2. l Established in 2006 withinAcceleratore Imprese Politecnico di Milano
l Web Site: www.privatewave.com
l Customers: different Italian and international companies, government agencies
PrivateWave Company Presentation
3. l PrivateWave promotes the value of total transparency in all the applications developed, using only
open source and public technologies, with a security certified and monitored by the biggest
worldwide experts in this sector.
l PrivateWave develops and produces encryption products with a focus on the usability. Any user,
even with no technical background, is able to communicate in a safe and secure way without any
difficulty.
Vision
Transparency, Usability and Security!
4. • Nowadays mobile phone is:
− A personal communication means;
− One of the most important business tools;
− Largely distributed;
− Universal solution for communications
• The voice is the most widespread communications way, not only in a company;
• Budget for IT security considers many items (mail, files, secure backup, firewall…), but
not voice security;
• Solutions allowing communication encryption between mobile phones and fixed phones
do not exist worldwide;
• Tools for retrieving sensitive data from our phone calls are within anybody’s reach.
The case
5. • A professional system can be rented for less than 2000
EUROS a day;
• In theory it is against the law, but…it is quiet simple asking for
an offer to any investigation agency!
Practical approach: phone interception
6. l Messages are protected from wiretapping
l Messages are self-destructing after few minutes, without leaving any trace
l From now on, it is possible to securely texting your contacts
PrivateWave: protection for SMS
7. l It is not hard to imagine how companies can become vulnerable from improper care of their sensitive
data such as:
l Launching new products
l Private negotiations
l Market strategies
l Private information about M&A
l Communication between members of board of directors
l Communication with subsidiaries/representative branches abroad
l Moreover the “economic value” of the communication must be considered within respect to the
competitors investment in espionage.
Which phone call must be protected?
8. l It’s a complete suite with an high level of customizable features
l 3 edition:
l Enterprise
l Professional
l Government (the Government one has more customizable features for specific operative usage)
l It’s the first solution available on the market that integrates an encrypted fixed and mobile network
on the same infrastructure
l It allows:
l integration in to the existing telephony infrastructure
l building the secure voice network independently from the existing infrastructure
l protection against both internal and external intrusion and hacking attempts
l Very high usability
Enterprise Voice Security Suite
9. l GSM was definitively broken and the cost to make a GSM call interception is drastically reduced
l January 2010: first breach of the GSM protocol
http://events.ccc.de/congress/2009/Fahrplan/events/3654.en.html
http://www.guardian.co.uk/technology/2009/dec/29/gsm-mobile-algorithm-cracked-nohl
l August 2010: 1500 dollars to intercept a GSM call
http://www.engadget.com/2010/07/31/hacker-intercepts-phone-calls-with-homebuilt-1-500-imsi-catcher/
l January 2011: 15 dollars to intercept a GSM call
http://www.wired.com/threatlevel/2010/12/breaking-gsm-with-a-15-phone-plus-smarts/
Practical approach: phone interception
10. l Software voice encryption for Smartphone
l Blackberry OS and Blackberry 10
l iPhone and iPad
l Android
l Compatible with Samsung KNOX platform
l VoIP technology, on LTE, UMTS, EDGE, GPRS, WIFI
l Very easy to use
l Ready for organization-wide distribution
l Remote installation with OTA (Over the Air) deployment
PrivateWave – Secure Communication App
11. Supported devices – Fixed Phones
l Snom Landline Phones supported for voice encryption
l Phones
l Conference Room Devices (securely connect remote meeting rooms)
12. Supported PBX – Corporate Integration
l Integration within existing Corporate PBX to extend the secure telephony network to:
l Cisco Unified Communications Manager
l Avaya Aura® Communication Manager
13. SIEM and SSO
l Security Information and Event Management
l SIEM connector for HPArcSight
l Single Sign On (SAML 2.0)
15. Areas of use
Business sector and TELCOS Public sector
Military sectorFinancial sector
16. Areas of use: Management Communication
l Management communications:
l The customer will install in its own Datacenter our Enterprise Voice Security Suite;
l Managers mobile phones will have PrivateWave app installed;
l The system can be integrated with existing Cisco Call Manager (CUCM 8) or Avaya
Communication Manager to enable mobile to landline secure calling
l Managers can start talking in total security both from their mobile and fixed phones.
l All the communications between fixed phones and mobile phones of the company can
be registered and stored if needed by the company.
17. Solution Advantages
l Saving time and money
l No need to travel physically in order to meet with counterparts face-to-face.
l Serenity
l No need to worry about possible phone interceptions or misuse of the contents of the
communication;
l Easy to use
l The software is integrated with mobile phone’s OS and there is no need to change
or alter proper way of use (Select contact à Dial a secure call); desk phones can be
used for other daily operations inside an organization;
l PrivateServer is administered with web-like interface.
18. Solution for Government and Intelligence agencies
l Offering two different security protocols
l Secret communications: SIP/TLS, SDES and SRTP protocol with 256 bit key length. End to Site encryption with
optional point of call registration and interception even compliance with local laws.
l Top Secret communications: SIP/TLS, ZRTP and SRTP protocol with 256 bit key length. End to End encryption,
the calls can’t be intercepted also by the owner/administrator of the system.
l Customizations for Tactical and Operative departments
l Only for large projects.
l Obfuscation of the application with the integration inside a different mobile application as games, notes, etc.
l Using of secure phonebooks stored in a centric server with https protected access.
l Implementation of custom logics and features like crisis and emergency alerts through personalized sequence
of keys inside di application.
l For example: the application, through the digit of a specific security pin, can transmit an alert to a central
intelligence department managing also the geographical realtime whois on the registration public ip of the
application user.
l ....more available on project base.
19. l Certified to be secure
l Multiple independent research/industry institutions certify it
to be secure
l Open Source encryption codes
l Open to public review ( www.zrtp.org )
l Every security sensitive piece of code can be inspected and
reviewed
l Full Protection
l Protects from intelligence gathering through phone call logs
(signaling)
l Politically neutral
l Technology is resistant against possible political pressure on
manufacturer
Security Approach
20. l Quick Deployment
l No need to distribute hardware devices. No logistic handling
l Applicable on existing smartphone base
l Quick Installation
l No need to deploy keys across secured devices
l Keys are negotiated dynamically
l Integration
l Integrate within existing phones & telephony infrastructure
l No Vendor Lock-In
l We give our customers the freedom to be independent from us
Unique Advantages - Flexibility
