What’s zerotrust.digital?

Starting in 2020, com|code is launching innovative initiatives in the field of digital security on the thematic platform zerotrust.digital - all with a strongly collaborative and partner-oriented character.

The multi-faceted urgencies and crisis in the digital world call for committed and powerful solutions. The goal of zerotrust.digital is to bring partners from various segments like industry, research and teaching, and associations together in a project / outcome-driven manner. Throughout the next few months, new projects will be launched and presented here and on our social media channels.

LabCampus’ Terminal TestLab

For com|code, the first building block of the zerotrust.digital initiative will be the participation in the Terminal TestLab of the LabCampus at the Munich International Airport. During the month of February, between the two Lufthansa lounges in Terminal 2, topics related to the TestLab theme “Digital Security” will be presented to travelers in a word wide unique way.

In the realm of the Terminal TestLab, com|code showcases a particularly exciting topic within cyber / digital security world called open source intelligence ("OSINT"). It stems out of the field of intelligence services and directly affects companies and individuals.

What is Open Source Intelligence (OSINT)?

In the digital world, OSINT means determining which potentially confidential and exploitable information about companies or individuals can be found through publicly available sources. Often among the findings is highly sensitive information, which can have significantly negative security consequences.

com|code has vigorously explored OSINT in the past years and carries out such analyses for clients and individuals. In close partnership with the University of Applied Sciences - Mittweida, as well as with students from one of the leading cybersecurity institutions, Champlain College in Vermont, USA, new methods are constantly being developed to find sensitive information on the internet.

Which results does OSINT yield?

Information that OSINT brings to light includes:

  • user accounts and their passwords
  • traces of cyberattacks on companies
  • confidential documents
  • what do others know about a company that should be purely internal
  • sensitive information on social media, etc.
  • who publishes such information
  • thereof resulting weaknesses in IT infrastructures / potential attack targets
  • options for action (anti-OSINT) and necessities

OSINT is legal

Important notice: Findings during OSINT analyses consist of publicly available information, making OSINT a legal process.

Cybercrime uses OSINT

Attacks on companies are often prepared by cyber criminals using OSINT. In the run-up to an attack, useful or compromising information about the company and its employees is collected and exploited to target the attack (e.g. information about secret projects, contact information, etc.).

OSINT is part of modern security strategies

Due to the risks associated with publicly available sensitive information, OSINT is becoming an increasingly integral part of modern cyber security strategies and ongoing security processes. OSINT is nearly always used to analyze cyberattacks on companies (e.g. where data was leaked, if there is malicious code that was used, etc.)

OSINT-2-GO can be experienced live

com|code is bringing OSINT to life in the Terminal TestLab. The demonstration of the OSINT-2-GO concept interactively showcases interested TestLab visitors the basics of what can be found ad hoc / "to go" about their own company. Simply providing the company name will give an insight into what is possible. While well-founded OSINT analyses are much more extensive and require time and patience, it’s always exciting, for visitors and even for com|code experts, to see what can be revealed in a short time.

OSINT-Compact as a raffle prize

com|code is raffling off an OSINT analysis of a whole day plus the presentation of the results (web session or on-site) to all visitors who leave a business card in the Terminal TestLab business card collection box.

About us at


CC Logo

com|code stands for digitalexcellence.

At the core, com|code secures and expands the leading market position of its clients in a digitally transforming world that requires completely new business models, production methods, even shorter innovation cycles, and the highest security standards. To meet those standards and master the digital transformation, com|code develops robust and sustainable digitization strategies and customized cyber security concepts.

Did we spark your interest?

If the zerotrust.digital initiative sparked your interest or you have specific questions about OSINT, digital security strategies, and more, please contact com|code directly.
+49 (0) 8142 - 440 21 80
kontakt@comcode.de

© 2020, Comcode GmbH
comcode.de
Imprint