Security Research Labs
Security Research Labs (SRLabs) is an independent security research and consulting team with offices in Berlin and Hong Kong, specializing in building resilience to real-world hacking threats and supporting clients across 21 countries.
Company Overview
Security Research Labs (SRLabs) is an independent security research and consulting team dedicated to building resilience against real-world hacking threats. With offices in Berlin and Hong Kong, SRLabs supports clients across 21 countries on four continents. The company has played a significant role in the evolution of security technologies used by billions of people, impacting various industries such as telecom, banking, insurance, high tech, utilities, and crypto.
Services Offered by SRLabs
SRLabs provides a wide range of consulting services aimed at enhancing security measures. These services include telco security, security maturity reviews, security team incubation, red teaming, device testing, code auditing, and vulnerability prioritization. SRLabs' red teaming service involves simulating attacks on corporate environments to validate security controls, while the device testing service targets identifying and mitigating security risks in devices through methods like threat modeling, code reviews, and debugging.
Notable Projects and Products
SRLabs is known for developing the mobile anonymity software 'blue-merle' for the GL.iNet Mudi 4G LTE router, which includes features like IMEI randomization and MAC address log wiping. The company's research also led to the creation of Autobahn.security, a product that consolidates vulnerability information across an organization. Moreover, SRLabs' Black Basta decryptor tool, which counteracts ransomware attacks, was shared with victims and various security entities before being presented at the 37C3 in Hamburg, Germany.
Impact on Security Technologies
SRLabs has significantly contributed to securing billion-dollar investments and building security teams for major telecom companies in Japan, India, and Germany. Their research and consulting efforts have directly influenced technologies that ensure the security of billions of users. The firm's blog covers diverse areas of technology and focuses on advanced security concerns, providing in-depth insights and analyses on topics such as fuzzing optimization and criminal investigations like BogusBazaar.
SRLabs Telco Security Focus
SRLabs has been a driving force in telco security evaluation for over a decade, with innovations in GSM intercept, tracking, and impersonation. Their Telco Security Retreat in 2023 aimed to advance interconnect and RAN security assessment capabilities and improve the mobile anonymity package blue-merle. The event in Valencia included updates to gsmmap.org, enhancements to the SnoopSnitch app, and various team-building and technical activities.