Company

Technical Security Consulting

Managing Risk

Research & Development

Forensics

Security Management

Media Centre

PCI DSS

• Home
• Overview
• R&D Services
• Technology Focus
• Messaging Systems Security
• Embedded Systems Security
• Collaborative Research Projects
• Technical Whitepapers
• Research Briefings
• Publicly Released Tools
• Vendor Alerts - 0days
• Security Advisories

R&D Services

R&D Services is the intersection where Research and Development meet client delivery. Bespoke security research to investigate vulnerabilities in products (hardware and software) can be tailored to suit client requirements and can include, for example:

• Product Design Review
• Threat Modelling
• Reverse Engineering
• Static Source Code Review
• Manual and Automated Protocol Analysis
• Automated fuzzing using both commercial and in-house written tools

Clients for whom we have conducted product security reviews include:

• Adobe (Software - ColdFusion MX 7.0.2)
• Adobe (Software - ColdFusion 8) 
• Hutchison 3G (Software - tested a range of mobile handsets that they were planning to use with a new service)
• PCCW (Hardware - Two Factor Authentication security appliance for the banking industry in Hong Kong)

We have also conducted tailored research and product reviews on devices such as:

• EPOS terminals
• ATMs
• In-room hotel systems
• Cable modems
• Gaming machines
• Satellite TV set-top-boxes.