FIWARE, the standard that IoT needs

Beatriz Sanz Baños    26 September, 2016

What is FIWARE?

FIWARE is an open source initiative that works towards building a set of standards to develop Smart applications for different domains such as Smart Cities, Smart Ports, Smart Logistics, Smart Factories and others. Smart Applications require collecting data from different sources about what is going on that is relevant to the application at any moment, what we refer to as “context information”. Current and historic context information is then processed, visualised, and analysed at large scale, thus producing the expected intelligent behaviour.

FIWARE promotes a standard that describes how to collect, manage and publish context information, and additionally adds certain elements that allow exploiting collected data. Such standard doesn’t exist today and it would be instrumental in building a Digital Single Market for Smart Applications where apps/solutions can be ported from one customer to another without major changes. It also solves multiprotocol communication in multisensor networks. It offers a solution to the diversity in IoT protocol and languages, and translates the information gathered from the sensors to a common language.

FIWARE, a key ally for Smart Cities

For Smart Cities this means having a standard about how to collect, manage and publish data describing what is going on in the city at any moment, near to real-time.  The processing and analysis of current and historic data will give local authorities very valuable insights enabling them to better control and monitor the quality of the services provided to citizens. Additionally cities are enabled to export and publish part of this information in order to spur third-party developers to build new applications that are useful for citizens, the local economy, and productive processes of the city alike.  That is why we say that adopting FIWARE standards, cities will transform into engines of growth.

What is the FIWARE NGSI Standard?

The standard FIWARE proposes to describe how to collect, manage, publish, and notify about changes of context information is called FIWARE NGSI. A Smart application must be able to understand this context data, process it and react accordingly exhibiting an intelligent behaviour. Context is anything located or happening in the city such as the streets, the city services, the citizens, etc. There is currently no standard API to access context data. Just imagine how powerful it would be that any application running on your smart phone would be able to connect to a well-known endpoint that the city and other data providers export and then it is able to discover what is going on around that is relevant to its user.  It would be a game changer.  FIWARE NGSI solves this critical gap, providing the required answer.

FIWARE has became cornerstone in frontrunner Smart Cities standardization initiatives  

As indicated in a recently published report by Machina Research, one of the problems around Smart Cities is that there are no standards. According to their analysis, using non-standardized versus standards-based solutions for IoT will increase the cost of deployment, hinder mass scale adoption, and stifle technology innovation for smart city initiatives worldwide. Many cities boast having developed Smart City initiatives in the last years but without underlying standards. Due to this shortcoming, solutions that work for a certain city cannot be deployed in a different city without important adaptation efforts.

There is the general consensus that in order to ensure proper Smart City development, a minimum set of standards, commonly adopted by the cities, is required. One of the most significant efforts in this direction is the Open and Agile Smart Cities (OASC) initiative. This initiative, kicked off in 2015, when a group of cities agreed which technologies would be used as common de facto standards. Their goal is develop together a digital single market for Smart Cities where any solution that is developed will be valid for several cities without requiring any adaptation whatsoever.

This initiative tries to adopt a very basic set of standards. Basically cities joining the OASC initiative commit to adopt three mechanisms:

  • One single API for managing and access to context data describing what is happening in the city at any moment. The standard of choice was FIWARE NGSI.
  • Commonly defined Data models, ensuring that data and its meaning is equivalent across cities.
  • Mechanisms for publishing and sharing not only historic but real-time datasets as Open Data.

The first two mechanisms will allow that apps developed for one city will immediately work for any other city sharing the same API and data models. The third will help both historic and real-time open data to be discovered and tested. The 15 founding cities of the OASC initiative have quickly grown to reach 89 cities in 19 different countries at the beginning of 2016. FIWARE has benefitted from this quick traction of so many cities joining the OASC in barely one year and a half.

Another relevant initiative is the Smart City program run by TM Forum. This organization offers thought leadership and strategy to service providers such as telcos. Recently, TM Forum has created a program targeted to establish a vision and strategy for Smart Cities. TMForum has partnered with FIWARE and promotes NGSI as the first standard cities can adopt in order to access a greater ecosystem. TM Forum and FIWARE have also jointly developed a number of enablers to be published in the last release of FIWARE which, relying on TMForum’s Business APIs, working to create an economy of data.

The White House shows interest in FIWARE

Last September the White House announced the creation of an international workgroup led by the National Institute of Standards and Technology (NIST) which has two goals:

  • study successful Smart Cities initiatives around the world to extract a set of best practices
  • Identify successful standards that can be adopted as pivotal points of interoperability for Smart Cities.

Relevant standardization bodies and initiatives have been invited to participate in this workgroup which is expected to publish its results next summer. FIWARE is one of the invited parties as a key player in Smart City standardisation efforts around the world.

The attention gained thanks to the OASC initiative and the partnership with TM Forum, is now reinforced with this new recognition by the NIST’s invitation to join the workgroup. As a result, FIWARE becomes the most relevant and attractive open source initiative in the Smart City scene. 

FIWARE belongs to no one, FIWARE belongs to everyone.  It will be free, forever

These accolades make cities that are considering FIWARE and other platforms (some of them proprietary) opt for FIWARE over other options. It also allows partnering with expert players – like Telefónica – with proven results deploying solutions based on a FIWARE-compliant Smart City platform. Cities that opt for FIWARE benefit from tested standards and protect their investments, while joining other cities in an even greater market. This attracts developers that build new solutions that many cities can benefit from, creating a more sustainable ecosystem around Smart Cities.

Looking towards the future, Telefónica, Orange, Engineering and Atos have taken a big step and decided to turn FIWARE into a Foundation with headquarters in Germany in order to protect the brand and achieve neutral standard status for FIWARE unlinked to vendors. It will belong to no in particular and everyone in general. It will be open for other organizations that wish to join the initiative.

FIWARE is also proving useful in other IoT markets such as Smart Agrifood or Smart Industry (Industry 4.0) where standardization can play a major role. The EU Commission issued its digitization recommendations last April and pointed FIWARE out as the platform organizations should plan their strategy around. We believe in breaking traditional barriers that treat Smart solutions – Smart Cities, Smart Industry, Smart Home… – in separate silos and begin to consider Smart services as a end-to-end continuum that affects people and companies alike.

Connect via streaming Security Innovation Day, the event of the year in cybersecurity

Florence Broderick    22 September, 2016

Welcome to the fourth edition of our Security Innovation Day which will be celebrated on October 6 at 3:00 pm (Madrid time) at the Telefónica Auditorium (Madrid), situated in the Central Building of the Distrito Telefónica, The international benchmark event in the cybersecurity sector, where we talk about innovation, alliances and main strategies of ElevenPaths and Telefónica. We count on reference speakers such as Chema Alonso, ElevenPaths Chairman and Telefónica CDO; and a guest star: Hugh Thompson, CTO Symantec + Blue Coat.

If you are in Madrid, be sure to put this appointment with cibersecurity in your diary! Sign up now.

Can’t make it? Watch the event of the year on cybersecurity and innovation on live stream. Sign up here to access the live stream!

There will be live event coverage on ElevenPaths Twitter account using the hashtag #SID2016.

More information at:
securityinnovationday.elevenpaths.com

The Internet of the Best

Beatriz Sanz Baños    15 September, 2016

Internet of Things Institute (www.ioti.com) started by Penton, is a research body that provides thought leadership through analysis, use cases and market trends, recently released its first selection of The Top 50 IoT Authorities. Telefónica IoT is not only selected within the 50 Top influencers, but is pointed out as the only operator within this selective list, a recognition that reinforces Telefónica’s decided IoT strategy.

This who’s who of IoT identifies four categories determined by the nature of the influencers. The categories are:

  • Visionaries
  • Vendors and Organizations
  • Media
  • Analysts

Within the first category, number one is the person who fathered the term Internet of Things, back in 1999, Kevin Ashton, who continues to offer a vision of where IoT is heading towards. The selection of influential members of the IoT visionaries include author Chris Anderson, expert in the drone industry and previously a media pundit at Wired and the Economist. His writings on Long Tail economy have been a stepping stone for the diversified IoT – in several cases success relies on many niche markets instead of mainstream business areas – as a go-to-market strategy. Authors like Timothy Chou, city authorities like Brenna Berman, or analysts like Matt Hatton – CEO at Machina Research – have all been recognized here as important individuals that have contributed in building the current IoT.

In the corporate front, the most relevant IoT players are mentioned. IBM, Cisco, Intel, Microsoft, Samsung, Bosch, Oracle, SIGFOX or Telefónica – as mentioned – are included within the selection. The report briefly goes over how each and every one of these corporations have contributed to create a bustling IoT market.

Telefónica – as we said before – has been shortlisted by the Iot Institute in the Vendors and Organizations section. Currently the most influential communications service provider in IoT, there are several distinct reasons that would individually justify including Telefónica in the list:

  • Its Partner Programme includes more than 700 IoT companies that provide services and products to the whole IoT value chain
  • It is a member of  IoT World Alliance with 8 other global operators
  • Its m2m Global SIM provide customers with competitive connectivity in any part of the world
  • Clients can benefit from its combined connectivity platform offering available – which includes its own Smart m2m platform
  • Its dominant presence in Latin America and important markets in Europe have gained Telefónica continued recognition by analysts like Gartner and Machina Research which have  consistently highlighted Telefónica’s IoT Leadership
  • Its strong Social Media presence along with its IoT, and ThinkBig blogs among others help create awareness, instruct, and increase the knowledge about the IoT making relevant information more accessible to wider mainstream audiences

In the media front, Stacey Higginbotham, editor of a weekly IoT podcast is merited a place in the list along with accounts like IoT Newsroom, IoT Insider, or Building IoT.

Finally the report selects some of the most important organizations that gauge and evaluate the Internet of Things. Gartner, Machina Research, McKinsey, or IDC are unbiased industry analysts that have provided periodic reports to help understand the market, identify emerging trends and predict future behaviour of the market and its players.

The era of a connected society

Beatriz Sanz Baños    13 September, 2016

The twenty-first century will come to be known as the age of cities, but it will also become the century of data. Cities are the new engine of urban innovation and an ever increasing amount of projects seek to be positioned as Smart City initiatives. In any case the concept itself is more a philosophical vision of technological innovation than a specific layout of how to implement certain technological advancements.

The new habits of society, as well as new business and service models must be identified and dealt with through technology. It is no longer a mere connected society that requires deploying computers, servers or the latest programmes. A digital and connected society is expected to provide answers in the form of structured data, obtained from the city, its inhabitants and elements that are located within the city and being used by citizens.

If we focus on this latest trend at this point we would have little to add to the concept of the IoT. Many publications already deal with the evolution of connected objects, their capacity to interact and their development from devices that provide information into objects that can interact with citizens in a natural and logical way.

Hyperconnected citizens (digital citizens, “screenagers” that uses several devices on a daily basis, etc.) need more than a one way flow of data towards them. Successful cities go beyond simply managing city incidents such as reporting potholes, controlling connected waste containers that inform of their status or replacing faulty street lighting. Nowadays vehicles, buildings, houses and citizens are connected and that requires public services to be managed differently, and of course in many cases it creates new business models that adapt to these changing needs.

It is obvious that when setting the smart city’s philosophy, it is relevant to correctly size the strategy and give it adequate depth so that it is aligned with the established challenges to overcome and it is useful for solving issues. These models must have a degree of uniqueness to avoid turning Smart Cities into a repeated cliché throughout the planet. Data must be shared in homogeneous cities and territories around five concepts that can serve as a pattern of services and business models for the connectivity of things. These ideas stem from the social and city perspective, using strategic technology as a binding element for the territory where the cities are within an innovative ecosystem in an intelligent environment:

  1. Data management. The use of collected data affects decision making and helps iteratively redesign procedure in search of true value
  2. Managing similar habits. Data leads to knowledge and in this case it leads to specific needs that citizens need to cover to address their daily habits. Adapting to citizen habits instead of reshaping behaviour is key to success.
  3. New public services. Can we talk about a Minimum Viable Public Service – much in the way Lean Startup Methodology talks about the MVP (Minimum Viable Product)? We may be at the dawn of the almost-fully-customized service.
  4. New business models. If we can reach a Minimum Viable Public Service new viable and minimum business models emerge for the city and its citizens, addressing the concepts of GLO-CAL and PERSONALISED.
  5. Common, social and inclusive challenges. These may be the prelude of Minimum Viable Public Services and business models. This philosophy considers cities to be permanent labs.

Technology makes people feel safer and – according to a Harvard Business Review report – the safety net that the use of technology provides, empowers people, making them believe they are more intelligent than they actually are. In a certain way there is not a clear understanding on people’s behalf that part of their intelligence is not in their mind but in their mobile phone.

We are already entering the second stage – data analysis – where the goal is to create an operative connection, with relevant data and effective ways of analysing data within a certain context. The impact of digitization and the analysis of data offers social, economic and political improvement for the city’s services.

SAVE THE DATE: Security Innovation Day 2016

Florence Broderick    12 September, 2016
Security Innovation Day is the setting where every year Telefónica and ElevenPaths unveil their latest launches and novelties in innovation and security. The event has become an international benchmark event in the cybersecurity sector in which we count on reference speakers and a very special guest:  Hugh Thompson, Chief Technology Officer in Symantec.

Come join us in the fourth edition of our Security Innovation Day. We look forward to seeing you on October 6 at the Telefónica Auditórium (Madrid), situated in the Central Building of the Distrito Telefónica.

“Let Security Be_” is our claim of the fourth Security Innovation Day 2016
Only those who really understand the issues surrounding cybersecurity delegate it to the experts. Our real challenge is to offer security solutions that keep you one step ahead of all the different kinds of attacks in the cybercrime industry. That’s why we are so firmly committed to innovation and forming alliances with the major players in the market. It’s the road to a more secure future.

These are the topics selected for the fourth edition of this event. We hope that they will be of your interest.

Agenda

3:00 p.m. Guest list

3:30 p.m. Welcome

• Solutions vs. Cybercrime
• Strength Lies in Unity
• Innovation: The Road To a More Secure Future
• Cyber-attacks in the Digital Age
• Four Eyes See More Than Two
• Special guest: Hugh Thompson

7:00 p.m. Cocktails

For more details see agenda: securityinnovationday.elevenpaths.com

The seating is limited, we suggest you to register as soon as possible.
Sign up now!

Besides, this year it’s our anniversary! We are three years old and we want to celebrate it with you. To mark the event, we have prepared a very special party. Will you join us?

*Related content:
Telefónica and ElevenPaths announce new market leading security offering following key sector agreements

How to know how smart a Smart City is

Beatriz Sanz Baños    7 September, 2016

Forbes illustrates the clear cut contrast bigger cities face. On one hand, cities are responsible for generating 80% of the world’s wealth but compared to other geographical spaces they need to overcome complex economic, demographic, social, and environmental challenges at all levels. 70% of the World’s population is expected to live in cities by 2050. Developing cities so they meet the quality of service that citizens demand in an efficient and sustainable way is key to ensure the future of cities (and the entire planet).

Technology becomes a core component of urban spaces as towns expand to become cities and citizen demands become more sophisticated. Thus, every city has a natural tendency to become a Smart City to efficiently answer these demands.

Smart Cities are one of the main economic motors of IoT but they are also one of the biggest technological challenges societies have to tackle. Not every Smart City shares the same level of development and not all of them deploy digital transformation processes with the same efficiency.

There are different methods to gauge and rank Smart Cities but we are going to focus on two renowned institutions as a reference. The annual IESE ‘Cities in Motion’ Index takes into consideration 77 factors in 181 key cities around the world. These factors cover 10 dimensions: Economy, Human Capital, Technology, Environment, International Outreach, Social Cohesion, Mobility and Transportation, Governance, Urban Planning, and Public Management. Other findings, like Juniper Research’s report, are based on two overarching benefits of smart cities: efficiency and sustainability in five key areas for cities: Technologies, Buildings, Utilities, Transportation and Road Infrastructure, the Smart city itself. To maintain the five areas in balance three downsides must be taken into consideration: energy consumption, waste and congestion.

These different ways of measurement are not, in fact, divergent but much on the contrary converge towards a set of common concepts that ever Smart City quality measurement system takes into consideration. The three dimensions that are central to these (and other) systems for determining the quality of a Smart City are

  • The city elements
  • the public and private actors involved in the Smart City
  • The way citizens’ lives are improved

There are two negative factors that ever Smart City has to strive to keep as low as possible to improve efficiency and sustainability:

  • Energy consumption
  • Waste generation

A way of checking proper development of Smart Cities is by referring to the Ten Best Practices for Smart Cities form Telefónica, PWC and the IE Business School’s joint whitepaper:

  1. Have a long term Smart City plan, involving every actor
  2. Clearly determine resource priorities and scope
  3. Designate the Mayor as the leader of Smart City initiatives
  4. Favour any required transversal technological changes
  5. Seek collaboration from other City Councils
  6. Foster a legal framework that favours digitization
  7. Create a mixed model that involves private corporations and generates new business models
  8. Digitized vertical services must connect horizontally to exploit common synergies
  9. Opt for open, standard and interoperable platforms that create innovative ecosystems
  10. Share open data that creates value for citizens and developers working on new services

As the name of the IESE Index – ‘Cities in Motion’ – clearly mentions, Smart Cities are changing urban spaces of digital transformation. The index also shows us how relevant different combined factors are in order to offer the best public services possible to citizens. This process must be seen as a cycle in search of constant improvement and an ongoing project as bustling as the city itself.

To conclude we should mention that cities are not only developed through internal efforts but sometimes receive external stimuli. It is quite common for countries to establish digital strategies that benefit certain regions (or cities) over others. Transforming a small or medium city into a Smart City is a means to rebalance wealth. Not surprisingly, governments become involved in designing regional or even countrywide digitization projects. Bigger cities normally have enough autonomy, and industrial momentum through private companies to improve the efficiency and sustainability through technology.

Cybersecurity Shot_MUPOL Information Leakage

ElevenPaths    24 August, 2016

Here comes Cybersecurity Shot, a research report on current cases related to databases leaked online that includes leakage prevention recommendations.

Every week in May and June we will be publishing the real cases. You can’t miss it!

Here comes a brief summary of this week’s case:

MUPOL Case
Investigation report “MUPOL information leakage”

On May 31st a tweet under the username @FkPoliceAnonOps informed that the security of the data base, belonging to the Mutual Social Security Police (organization, dedicated to the creation of savings plans for personnel assigned to the General Management of the National Police), had been compromised.

Learn from our intelligence analysts what technique the suspected delinquent used to spread the stolen data.

» Download the MUPOL data leakage case

Don’t lose out our next report:
» Mossos d’ Esquadra Case

More information at:
Elevenpaths.com

Our CEO, Pedro Pablo Pérez, will represent Telefonica in the European Cyber Security Organization

Florence Broderick    2 August, 2016

Brussels and the cybersecurity industry will earmark up to 1.8 billion euros in research

TELEFONICA JOINS THE DECISION-MAKING BODIES OF THE EUROPEAN CYBER SECURITY ORGANIZATION AS THE ONLY TELCO

MADRID, – August 2, 2016 – Telefonica has been appointed in the General Meeting of the newly created European Cyber Security Organization (ECSO) as a member of its board and of the Partnership Board with the European Commission (EC) to coordinate the activities that the ECSO will promote in relation to the so-called cPPP (contractual Public-Private Partnership), a joint initiative of the EC with companies from the cybersecurity sector that is expected to trigger 1.8 billion euros of investment by 2020 in different lines of research in cybersecurity. 

Pedro Pablo Pérez García, Telefonica Global Security Managing Director and CEO of ElevenPaths —the company’s division specialized in developing cybersecurity solutions—, and Cristina Vela, Senior Advisor of Telefonica’s Brussels office, will represent Telefonica as the only telecommunications operator in this organization, that has over 130 partners including large companies, research centers, business associations, public administrations and technology users.

Cybersecurity and the fight against cybercrime have turned into one of the priorities of the EU Digital Single Market Strategy, with the promotion of initiatives to prevent security incidents that can undermine not only consumer confidence, but also the ICT sector and ultimately, the digital economy. This way, Brussels aims to strengthen cooperation between all Member States and cybersecurity companies and organizations, and thus help to develop new policies and technologies, products and security services common for all EU. 

Within the ECSO, Telefonica will defend its vision of a comprehensive and balanced cybersecurity strategy that faces the ongoing security threats in a constantly changing technology environment, and that at the same time guarantees the individual and collective rights in security matters. With the participation in this organization, Telefonica will also strengthen its commitment to consolidate the digital trust of clients, users and companies in the interest of a safe internet environment in Europe, as stated in the company’s Digital Manifesto.

“We have to evolve from isolated security solutions that focus on asset protection, towards solutions that are capable of analyzing information from devices, networks, technology equipment and users, and combine it with external intelligence on vulnerabilities, threats and other agents,” Pedro Pablo Perez pointed out. “Trust between the industry and the public administration of the Member States is essential for the effective implementation of this approach, and in this sense, the role that the cPPP can play is essential.“.

The unstoppable growth of the Internet of Things (IoT) and the development of new business around it makes a full coordination between all agents in the ICT sector all the more necessary, as well as the creation of an open cybersecurity technology standard in order to end the threat posed by the current fragmentation of security systems. This is precisely one of the conclusions of the report “Scope, scale and risk like never before: Securing the Internet of Things” recently presented by Telefonica, which also shows that the development of vulnerable cybersecurity solutions could compromise the security of critical infrastructures.

Over the years, Telefonica has been engaged in the development of specifications and technological standards on cybersecurity, such as the development of the biometric standard SC37, and in several initiatives in this field within the European Commission’s H2020 program (Horizon 2020). The company has also been involved in other cybersecurity projects within bodies such as the IETF (Internet Engineering Task Force), ETSI (European Telecommunications Standards Institute), ITU (International Telecommunication Union) and the GSMA (GSM Association). Moreover, it encourages the development of cybersecurity technologies, not only through ElevenPaths, but also through Telefonica Open Future with investments and the promotion of many start-ups working in this sector.

*The following article may be of your interest:
European Cyber Security Strategy: Telefonica’s Support

More information at:
www.elevenpaths.com

New Tool: PinPatrol add-on for Firefox

Florence Broderick    25 July, 2016
We have created a new tool for improving the experience using HSTS and HPKP in Firefox. This tool is a Firefox add-on that shows this information in a human readable way. It is very easy to use and it can provide useful information about the HSTS and HPKP data stored by your browser.

HSTS and HPKP

The HTTP Strict Transport Security protocol (HSTS) can turn HTTP requests into HTTPS from the browser itself. If a server decides to send HSTS headers to a browser, any subsequent visit to the domain from that browser is automatically and transparently converted to HTTPS from the browser, avoiding unsafe requests from the starting point of the connection itself. The application of the HSTS protocol is transparent to the user, i.e., browsers. themselves are responsible for redirecting and remembering for how long domains should be visited via HTTPS if they have notified via HSTS. The domain transmits HSTS information to the browser with the Strict-Transport-Security header.

The idea behind the certificate pinning is to be able to detect when a chain of trust has been modified. In order to do so, a digital certificate present in a certificate chain needs to be unequivocally associated, usually in the browser, with a specific domain. Thus, a domain A, e.g. www.elevenpaths.com, will be linked to a specific certificate/certification authority B. If for any reason a different certification authority B’ (which depends on a trusted root certification authority) tries to issue a certificate associated with domain A, an alarm is launched. In general, any modification of the certification chain is suspected of a possible alteration. That is what HPKP (HTTP Public Key Pins) is for.

Description

Firefox supports HSTS from version 4 and HPKP from version 32. This is a Firefox extension that shows in a readable format, the state of HSTS and HPKP domains stored by the browser. Firefox does not have a native way to show these domains or this functionality properly documented.

An example of what the add-on shows

Functionality

The information provided by the table is the one stored by the browser, “translated” into a more human readable way.

  • Domain: Domain protected under HSTS or HPKP.
  • Score: This score is a Firefox value. It increases by one every different day (24 hours at least) the domain is visited.
  • Date: Last day the domain was visited. It is calculated by Firefox using the number of days since 01/01/70.
  • Expiration Date: Max-age of HSTS or HPKP, in other words, when the entry will expire.
  • SecurityPropierty: This is a Firefox value. SecurityPropertyUnset if 0, SecurityPropertySet if 1 or SecurityPropertyKnockout if 2.
  • IncludeSubdomains: Whether the HSTS or HPKP directive includes subdomains.
  • HPKP Pins: List of pins in the HPKP header.

PinPatrol is available from Mozilla official repository. Hope you find it useful.

New tool: Maltego transforms for Tacyt

Florence Broderick    18 July, 2016
If you are a Maltego user, you already know how intuitive and useful it is for researching and analyzing information. You may know as well that Maltego allows to create transforms, that are no more than scripts to call some service API or whatever other resource. Since Tacyt counts with a comprehensive API and a SDK for an easier use, transform are a natural step ahead to take advantage of everything Maltego offers. And here they are.

Imagine you are performing a research that involves applications and its relations. You may ask Tacyt to give you results about permissions, links, names, emails, certificates, etc… And you end up with an interesting data, let’s say, an interesting domain. Who does that domain belong to? Well, instead of using external resources, you may use Maltego, run Tacyt transforms, extract the interesting information and once you get to an url, email, profile or whatever other entity, take advantage of the other many transforms available for Maltego. So the research gets easier, visual and complete in a single screenshot.

We have created several transforms, but more are sure to come (the code is all in GitHub so you could create your own). We have created as well entities for Tacyt in Maltego, and a package to install them all. The steps to install are easy:

  1. Import the MTZ file from “Manage, Import, Config” menu.
  2. Once imported, check the Python path and transforms paths themselves match the ones in your system. Click on “Manage Transforms” and search for tct (with wildcards) to show all Tacyt transforms. Select them all using shift button.
  3. In “Transform Inputs”, modify “Command line“, and “Working directory” (the path where the .py transforms are stored) accordingly.

Of course you would need to specify your API ID and Secret in APIManagement.py.
Here is a short video about how to develop a little research with an arbitrary app.


In the video, it is shown how, coming from an app classified as Brain Test family, relevant information may be extracted as certificate data. From a not so common alias in the Subject Common Name, we may search again this it in Tacyt, and other apps show up. From one of them we extract the domains (which we could apply some transform to, so we get their registering data). It would be possible to search if the alias corresponds with a Twitter identity (Transform from alias to Twitter user), which is confirmed (although it does not necessarily mean the account is responsible for the malware).

The code and transforms are available here. Hope you find it useful.