Catalyzr™ Security Risk Assessment (SW)

Secure-IC supports its customers reach their desired certification levels with general certifications such as Common Criteria, FIPS-140, ISO, SESIP ; but also to reach their target in more specific standards such as CC AVA_VAN up to level 5, ISO/IEC 17825, OSCCA..

• Diagnose (Leakage detection)
• Verify (Leakage Characterization and Exploitation)
• Cure (Fast correction by developer)

Control-Flow based

The Catalyzr™ performs a static analysis at source code level:

• Step-1: Source code preparation
• Step-2: Analysis of dependencies between sensitive variable and control-flow
• Step-3: Identification of leakage patterns
• Step-4: Analysis of the vulnerabilities

Fault Injection

Static faults injection (persistent fault) within instructions and registers: exhaustively, Monte-Carlo based or through advanced configuration. Followed with a Dynamic analysis of the code to detect potential persistent fault vulnerabilities.

Dynamic faults. Fault the control-flow of an application (ex: instruction jump/bypass).

Learn more about Fault Injection Analysis

Crypto Misuse Verification

• Catalyzr™ for Continuous Integration leverage a tool-based approach to guide the correct usage of crypto-APIs, then developers can benefit from the expertise and experience of cryptographic specialists, ensuring more robust and secure implementations of cryptographic functionality within their applications.

From Build & Test up to Full Automation

Graphical User Interface for Analysis Build & Test

• User-friendly interaction
• Allows unitary testing
• User has access to ready-to-use Use Cases or build his own including homemade development
• Easy to integrate to your regression test system

Command Line Interface for Full Automation

• Full scripting-based
• Allows automatic and chaining testing for end-to-end evaluation
• Suitable to feat CPU debugger
• Easy to integrate to your regression test system