Typical Commercial Projects

1.  A startup company produced a software-based encryption technology that needed to be evaluated by the NSA in order to be used by its prospective market. ISSI assigned a former NSA senior design engineer, a senior cryptanalyst, and a former evaluation scientist to work with the client's design team to increase the security of their design, and to coach them in the software coding and documentation required.
2.  A startup communications company, designing a multicast system for cellular phones, needed a simple encryption algorithm to increase privacy.  ISSI provided cryptanalytic advice to the algorithm designer to maximize the strength of the algorithm within the considerable design constraints of the system.
3. A large communications equipment manufacturer needed advice on the design of new cryptographic algorithms for the cellular network.  ISSI cryptanalyzed the algorithm through several iterations and provided design guidance to the client's cryptographers which led to an algorithm sufficient to provide security for the network.
4. An intellectual property attorney required expert testimony on a patent infringement case involving a cryptographic algorithm.  ISSI provided a team of two world-class mathematicians and one hardware engineer to support the attorney's review of the details of the key management system design and to present the technical evidence in court.
5. A network security firm, considering a joint venture with a startup company who had developed a new authentication scheme, needed an evaluation of the strength of the scheme and the marketability of a product based on the scheme.  ISSI provided the information that the client needed to determine that the product would not be marketable, saving considerable expense and manpower.
6. A startup hardware company with an SSL accelerator needed help with preparing for FIPS 140-1, level 3, certification.  ISSI provided two engineers, one reviewed the key management and cryptography and provided needed design guidance, the other analyzed the equipment housing for the correct level of tamper-protection and provided a detailed report with photos showing how an attacker could probe the electronics through openings in the housing.
7. An industry association required a system security risk analysis of new authentication protocols in the cellular telephone network. ISSI provided a multi-disciplinary team of experts to analyze the various aspects of security and provided a timely report to the client.
8. A hardware manufacturer requested an evaluation of the cryptographic algorithm design for a special purpose device. ISSI provided cryptanalysis and design guidance throughout the detail design phase to maximize the security of the device.

 

 

Is ISSI the right IA company for you?

Our clients generally fall into two categories--either

1. they are producing a security product and they want to make sure they won't embarrass themselves when the industry starts to attack it, or
2. they are considering using a security product and they want to insure that it will protect them against serious threats.

Put our world-class experts on your team!

ISSI consistently solves difficult problems by forming small and diverse expert teams that complement each other and the client's staff.  We have over 500 years of experience in information assurance in critical systems. 

We always find vulnerabilities in the systems we evaluate.

Because ISSI has such extensive real-world experience attacking systems, we quickly and economically find vulnerabilities. 

If you are faced with world-class threats, you need ISSI!