Case studies

Anonymized representative engagements

Every engagement is scoped to the client's specific systems, timeline, and goals, not a generic checklist. Client names and identifying details below are anonymized or generalized to protect confidentiality, but the pattern holds across all of them: clear scope, smooth execution, and a result worth coming back for. Most clients do.

Heavy Trucking

Heavy Trucking Telematics Control Module

Challenge

Quickly evaluate a third-party telematics control module for compliance with the customer's security specifications ahead of deployment.

Approach

Applied a five-stage threat modeling methodology (reconnaissance, scanning, gaining access, maintaining access, and covering tracks), using custom attack scripts to exploit poorly implemented encryption in the module's communications.

Outcome

Identified five critical vulnerabilities across network and physical attack vectors, fully compromising the integrity and confidentiality of the system.

Aerospace / Avionics

Source Code Review of an Aviation Operating System

Challenge

Review the security of a complex ARINC 653 partitioned operating system, at a scale and complexity that made manual review alone impractical.

Approach

Leveraged automated static and dynamic analysis tooling alongside manual review of the source code and a running system to identify security vulnerabilities such as unsafe memory handling and race conditions.

Outcome

No significant findings; delivered a detailed report explaining why and how the system had been hardened against these classes of security issues.

Automotive / Expert Witness

Technical Expert Report for Automotive Cybersecurity Litigation

Challenge

Author a technical expert report on vehicle cybersecurity capable of holding up to adversarial legal scrutiny.

Approach

Drew on hands-on security engineering experience to clearly communicate the importance of specific security decisions and why certain controls were necessary for the safe operation of the vehicle.

Outcome

Delivered a detailed report that stood up to legal scrutiny throughout the litigation.

Let's talk

Have a similar challenge?

Every engagement above started as a short conversation. If something here resembles what you're facing, let's talk about it.

Get in touch