rev.ng · rev.ng: a tool for security assessments of emerging and legacy platforms

Cyberattacks are one of the most challenging threats modern societies have to face.In fact, along with the growth of IT infrastructure, threats against them have been raising too.While a lot is being done, certain environments, in particular in the IoT area, are receiving little attention by cybersecurity experts.One of the key reasons for this is the almost total lack of tools to perform security assessments on them.Specifically, these areas lack reverse engineering tools, which allow analysts to analyze software for which the source code is not available.The absence of reverse engineering tools makes it extremely hard, if not impossible, to perform security assessments on such platforms.The reason for this is the dominance of the market leader (turnover 14000000+ EUR in 2017, EBITDA of 13000000+), which has little incentive to innovate in market niches which would justify the investment.In this proposal, we aim to bring to commercial maturity rev.ng, a tool developed by our company.rev.ng is the result of a multi-year research effort, with the aim of being able to handle a diverse set of platforms in a unified way.This approach is radically revolutionary in the reverse engineering field and allows us to target market niches which would not be profitable to our competitors.Our product has already been validated both by SMEs performing security assessments and large corporations performing large scale analysis of software such as Google.The goal of this proposal is getting the resources to refine some critical aspects of the feasibility study we already performed, that will lead us to devise the best path to transform our small company, currently mainly focused on consulting, into a scalable company developing a state-of-the-art reverse engineering product.