I am a Freelance Security Analyst helping customers remote and on-site in evaluating their products, aiding development or consulting them on security.
In the last years I evaluated among others embedded Linux systems, mobile payment solutions, secure boot implementations, bootloaders, IoT products with and without TPMs, mobiles devices, entertainment systems, Trusted Execution Environments, TEE operation systems, car MCUs, white box crypto solutions, and transport cards.
To obtain the assets and test the security of a product, I apply techniques like source code analysis, design reviews, binary reverse engineering, PCB/hardware analysis, Fault Injection, and Side Channel Analysis.
As a Freelance Security Expert I am personally responsible for the quality of a project and execute it from start to finish. If available I coordinate the technical activities with a team.
Next to the security evaluations I give trainings to customers or develop new attack tools.