Determining What the Devices Were Actually Sending
A detailed review of device behavior and network communications established what information was transmitted during normal operations.
The Challenge
A manufacturer faced allegations that its devices were transmitting consumer information without authorization. The central question was straightforward: what data do the devices actually send during real-world conditions and use-cases?
Answering that question was no simple task. It required a multi-faceted approach that included replicating the real-world conditions where the devices were deployed, low-level examination of the hardware, and a detailed inspection of every network communication the devices participated in.
Our Approach
Aletheian Labs created a testing environment to replicate how the devices were typically deployed in practice and conducted a forensic review of the hardware which included examining the signaling between the processing chipsets and extraction of the data from flash-based storage.
Working within a testing protocol that was reviewed by both parties, our team developed and executed test cases for each device while capturing, decrypting, and analyzing network communications to account for and document every communication sent to or from the devices. The process was designed to produce repeatable results that could be independently evaluated.
The Breakthrough
- Developed a testing methodology accepted by both parties in the litigation
- Examined more than 20 device configurations and operating scenarios
- Captured and analyzed network communications generated during device operation
- Determined what information was transmitted and under what conditions
- Produced forensic data and technical findings for review by opposing experts
- Provided an independent analysis of device behavior supported by repeatable testing
