Umap2: USB host security assessment tool

This is not a new release, but I’m catching up with USB security tools for this blog.

Umap2 is the second revision of NCC Group’s python based USB host security assessment tool. Umap2 is developed by NCC Group and Cisco SAS team.

Features:
* USB device emulation
* USB host scanning for device support
* USB host OS detection (no implemented yet)
*  USB host fuzzing
* USB host fuzzing uses kitty as fuzzing engine

https://github.com/nccgroup/umap2

BLESuite: new test tool for Bluetooth Low Energy (BLE) devices

BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device.
https://github.com/nccgroup/BLESuite

BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices.
https://github.com/nccgroup/BLESuite-CLI

—–

NCCGroup Intel SGX primer

Back in January, Ollie Whitehouse wrote a very nice introduction to Intel SGX, with MANY links to related materials.

Intel SGX is a trusted execution environment which provides a reverse sandbox. It’s not yet available but those who have had access to the technology have shown some powerful applications in cloud use cases that on the face of it dramatically enhance security without the performance constraints of homomorphic encryption. However, there is enough small print to warrant both validation and defensive assessment activities when the technology becomes more generally available. There is a new set of features coming to Intel CPUs that have massive potential for cloud security and other applications such as DRM. However, as with all things that can be used for good there is also the potential for misuse. These features come in the guise of Software Guard Extensions (SGX). In this post we’ve collated what we know about the technology, what others have said about it and how it is being applied in real-world applications.

https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2015/january/intel-software-guard-extensions-sgx-a-researchers-primer/