services

.rodata:00405160

I'm Can Ozdemir. Besides writing this notebook I take on a limited amount of client work in the areas below. The notes on this site are the best sample of how I work: careful, hands-on, and written down so you can follow it.

.rodata:00405244

   +----------------------+         +----------------------+
   |  CONSULTING          |         |  SOFTWARE            |
   |  security reviews,   |         |  DEVELOPMENT         |
   |  threat models,      |         |  C, systems, tools,  |
   |  secure development  |         |  automation          |
   +----------+-----------+         +-----------+----------+
              |                                 |
              +-------------+     +-------------+
                            |     |
                       +----v-----v----+
                       |  ozdc@ozdc.us |   PGP welcome
                       +----^-----^----+
                            |     |
              +-------------+     +-------------+
              |                                 |
   +----------+-----------+         +-----------+----------+
   |  REVERSE             |         |  TRAINING            |
   |  ENGINEERING         |         |  C, assembly,        |
   |  binaries, formats,  |         |  systems and secure  |
   |  protocols, triage   |         |  coding workshops    |
   +----------------------+         +----------------------+

.rodata:004056B8

Security consulting

.rodata:004056CE

Security reviews of applications, services and their deployment
Threat modelling: what you are protecting, from whom, and what is worth fixing first
Secure development advice for teams: code review practice, dependency hygiene, hardening
Incident support: help working out what happened and writing it up clearly

.rodata:0040580F

Software development

.rodata:00405826

Systems programming in C and other low-level languages: tools, parsers, libraries
Internal tools and automation (Python, shell, build pipelines)
Code review and refactoring of existing projects, with a focus on correctness and security

.rodata:0040591C

Reverse engineering and analysis

.rodata:0040593F

Analysis of binaries and file formats for interoperability, documentation or recovery of lost knowledge
Suspicious file triage and malware analysis reports for defenders (see First look at an unknown file, safely)
Protocol documentation from captures and implementations

.rodata:00405A5A

Work is only taken on for systems you own or are authorised to test, and within the law.

.rodata:00405AB2

Training and workshops

.rodata:00405ACB

Introductions to C, x86-64 assembly and systems programming, built on the learn section of this site
Hands-on workshops for developers: reading compiler output, debugging with gdb, secure coding basics
Tailored sessions for teams, in English or Turkish

.rodata:00405BE7

How to start

.rodata:00405BF6

Write to ozdc@ozdc.us with a short description of what you need, your timeline and any constraints. Encrypted mail is welcome: the PGP key is on the contact page. Every engagement starts with a short scoping conversation; scope, schedule and price are agreed in writing before any work begins.

.rodata:00405D41

Availability is limited. If a project isn't a good fit, I'll say so and, where I can, point you to someone who is.

.rodata:00405DB3

.rodata:00405DB3_rodataends