Interfaces

Yesterday I was re-thinking the interfaces that make up the base of the Security Test Framework. I’ve made some changes and things now look like so:

• IKnowledgeBase – Represents the place information discovered during an assessment is stored.
• IResource – Represents some kind of network resource (e.g. http, ftp, ldap)
• IServer – This provides an interface so security tests can interact with the main program (e.g. query KB or save test results)
• ITest – Defines the interface for what a security test must look like

I’m working on implementing these interfaces now. Once I’ve done that, I’m going to have to go back and re-work the security tests I’ve already written to conform. It’s not a huge job but it’s not a 5 minute one either.

I’ve also got to work on writing some comments that the compiler can take and use to auto-generate XML-based documentation on the STF. It’s either that or I just do the usual open source thing and tell people to “read the source”