DSEI 2021: Census Labs continue to protect end-users with vulnerability detection.

CENSUS is an independent, privately funded company dedicated to providing highly specialized and professional IT security services. It was founded in 2008 by computer security experts with distinguished credentials and extensive prior experience. CENSUS is at DSEI 2021 to present its different services.

CENSUS can identify design inefficiencies, gaps in security architecture and software vulnerabilities in the implementation. Furthermore, it provides security assurance in third-party solutions that are adopted into the military infrastructure, identifying the security level of suppliers, and the risk they pose to the supply chain. (Picture source:  Army Recognition)

Military communications play a vital role in warfare and intelligence gathering operations, with the end goal being the secure transmission and processing of signals. New technologies are rapidly emerging with more devices, vehicles, and sensors connecting to military networks making them potentially vulnerable.

While the new technologies improve the systems and facilitate the success of missions, ample challenges arise. Data has become a critical asset to protect (ensuring its confidentiality, integrity, availability, and interoperability). Furthermore, in-depth defense strategies are applied to harden critical modules and the storage of cryptographic secrets. In many cases, it is challenging to implement strong security on systems that are low on resources, which, in turn, become potentially vulnerable components.

Due to increased demand of military information technology systems, it is inevitable that some of the integrated solutions will not be developed in-house. CENSUS provides security assurance services covering both in-house built and third-party solutions (through reverse engineering, when specifications or source code are not available), thus securing their integration and usage in defense systems.

CENSUS can assist both users and suppliers (OEMs, Tier-1 and Tier-2) of military systems to achieve secure usage, to improve security and eventually to reduce applicable risks. Using the latest attack techniques along with the results of its in-house vulnerability research, CENSUS identifies common and acknowledged vulnerabilities and distinguishes the possibilities of zero-day attacks.

CENSUS can identify design inefficiencies, gaps in security architecture and software vulnerabilities in the implementation. Furthermore, it provides security assurance in third-party solutions that are adopted into the military infrastructure, identifying the security level of suppliers, and the risk they pose to the supply chain.

CENSUS believes that it is critical for Security by Design principles to be implemented early in the development lifecycle of the product. For each phase, CENSUS offers a highly customized set of services, whose goal is to develop products that meet high security standards by following models such as Defense in Depth and Zero Trust Security.

The company has extensive experience in the military sector with a wide range of projects including:

- Bespoke and hardened mobile devices for military usage
- Remote control protocols for embedded devices
- Hardware tamper protection solutions for IoT devices
- Mobile applications for secure communications
- Training on Secure Development practices for embedded systems

Services Overview
To overcome cybersecurity challenges in the defense industry, and especially in military communications, CENSUS offers services such as:

- Embedded and Mobile Devices Security Assessment
- Application Security Assessment
- Secure Software Development Life Cycle (SDLC)
- Network Security Assessment
- Penetration Testing
- Training on Secure Development practices