官网

新闻

行业信息

合作信息

链安博客

服务

制造业

核心基础设施

电信

医疗行业

解决方案

iris文章录入练习

变更日志

帮助中心

漏洞管理

产品使用书

问答最频繁的问题

![组 12189.png](/ucenterapi/upload/file/9ce816eff6146c29f2394d32809816da)

#
### **LianSecurity and Abuse.ch – share the same vision**

#
With the same vision to provide a safer ecosystem of firmware, we share the technologies, resources, and experiences with each other in mitigating the firmware threat to the minimum. Due to the lacking of awareness to the firmware threat inherently by the public, it is imperative to simplify the entire firmware security screening process to the maximum. For example, a mobile app in apk format or an extracted firmware with bunch of elf executable, it should be simply dragged into a user interface and a comprehensive report is automatically generated accordingly. Hence, we sincerely hope that our very unique firmware based malware detection technique will become the cornerstone in the field in order to build a better future of the firmware security industry, which in turn beneficial to the public end user.

#
### **| About Abuse.ch** 

#
abuse.ch is providing community driven threat intelligence on cyber threats. It is the home of a couple of projects that are helping internet service providers and network operators protecting their infrastructure from malware. IT-Security researchers, vendors and law enforcement agencies rely on data from abuse.ch, trying to make the internet a safer place.

#
**The following tools, products and services are using：**
#
- MISP project
- Intel Owl
- MalPull
- Polarity
- TheHive
- Mitaka OSINT web browser extension
- Malwoverview
- Standardized Malware Analysis Toolkit (S.M.A.T)
- Google Safe Browsing (GSB)
- Spamhaus DBL
- SURBL
- Your everyday threat intelligence (Yeti)
- VirusTotal


LianSecurity Established A Partnership With Abuse.ch In Providing Firmware Level Malware Detection Services

![组 12186.png](/ucenterapi/upload/file/867950eb2be6321f1423892bd8ce032d)

#
近期，**广州链安科技**（LianSecurity）与**北京中睿天下**（zorelworld）签署战略合作协议。双方约定根据自身优势资源，在**逆向工程、威胁溯源、恶意代码**等领域进行全方面合作，共同打造网络安全产品和专业安全服务能力的联合解决方案。

#
### **关于广州链安科技**
| About Lian Security

#
广州链安科技作为国内少有专注于底层信息安全技术研究的创新型科技公司，以独立自主的逆向工程等底层核心技术为基础，针对日益庞大的嵌入式设备软硬件，在指令分析、漏洞挖掘、大数据洞见等技术方向上致力创新，研发出国内首套自主可控的逆向分析引擎“Reactor”以及针对嵌入式固件逆向分析工具“shambles”和基于安卓应用逆向分析工具“incinerator”，为安全厂商以及相关机构部门提供具有核心竞争力的底层核心技术解决方案。

#
### **关于北京中睿天下**
 | About Zorel World

#
北京中睿天下作为以“实战对抗”为特点的能力价值型网络安全厂商，自成立以来坚持以“保证国家网络空间安全”为使命，依托自身国家级网络攻防对抗能力，构建面向实战对抗的新一代高级安全防护体系，围绕数据中心网、生产网、办公网以及网络监管等四大行业场景，为关键信息基础设施运营单位提供具有核心竞争力的威胁监测与溯源解决方案。

#
### **合作意义**
 | Significance
#
广州链安科技与北京中睿天下的深度合作，将进一步提高彼此在相关领域的核心竞争力。通过彼此紧密的技术合作，不断提高自身研发能力与产品质量，更好地满足网络安全领域的需求，为千行百业的数字化安全需求赋能。络安全领域的需求，为千行百业的数字化安全需求赋能。

广州链安科技与北京中睿天下达成战略合作

About Us

公司荣耀

Milestones

 Who We Are

We Are A Professional Team 

Home

Product

Service

News

Support

Knowledge Base

Guides

Submit A Ticket

Engine

Cornerstone Of Core-Level Technology

Multi-Industry Involvement

Lian Security

Reactor Engine

Support ARM, MIPS, PPC Instruction Set 

Pseudo-code in more intuitive and user-friendly way

Built-in optimization of pseudo-code regeneration for embedded / IoT firmware

Optimized Disassemble and Decompiler for Embedded / IoT Reverse Engineering

Pattern is organized in CWE form 

Bug finding process happen in embedded customized Intermediate Representation (IR)

BinQL – Our proprietary bug query language in specifying pattern to accomplish targeted IR analysis

Pattern Specific Bug Finding Approach

Output firmware supply chain information

Multiple firmware supply chain cross validation

Supply Chain Analysis

Create appropriate test case to reach into the code block with respective CWE

Selective approach to focus on the targeted code

Performance optimized for embedded firmware architecture

Integrated Symbolic Execution

System emulated fuzzing

Partial emulated fuzzing

CWE Specific

Pattern Specific Fuzzing Approach

Customized and concatenated pattern

Analyze a mass quantity of firmware without human intervention 

Generate professional report 

Headless Automation

Product Introduction

FAQ and Help

Detect the shell type

Unshell in the cloud

Present the original content

Automated Unshell 

APK File Manager

Restore source code

Best source code reading and editing experience

Static Analysis

One click to start debugging

Debugging apk as debugging source code

Simple, stable and friendly

Debugging

Real-time updated vulnerability repository and risk detection engine

Accurate detection with dataflow tracking technology

Locate the specific row number of vulnerability

Cloud-based scanning

Managed-flash dumping via field bus

Unmanaged-flash dumping with ECC patching

Intuitive user interface 

Firmware Dumping

Enumerate hardware pinouts for debug port

Expandable pinout count for enumeration

Performance optimized to reduce the enumeration time

Debug Port Finding

Hybrid approach of debug port enumeration and debugger adaptation

Connection matrix in switching the correct debug port pinouts onto the debugger respectively