mind, that the current version is heavily under development. So this version is not for productive usage.
  2. Check out the github project for installation instructions.
  3. We're working on it. The is expected to be out next year.
  4. There are different tasks that needs to be done. We really like to welcome developers and bug hunters. In order to get an overview about the next things, have a look at the issues list in our github site.