WhiteScope — a database that compares file contents and file hashes with "known good" files from ICS/SCADA installation media — is evolving into a full-featured product. Originally developed by QED Secure Solutions partners Billy Rios and Jonathan Butts, WhiteScope served as the basis for a research project funded by the Silicon Valley Initiatives Program (SVIP) of the US DHS. The goal of the research project was “to develop a vendor agnostic solution for verifying third-party firmware updates for IoT devices.”
And thus, aDolus Inc. was born to fully develop such a product. We’ve called it FACT: Framework for Analysis and Coordinated Trust. You can explore this website to learn more about the platform and the team behind it. The platform is still free for individual* users, so we invite you to join the community and help secure the ICS software/firmware supply chain.