NAL - Network Auditing Language Lorenzo Martignoni - lorenzo@security.dico.unimi.it Stefano Masiero - aris@security.dico.unimi.it

Project Description

NAL is a scripting language to do network auditing. It is written in C++ and uses libnet and lipcap to send and receive packets. The idea is to build a simple language, a mix between C and bash, that allows a user to write his own, ad hoc, application to test a network forging particular packets and looking for the response. NAL uses a plug-in interface to support a lot of network protocol allowing a user to write his plug-in and extend the language.   A user should be able to write a new ping or traceroute or whatever he wants in just a few lines of NAL code.

History

• February 2004

Presentation at Infosecurity 2004

• December 2003

Improving functionalities

• September 2003

A little refactoring

• July 2003

First working prototype

• June 2003

Design

• April 2003

The idea

Roadmap

1. NAL's syntax freeze
2. Reengineering of some functionalities
   1. plug-in support
   2. memory management
   3. code restructuring
3. First public release