Vypin Licenses Kudelski Security Technology to Enable Secure Tracking Solutions

Vypin Licenses Kudelski Security Technology to Enable Secure Tracking Solutions
Download Press Release
Download Press Release
Kudelski Security to Present on Automated Testing of Crypto Software at Black Hat USA 2017
Principal Security Engineer Jean-Philippe Aumasson and Research Engineer Yolan Romailler to Present a New Approach to Testing Cryptographic Software at Black Hat USA, BSides LV and DEF CON 25 Company Hosting Crypto Challenge With 10 Ether of Prizes and a Series of After Show Debriefs on Hot Industry Topics
CHESEAUX-SUR-LAUSANNE, Switzerland, and PHOENIX, July 17, 2017 – Kudelski Security, the cybersecurity division within the Kudelski Group (SIX:KUD.S) and trusted innovator for the world's most security-conscious organizations, today announced that Jean-Philippe Aumasson, principal security engineer and Yolan Romailler, research engineer, will contribute their industry expertise in a session titled “Automated Testing of Crypto Software Using Differential Fuzzing.” The presentation takes place on Wednesday, July 26th in Las Vegas, Nevada at 2:40 pm PT at Black Hat USA 2017, again at 5:00 pm PT at BSides LV and a third time on Saturday, July 29th at 5:30 pm PT at DEF CON 25.
Experts from Kudelski Security will also dive into topics such as cloud security and orchestration, managed attacker deception, advanced threat intelligence, designing IoT security and cryptography during a series of Debriefing Sessions hosted at the Four Seasons Hotel.
Aumasson and Romailler’s presentation will focus on a new and efficient approach to systematic testing of cryptographic software: differential fuzzing. Unlike general purpose software fuzzing such as afl, differential fuzzing doesn't aim to find memory corruption bugs (although they might come as a by-product), but to find logic bugs. Compared to test vectors, differential fuzzing provides greater code coverage and compared to formal verification, differential fuzzing is easier to apply, both for testers and developers. Aumasson and Romailler will present this session at both Black Hat and BSides LV. Romailler will also present it at Crypto & Privacy Village within DEF CON 25.
While at Black Hat 2017, Kudelski Security will also be hosting a Crypto Challenge, a series of after show Debriefs Sessions and a party at the House of Blues’ Foundation Room within Mandalay Bay. Details include:
Media and analysts interested in meeting with Kudelski executives at the show should contact [email protected].
About Kudelski Security
Kudelski Security is the premier advisor and cybersecurity innovator for today’s most security-conscious organizations. Our long-term approach to client partnerships enables us to continuously evaluate their security posture to recommend solutions that reduce business risk, maintain compliance and increase overall security effectiveness. With clients that include Fortune 500 enterprises and government organizations in Europe and across the United States, we address the most complex environments through an unparalleled set of solution capabilities including consulting, technology, managed security services and custom innovation. For more information, visit www.kudelskisecurity.com.
Media Contact:
John Van Blaricum
Vice President, Global Marketing
Kudelski Security
+1 650 966 4320
[email protected]
CHESEAUX-SUR-LAUSANNE, Switzerland and PHOENIX, April 5th , 2017 – Kudelski Security, the cybersecurity division within the Kudelski Group(SIX:KUD.S) and trusted innovator for the world’s most security-conscious organizations, today announced its Principal Research Engineer, Jean-Philippe Aumasson, will speak at INFILTRATE 2017, a conference focused entirely on offensive security issues. Aumasson will join independent Security Researcher, Markus Vervier, in a presentation titled “Hunting for Vulnerabilities in Signal,” slated to take place Friday, April 7 at Fontainebleau Hotel in Miami.
What: The presentation will focus on Signal, one of the most trusted secure messaging and secure voice applications. While the app employs strong cryptography and has solid system architecture, vulnerabilities have been discovered in its code base (later addressed by Open Whisper System, which maintains Signal)
Aumasson and Vervier will detail vulnerabilities discovered in the Signal Android client, the underlying Java libsigna library, as well as an example usage of the C libsignal library. Demos will illustrate how these can be used to crash Signal remotely, bypass the MAC authentication for certain attached files, as well as to trigger memory corruption bugs. Also to be discussed is the general architecture of Signal, its attack surface, tools for analysis, along with the general threat model for secure mobile communication apps.
More information about the session may be found here.
Who: Aumasson is principal research engineer at Kudelski Security in Switzerland. He designed the popular cryptographic functions BLAKE2 and SipHash. Aumasson also initiated the Crypto Coding Standard and Password Hashing Competition that developed the Argon2 algorithm. He has been a speaker at Black Hat, DEFCON, RSA, CCC, SyScan and Troopers on topics such as applied cryptography, quantum computing and platform security. He is the author of “The Hash Function BLAKE” and is currently writing a second book on cryptography due out later this year.
Vervier is a highly regarded independent security researcher based in Germany. During the past 15 years he has gained professional experience in offensive IT security as a penetration tester and security consultant. He actively conducts security research and is responsible for the discovery of high profile vulnerabilities such as libotr heap overwrite.
When: 4:00 pm ET, Friday, April 7, 2017
Where: Fontainebleau Hotel, Miami
Media and analysts interested in meeting with Aumasson or Kudelski executives at the show should contact [email protected].
About Kudelski Security
Kudelski Security is the premier advisor and cybersecurity innovator for today’s most security-conscious organizations. Our long-term approach to client partnerships enables us to continuously evaluate their security posture to recommend solutions that reduce business risk, maintain compliance and increase overall security effectiveness. With clients that include Fortune 500 enterprises and government organizations in Europe and across the United States, we address the most complex environments through an unparalleled set of solution capabilities including consulting, technology, managed security services and custom innovation. For more information, visit www.kudelskisecurity.com.
Media Contact:
John Van Blaricum
Vice President, Global Marketing
Kudelski Security
1.650.966.4320
Download Press Release