Research & Development
OWL R & D is the ‘skunk works’ side of One World Labs. OWL R & D does bleeding edge research
on emerging security threats in the cyber-world to expose the latest trends and threats
emerging in the criminal world. OWL R & D frequently exposes zero day exploits and emerging
threats before they are identified in the InfoSec space.
Work has included:
- Microsoft, multiple areas of interest
- Smart grid, certain issues
- SaaS/Medicaid, certain web based issues
- TrendMicro, specifically integration of the toolbar and other elements
- Cisco, multiple areas of research
- VoIP, vendor agnostic analysis
- Mass transit, specifically communications and engine management
- High end vehicle manipulation of controls
- Automotive Bluetooth vulnerabilities
- Heavy equipment wireless weaknesses (bus, semi, etc)
- SCADA network research
- Smart-Grid
- Aviation and avionics exposure
- Digital foot-print technology
OWL R & D is also the product development side of our business. OWL is currently developing
SaaS products to enable enterprise clients to take a pro-active approach to managing their
corporate exposure and vulnerability.
One World Labs also has a “Software as a Service" (SaaS) platform under development which
allows customers to review and analyze the risks associated with the digital footprint of their
company or employees on a monthly recurring basis. The tool exposes sensitive information
or potential breach vectors which have been exposed or leaked out of the organization into the
public realm. Knowledge of these vulnerabilities is another way OWL helps clients manage risk.
OWL’s digital foot-printing engine creates a comprehensive view of the information available
publicly and via other channels (IRC channels, Tor, Onion, etc.) of which they may have lost control.
The engine ‘crawls’ the World Wide Web and other data sources, such as the deep web and
darker sides of the internet, hacker forums, IRC channels, help desk forums, etc. to find information
that is being disclosed, bought, sold or traded regarding security vulnerabilities of a particular
target. The engine has allowed OWL to find usernames, passwords and valuable security data
for 50% of our clients before we ever step on-site for an engagement.
