Zuul Addresses Unique Challenges of Securing Critical Infrastructure Technology
Company poised to make a significant impact on Smart Transit, Smart Building and Public Sector following performance at ‘Hack the Building’
November 16, 2020
Zuul IoT, an Industrial Internet of Things (IIoT) device management platform, today announced the launch of its solution to address security gaps within critical infrastructure. Following a commendable performance during live-fire events at MISI’s 'Hack the Building', Zuul has proven its ability to make a significant impact on the smart transit, smart building and public sector markets. The platform addresses the unique challenges of securing IIoT technology at scale and has been rigorously tested by Raytheon as well as within the networks of several large organizations across multiple industries such as public transportation and commercial real estate development.
The proliferation of IoT devices within critical infrastructure has catapulted into the millions and cyberattacks are deployed against these networks by criminals and nation states with increasing frequency and sophistication. The efficiency and reliability of our nations critical infrastructure depends on internet connected equipment that is extraordinarily vulnerable to these new and increasing cyberattacks. Zuul delivers a platform that enhances the cyber protection of IoT devices, configuring networked gear on buses, trains and track systems, managing smart devices, including entry and security systems, elevators and HVAC, as well as restricting unauthorized access to networked SCADA systems.
“IoT devices found in smart transportation, building automation and industrial control systems markets have not been protected with the same type of robust defenses found in the mainstream IT market,” said Zuul Founder and CTO, Edward Stanford. “Zuul leverages the unique differences between general purpose computing devices and IoT devices to enable companies to save time, reduce costs, and ensure that their IoT configurations are secured better than traditional IT systems, consistently audited, and maintained. We are excited to begin deploying into these markets.”
Zuul provides a full security industrial IoT lifecycle that discovers, enrolls, manages devices, hardens devices against compromise, manages updates remotely, provides network defense and situation awareness, and supports rapid and effective response. Organizations can easily integrate their IoT device security with existing enterprise IT security systems. Key benefits of Zuul’s platform include:
Prevent successful attacks for every device, network, and application
Gain monitoring clarity with fewer false positives and instantaneous response to threats
Reduce deployment time and support costs by an order of magnitude, since devices are complete and correct
Make compliance easy with automation and maintenance that is quick and complete
Developed in the MasterPeace LaunchPad accelerator, Zuul draws upon the leadership, engineering, and support resources to help accelerate its growth and development. To learn more about Zuul and how they address the unique challenges of Industrial Internet of Things (IIoT) technology at scale, please visit www.zuuliot.com.
Zuul protects IoT devices found in smart transportation, smart buildings, and industrial control systems with the same type of robust defenses found in the more mainstream IT market. It takes the complexity out of managing IoT device deployment, discovery, and management. Zuul provides defense-in-depth, hardening of devices, securing of communications, locking down of networks and applications, and integrates IoT device security with the existing enterprise IT security systems. For more information, please visit: https://www.zuuliot.com/.
MasterPeace President and CEO Drew Cohen To Speak at RSA 2020
February 18, 2020
Drew Cohen, President & CEO of MasterPeace, will be speaking at RSA 2020 on a panel titled, “Putting Access Management for the Internet of Things into Practice with MUD.” The panel discussion will summarize the various public and private sector methods for documenting and applying the top security practices for IoT. Additionally, industry collaborations exploring the implementation of Manufacturer Usage Description (MUD) Specification (RFC 8520) will be discussed.
“MUD makes it possible for manufacturers to define ‘device intent,’ allowing network security vendors to use that information to ensure ‘safe’ network conditions,” said Drew Cohen, President & CEO of MasterPeace Solutions. “Working with NIST and others, our Yikes! startup has demonstrated how MUD-enabled products create opportunities that change the landscape for secure device management on small business and consumer networks. MUD allows security automation to be built into consumer and small business networking products, to establish the appropriate security policies for each device, and decrease the threat surface, without complex system administration.”
During the discussion, Drew will elaborate on these topics and, with other panelists, speak about the collaboration between the National Institute of Standards and Technology’s (NIST), MasterPeace, Arm, CableLabs, Cisco, CTIA, DigiCert, ForeScout, Global Cyber Alliance, Molex, Patton Electronics, and Symantec, who are all working towards solutions that will make it harder for threat actors to exploit IoT devices used by both homes and small businesses. Many of these IoT devices have software flaws that can be easily compromised by threat actors. To combat this, the partnership has published a practice guide titled, Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD), a free description of solutions and practical steps that consumers and small businesses can use to mitigate these IoT-based threats.
Joining Drew on this panel are:
Professor L. Jean Camp from Indiana University
Eliot Lear, Principal Engineer of Cisco-Enterprise Chief Technology Office
Mudumbai Ranganathan, Computer Engineer from NIST
Darshak Thakore, Principal Architect of CableLabs
The panel will take place February 27, 8:00am to 8:50am at Moscone West. To reserve seats click here.
MasterPeace LaunchPad Startup Founder Edward Stanford Discusses Windows Security Vulnerability with Technical.ly Baltimore
January 21, 2020
Edward Stanford, the Founder and CTO of MasterPeace LaunchPad startup Zuul IoT, spoke to Technical.ly Baltimore's Stephen Babcock about how last week's Windows Security flaw could be exploited, and the potentially broad ramifications for both home users and enterprise systems.
“You can use that weakness to make Windows  systems download and install software that appears to be coming from Microsoft that is not,” said Stanford. “This is bad. If you do it right then you can take over most networks or computers that are Windows-based. The faster they get patched, the less true that statement will be.”
MasterPeace Solutions Recognized by Raytheon with EPIC Award
for Excellent Performance
January 8, 2020
MasterPeace Solutions today announced that they have been recognized by Raytheon, a technology and innovation leader specializing in defense, civil government, and cybersecurity solutions, with an EPIC Award. EPIC Awards recognize a supplier’s overall excellence in performance, innovation, and collaboration for one or more Raytheon business.
“At MasterPeace, we strive to take on the hardest challenges and be excellent across a range of the latest technologies, including Cloud, Big Data Analytics, IoT, SDN, and others. We currently have engineers leading cutting edge implementations on literally dozens of programs spanning these areas. This is why it’s exciting to be recognized for our work on Computer Network Operations (CNO) by Raytheon, a leader in that space,” said Ethan Guild, Raytheon Account Manager at MasterPeace. “CNO is one of the most specialized and technically challenging missions we serve. This recognition shows that we can be both deep and broad, and it’s very gratifying to know that we’re able to excel in the most complex technology areas.”
MasterPeace Director of LaunchPad Operations Bill Olsen to Speak at the Lean Innovation Educators Summit
December 4, 2019
Director of LaunchPad Operations, William Olsen, will be speaking on a panel at the Lean Innovation Educators Summit, co-hosted by recognized entrepreneurs Steve Blank, Jerry Engel, and Pete Newell. The Summit brings together a select group of educators from across the country that are revolutionizing innovation and entrepreneurial practice through the Lean Innovation movement. Olsen's panel takes place Wednesday, December 4, and will discuss creating and scaling national and regional programs.
"I am thrilled to have the opportunity participate in the Lean Innovation Educators Summit," said Olsen. "In addition to sharing the fundamentals of what makes our program effective, I look forward to enhancing skills, tools, and insights that we can use to continue growing and strengthening MasterPeace LaunchPad startups and entrepreneurs."
MasterPeace CEO Drew Cohen Speaks at TEDCO's 2019 Entrepreneur Expo
November 7, 2019
Over 900 of the region’s entrepreneurs, venture capitalists, legislators and business owners, including MasterPeace CEO Drew Cohen gathered at TEDCO’s 2019 Entrepreneurial Expo last week.
Cohen, serving in his dual-role capacity as CEO of MasterPeace LaunchPad startup Zuul IoT, took part in a TEDCO Expo panel discussion centered around selling cybersecurity solutions to the enterprise, and spoke about the importance of forming lasting, interpersonal networking connections when creating new businesses.
AHA Radio Interviews MasterPeace CEO Drew Cohen
October 28, 2019
MasterPeace CEO Drew Cohen was featured on AHA Radio's CEO Spotlight Show with Greg Otto and Jen O’Daniel, where he spoke in depth about MasterPeace’s unique model and the company’s groundbreaking approach to providing unique career opportunities for government services engineering talent.
Don’t pass up this unique chance to learn about what makes MasterPeace different, and how its LaunchPad incubator encourages engineers to transform creative ideas into commercial-grade technology startups. Our model provides a unique benefit to all employees, equity participation in every startup. It also provides engineers that want to launch their own company a platform, resources, mentoring, and funding. Drew’s interview is featured from 15:45 to 29:00.
MasterPeace LaunchPad Director Bill Olsen Helps Judge Minority Innovation Weekend Startup Pitches
October 28, 2019
MasterPeace LaunchPad CEO Bill Olsen helped cap off Baltimore Innovation Week’s third annual Minority Innovation weekend by taking part in a panel that helped judge the effectiveness of several minority-affiliated startups’ business model pitch presentations. Olsen’s participation was part of his ongoing outreach to local entrepreneurial technology groups, done in part to increase MasterPeace LaunchPad’s visibility in the Central Maryland community.
An anti-cyberbullying mobile application, online legal services platform, and a company focused on facilitating the sale and purchase of vehicle parking assets were judged to be the winners of the event, and as a result received a six-month membership to the Incubate Baltimore program, which offers resources including mentorship and potential seed capital.
MasterPeace LaunchPad Initiates Annual Cohort Class with Five SpinCo Teams
September 10, 2019
MasterPeace LaunchPad, a technology accelerator that functions inside MasterPeace Solutions Ltd.’s government services business, today announced the initiation of their newest cohort class. MasterPeace’s program is modeled after the Lean LaunchPad start-up Business and Engineering school class taught at Stanford University, based on a methodology created by entrepreneur Steve Blank to support the launch of commercially focused technology companies.
Led by Director of LaunchPad Operations, William Olsen, this program covers all the technical and business aspects required to transform a startup concept into a viable commercial business, rather than just coaching cohort members on giving fundraising pitches or product demos. Last year’s 2018 graduates of the MasterPeace LaunchPad program created new companies including Yikes, which has contributed network security, engineering, and operations defense expertise to the NIST-led consortium for Mitigating IoT-Based DDoS, and Zuul, currently deploying national transportation market solutions for securing connected devices and payment systems. Another cohort from last year’s class, FactChain, will officially launch and begin selling product in the fall of 2019.
“MasterPeace LaunchPad is diversifying Maryland’s economic base by leveraging its Cyber and Technology talent pool to create new product companies and career opportunities for engineers who have previously focused on the Government Contracting sector,” said Drew Cohen, MasterPeace President and CEO. “We are glad to have the opportunity to support this new group of talented individuals and are eager to continue providing a platform for our engineers to create and launch new product companies.”
The five new SpinCo teams that comprise MasterPeace LaunchPad’s 2019 cohort class, some of which may turn into commercial companies that ultimately “spin out”, are working to build businesses that deliver unique technology to the marketplace. Two examples of the new startup’s offerings are described below:
ElectraZoom, an IoT enablement platform and device toolkit that provides one click onboarding of IoT devices into a mixed vendor/device environment. The ElectraZoom platform controls, manages, and monitors devices in a consistent manner, and is able to perform functions and interoperate in a network of heterogenous IoT devices. Users pick the IoT device they want and are not locked into what is available from a single manufacturer. The platform supports industrial enterprises in implementing machine learning, surveillance, factory automation, and more.
DataLocker, developed by LaunchPad’s Uplift Portfolio Service team as their first AWS service, offers PII-Data-Management-as-a-service to manage and store encrypted PII and HIPAA data to ensure that if a company is breached, critical information is not taken in the process. Advanced analytics monitor and block queries that are potentially malicious, alerting the SOC/CIRT and identifying the potential threat before the data loss. This reduces risk and cost, and will be an AWS marketplace service that can be easily added to existing AWS solutions. With a few simple configuration settings, this capability can be engaged and a company’s critical PII data is secured.
Following the completion of the LaunchPad Program, each company will showcase their technology at Demo Day in early February 2020. MasterPeace’s 2018 Demo Day included attendees such as Maryland Lieutenant Governor, Boyd Rutherford, and Howard County Executive, Calvin Ball.
“From our Innovation Center to the locally-based MasterPeace LaunchPad, Howard County is on the cutting edge of economic growth. By creating a culture that welcomes new businesses, leverages our strategic location, and utilizes our talented workforce, our community continues to be a land of opportunity,” said Howard County Executive, Calvin Ball. “I congratulate the new cohort class at MasterPeace and look forward to the innovative business ideas they are sure to create.”
CyberScoop’s Securiosity Podcast Interviews MasterPeace CEO Drew Cohen
March 20, 2019
MasterPeace CEO Drew Cohen was featured on CyberScoop's Securiosity podcast with Greg Otto and Jen O’Daniel, where he spoke in depth about MasterPeace’s unique model and the company’s groundbreaking approach to providing unique career opportunities for government services engineering talent.
Don’t pass up this unique chance to learn about what makes MasterPeace different, and how its LaunchPad incubator encourages engineers to transform creative ideas into commercial-grade technology startups. Our model provides a unique benefit to all employees, equity participation in every startup. It also provides engineers that want to launch their own company a platform, resources, mentoring, and funding. Drew’s interview is featured from 29:05 to 47:53:
Internet Engineering Task Force (IETF)
MasterPeace Engineers Participate in Creating New IoT Device Standard
March 13, 2019
The Internet Engineering Task Force (IETF) announced that it has taken steps to formalize internet standards in regards to Manufactured User Descriptions (MUDs). MUD allows manufacturers to specify the intended network behaviors of the devices they build. MasterPeace engineers actively participated in this standard, and also developed an open source MUD Manager, osMUD.org, that implements the MUD standard. The MUD Manager communicates with network services, detecting when devices enter and leave the network and automatically implements network security rules based on a device’s MUD specification. In addition, Yikes!, a commercial startup incubated within the MasterPeace LaunchPad accelerator, will deliver a commercial product, available later this spring. The Yikes! product will bring automated, state-of-the-art network security and management, including MUD, to small business and consumer networks.
The Washington Post
MasterPeace CEO Drew Cohen Discusses Importance of Transportation Cybersecurity with The Washington Post
January 27, 2019
MasterPeace Solutions CEO Drew Cohen spoke to The Washington Post's Aaron Gregg about the future of transportation infrastructure and the increasing need for effective cybersecurity systems in his capacity as CEO of Zuul, the Industrial IoT Security startup being spun out of MasterPeace's Launchpad incubator. Following the announcement that an early prototype of Boeing’s self-driving air taxi completed its first test flight at an airfield in Manassas, VA on Tuesday, January 22nd, Cohen told the Post that when people are being flown through the air, “the price of not getting [security] right is higher.” Zuul provides a full security industrial IoT lifecycle for transportation networks that discovers, enrolls, and manages devices, hardens devices against compromise, manages updates remotely, provides network defense and situation awareness, and supports rapid and effective response.
Baltimore Business Journal
MasterPeace Solutions Spinoff Wants to 'Make Sure Your Sleep Number Bed isn't Talking to China'
December 14, 2018
A newly launched MasterPeace LaunchPad cyber startup, Yikes!, is looking to market technology that could prevent internet-connected devices from infecting the networks in people's homes and small businesses. When a new smart device comes on a network, it has a URL web address. Using that URL, Yikes! technology could check with the manufacturer to get specific information about what the device is supposed to do. Devices can then be classified, segmented and monitored on a home or small business network, to ensure no device is behaving in ways it shouldn't, or allowing potentially harmful external forces to gain access.
The company is currently working to validate its technology through an ongoing project with the National Institute of Standards and Technology (NIST). Yikes! plans to begin selling to consumers by the end of the first quarter next year. Yikes! plans to pilot test internally at MasterPeace, and is in the process of identifying managed services providers, or IT services providers, as potential distribution partners.
MasterPeace Solutions gives Cybersecurity Talent Space to Build Startups
December 13, 2018
A recent Demo Day that provided a look at the companies working out of MasterPeace's LaunchPad accelerator put some of the development work being done on display, complete with pitches and a video message from Lean Startup originator Steve Blank. Yikes! seeks to protect networks within homes and small businesses from potential threats that originate outside the network, while FactChain uses Blockchain technology to secure business transactions and a team that formed called Uplift seeks to design a platform to convert existing legacy web-based applications to serverless.
MasterPeace LaunchPad Showcases Four Cutting-Edge Technology Startups at
3rd Annual Demo Day
December 6, 2018
MasterPeace LaunchPad hosted its 3rd annual Demo Day, which took place on Wednesday, December 5th. Attendees were joined by a notable group of state and local influencers and industry speakers, including Lt. Governor Boyd Rutherford, Howard County Executive Calvin Ball, and former Tenable CEO/Chairman Ron Gula, to discuss the growing Maryland Cyber startup eco-system. The Zuul IoT, FactChain, Uplift and newly unveilved Yikes! startup teams treated attendees to demonstrations of four products taking shape in the MasterPeace LaunchPad accelerator. MasterPeace leadership also provided some insights into how it is helping these startups put Lean LaunchPad methodologies into practice, including a virtual shout out from Lean LaunchPad creator and author Steve Blank.
The discussion highlighted the significant progress MasterPeace has made as it leverages the region's engineering talent to contribute to Central Maryland's development as a hub of commercial technology innovation. The four startup products on display also showcased the breadth of MasterPeace LaunchPad's development approach, which utilizes a broad range of cutting-edge technologies including IoT PKI, Blockchain, AWS Lambdas, and Software Defined Networking and Micro-nets.
As MasterPeace CEO Drew Cohen put it, “The key to MasterPeace LaunchPad’s success is our talent. The Columbia area is a world class resource for cyber and engineering talent, but the vast majority of that talent is deployed in Federal Government or Commercial services companies. MasterPeace LaunchPad provides a platform for those individuals to create and launch new product companies, scale the impact of their skills to a global market and become an engine for the region’s continued economic growth. This is the reason key state and county officials like Lt. Gov. Rutherford and County Executive Ball, along with proven Cyber entrepreneurs like Ron Gula, are willing to take time from their business schedules to support our startups.”
MasterPeace's Project to Reduce IoT Device Vulnerabilities is Driver Behind
November 7, 2018
MasterPeace Solutions has announced osMUD, an open source project to reduce the vulnerability of IoT devices within consumer and small business environments based on the new IETF MUD standard. The project was shared with NIST's National Cybersecurity Center of Excellence (NCCoE) and will be further developed as one of the first open source Manufacturer Usage Description (MUD) managers.
The project will rely upon the combined expertise of device manufacturers, security vendors and administrators to proactively and automatically secure IoT endpoint. Implementing MUD in routers and network devices will assure that IoT connected devices do not communicate with or access places that are not approved ahead of time. Together, the consortium will produce a NIST Cybersecurity Practice Guide, a freely available description of the solution and practical steps needed to help consumers and small businesses mitigate IoT-based threats.
Baltimore Business Journal
MasterPeace Solutions CEO Drew Cohen Discusses IoT CyberSecurity at
October 12, 2018
MasterPeace Solutions Drew Cohen returned as a featured panel speaker at the CyberMaryland Conference this year, and took the chance to focus on both the opportunities and potential pitfalls presented by the ongoing growth of smart cities that will soon affect areas like Baltimore and Washington, DC.
With the number of connected devices is constantly growing, major cities across the country are working to become "smart cities,” with the sudden appearance of solar paneled WiFi-enabled trash cans, app-powered electric scooters and more heralding that exciting transition in Baltimore. Yet with more smart technologies, comes more cyber vulnerabilities. Cohen, at the CyberMaryland panel, pointed to an event in which a teenager hacked into a train network in Poland and "basically used it as his personal train set,” by virtually manipulating machines in real time, highlighting the growing need for increased, reliable security.
MasterPeace Solutions Welcomes Bill Olsen As Director of LaunchPad Operations
June 6, 2018
Please join us in welcoming our new Director of Launchpad Operations, Bill Olsen.
Bill brings his significant experience with nationally recognized programs: Hacking for Defense and I-Corps, enabling him to scale and accelerate the companies in our LaunchPad portfolio. A proven leader, most recently as a Director at Booz Allen, Bill has over 30 years of extensive background in developing and mentoring technical teams, developing systems and solutions that meet critical mission needs, and applying best practices in rapid start-up processes to technology innovation teams. Bill also brings a large network of executive-level relationships with labs, entrepreneurs, and academic institutions. We look forward to integrating Bill into our leadership team and scaling our innovation program at MasterPeace.
For more information on MasterPeace LaunchPad, please visit https://www.mplaunchpad.com.
MasterPeace Solutions Recognized as a "Best Place to Work" by the Baltimore Business Journal
April 25, 2018
MasterPeace Solutions is proud to announce that it has been named one of “The Best Places to Work” by Baltimore Business Journal for 2018. MasterPeace was selected as one of the 10 Best Midsize Companies to Work for, from among 230 total submissions in the Greater Baltimore Region based on its innovative model as a technology company incubator, strong management structure and dedication to work/life balance.
"This award reflects that we’ve built a company that is objectively differentiated from other government services organizations," said MasterPeace CEO Drew Cohen. "MasterPeace was purposely designed to help our employees build their career to realize their maximum potential and achieve their dreams.