fishbowl is a mobile phone architecture developed by the u.s. national security agency ( nsa ) to provide a secure voice over ip ( voip ) capability using commercial grade products that can be approved to communicate classified information .

it is the first phase of nsa 's enterprise mobility architecture .

according to a presentation at the 2012 rsa conference by margaret salter , a technical director in the information assurance directorate , “ the plan was to buy commercial components , layer them together and get a secure solution . it uses solely commercial infrastructure to protect classified data . " government employees were reportedly testing 100 of the phones as of the announcement . the initial version was implemented using google 's android operating system , modified to ensure central control of the phone 's configuration at all times . to minimize the chance of compromise , the phones use two layers of encryption protocols , ipsec and secure real-time transport protocol ( srtp ) , and employ nsa 's suite b encryption and authentication algorithms . usmobile has implemented commercial enterprise version of fishbowl technology via the scrambl3 mobile apps that run on both android and ios platforms . the phones are locked down in many ways . while they use commercial wireless channels , all communications must be sent through an enterprise-managed server . no direct voice calls are allowed , except for 9-1-1 emergency calls . only nsa approved applications from the nsa enterprise app store can be installed . nsa has published a 100-page overview specification for the mobility capability package . in tandem with the capability package there are a series of protection profiles . these protection profiles list out the requirements a commercial product must meet to be used in the mobile phone architecture .

fishbowl ( secure phone )

the national security agency discussed project fishbowl this week — a project to build out a secure voip network for android devices .
usmobile ' s scrambl3 has implemented the most salient security features of nsa ' s ' fishbowl ' ( secure phone ) initiative secure voice over internet protocol ( voip ) architecture , and has a number of unique characteristics that put it in a class ahead of existing commercial secure voip techniques ,
said dr .
users of the fishbowl phone will even be able to utilize a special security - centric app store created and managed by the u . s . defense information systems agency . whether or not the fishbowl phone actually goes into large scale production , and whether it remains tagged with that rather interesting moniker , will be up to enterprising manufacturers .
all traffic from the phone is routed through the enterprise as a primary security design goal .
the fishbowl phone came about as an offshoot of the nsa mobility program , an effort to ensure scalable secure mobile communication frameworks based on commercial technologies . and , in case any major manufacturers are interested in producing fishbowl - style handsets for the government on a large scale , the nsa has conveniently provided online specifications detailing how off - the - shelf components were used to construct the device .
the law enforcement community is a prime target customer for scrambl3 because public cell phone networks don’t meet heightened police security standards , and photographic evidence requires a secure uploading process .
the nsa created a super secure smartphone using google ' s android operating system .
several other compromises were made but none that reduced the security of the phone , salter said .
the national security agency ( nsa ) has developed an ultra - secure android phone built using off - the - shelf kit that allows us government staff to discuss top secret materials .
called scrambl3 , the app creates a secure virtual - private network that connects bring - your - own devices to an agency server to send messages using end - to - end encryption . irvine , calif . - based usmobile developed the scrambl3 technology when team members worked with the national security agency to create “fishbowl , ” a secure phone network available only to defense department users via the dod information network .
nsa’s vendor of choice , for now , is motorola . but that’s because the voice app fishbowl needed ran on that motorola phone first . “it worked , but… android is not android ! ” salter proclaimed . “android is whatever the handset vendor or the oem chooses to put on the phone ! and that is another one of the rude surprises we had when we were going through all this .
according to the agency ' s margaret salter , building the new phone was done using simple off - the - shelf technology . speaking to it security journal secure business intelligence , salter said ,
the plan was to buy commercial components , layer them together and get a secure solution it uses solely commercial infrastructure to protect classified data .
# . / build - key - server fishbowl # . / build - key client1 # . / build - key client2 # . / build - dh
in 2011 , usmobile staff began meeting with the national security agency ( nsa ) on a new generation of secure mobile architecture . the
fishbowl
( secure phone ) initiative was designed to protect government top secret classified communication . scrambl3 , developed using the latest nsa standards for that new generation , is the world ' s first and only commercial implementation of those standards . the nsa , for national security reasons , has encouraged commercial development of secure mobile communications in large part to help american businesses protect their valuable intellectual property ( ip ) from theft , estimated to result in billions of dollars worth of stolen trade secrets and ip .
the aim , salter said , was to produce secure devices that had the ease - of - use at a low cost .
the division’s head , margaret salter , said anyone can reproduce the phone using specifications published online today because it uses off - the - shelf components .
the phone is part of a wider nsa mobility program to design all communications technologies used for classified discussions from commercial off - the - shelf components .
today ' s leading solutions / protocols to secure mobile communications ( e . g . - srtp and zrtp ) are missing the first step , which is the most critical and differentiating feature of ' fishbowl , ' the creation of a top secret grade vpn
dark internet tunnel
to cloak encrypted communication .
scrambl3 employs encryption algorithms and internet protocols , approved for top secret classified communication , to create encrypted voice , video and data communication . all encrypted communication is
cloaked
by placing it within usmobile
dark internet tunnels ,
which are virtual private networks that employ u . s . national security agency ' s ' top secret ' suite b encryption and authentication parameters , part of the nsa ' s new generation
fishbowl
( secure phone ) initiative .
the nsa fishbowl ( secure phone ) project became the architectural foundation of the current nsa “mobility capability package , ” which has been deployed within the department of defense for top secret classified mobile communication . the most salient feature of the “fishbowl” project was to protect encrypted voip ( application layer ) within a vpn ( transport layer ) where both of these layers / tunnels are independently secured by employing nsa suite b encryption algorithms and internet protocols that the nsa approved for top secret applications . usmobile is the first commercial application to implement this architecture for mobile voice and text , which offers the highest available security for individuals who are high - value targets for hackers .
dubbed the
fishbowl ,
these devices make fully - encrypted calls that are secure enough to allow the discussion of even the most classified information . the handsets will rely on an unidentified voip app , similar to skype , that routes calls through nsa servers ( kind of like what they already do with everybody else ' s ) .
about 100 of the fishbowl phones were developed and released to government staff . they were designed to comply with the nsa’s tough information security rules yet be as cheap as possible and easy to use .
“we’ve implemented fishbowl in the form of a software - defined network , so all of those typical hardware components that you’d find in a mobile network - - routers , vpns , gateways , firewalls , proxy servers - - all of those components are expressed or implemented in our system in the form of software , ” said jon hanour , usmobile’s president and ceo . “we’ve made an affordable version of fishbowl . ”
the era of smartphones has been a boon for consumers , but when government officials need to use such devices , things get tricky in terms of information leakage . to address this concern , the u . s . national security agency ( nsa ) came up with project fishbowl , an initiative to create a super secure smartphone using the android operating system .
the ideal fishbowl phone would need a securable voip app and a securable data transfer app . if at all possible , it should not have to be tied to any single carrier . it needed to be capable of connecting to the wi - fi network supplied by “the ranch” ( headquarters ) . it would need to be remotely manageable using policy , and all of the traffic through the phone must be routed through the enterprise manager . “because if we allowed it to go all kinds of different places , we lost all control , ” salter said .
fishbowl phones do exist now – in fact , two of salter’s nsa colleagues in the audience had some . but the working models made significant compromises , which salter appeared to hold out hope could be remedied .
the new handsets , limited to about 100 units , will allow agency workers to communicate without needing to
speak in code .
encrypted using nsa protocols ipsec and srtp , conversations on the phone can be monitored using a special app , and the agency believes the device is even secure enough for top - secret telephone conversations .
“the plan was to buy commercial components , layer them together and get a secure solution , ” salter said . “it uses solely commercial infrastructure to protect classified data . ”
“we didn’t pick any of these vendors because we think they’re sensationally better than the other vendors , in any of these classes , ” salter explained to one questioner , who had asked whether fishbowl’s choices were indicative of any degree of hardware or software superiority among smartphone standards . “we picked these vendors because we were trying to put a puzzle together . and as we picked certain puzzle pieces , other puzzle pieces fell into place… why is the fishbowl phone an android phone ? because ios is lousy ? no , that is not at all the reason why . it turned out that , because of certain controls that we needed , we were actually able to do modifications to the android os , and we didn’t have that control over the other oses in the space… but it is not our intention to only use android . it is our intention to use any os that meets our requirements . ”
individuals . android phone users , from celebrities to anyone who desires protection from surveillance of sensitive personal matters , from health and medical information to finances to relationships , will find peace of mind with scrambl3 .
the nsa ( national security agency ) is the premier agency responsible for protecting government communications . their traditional approach is using proprietary hardware and software , that is secure but very expensive .
the phones were designed and built by the nsa’s 40 year - old information assurance directorate , which is responsible for providing secure communications to the us government , including the department of defence .
she said the android operating system and key store were customised to be made secure enough for top secret conversations , and a “kind of police app” was designed to monitor operations on the device .
recently , they have been working on a plan to use ready - made commercial standards and equipment for their secure technology needs , instead of reinventing the wheel in their own labs . the idea hasn’t quite worked out as expected , which you can read about in this article , but it has lead to the development of the “fishbowl . ” these are souped - up , super - secure android smartphones , that nsa agents can feel safe using to send even the most sensitive information . information sent through these handsets are double - encrypted as well as screened through nsa servers . please see our security article on why securing real - time communication is hard .
the possibilities are truly endless when it comes to customizing these configurations . one thing that is nice to have is an analog phone converter like the linksys pap2t . this type of device allows you to use a normal telephone with the same secure setup . ensure that your converter supports both tls and srtp , if you ' re going to use this setup . experiment with adding phone bridges , trunking multiple asterisk boxes together across the vpn . this article should have provided you with enough information to get you up and running . if you want more specific details , go to the respective wiki links as both asterisk and openvpn have great support networks .
for additional peace of mind , no messages , voicemails or call data are stored on scrambl3 servers , or any other servers . encryption is maintained end - to - end , providing uninterrupted security of communication traveling between two communicating parties . scrambl3 users have several deletion and security options to keep private scrambl3 messages on their phone , including auto - delete and integration with samsung knox ™ , which will encrypt the messages until they are deleted from the phone .
all of the mobility program is still in its early stages , and the nsa has said it isn ' t necessarily tied to android — the platform was selected because it was easy to modify — but it does think this system is the future for its mobile communications . the agency wants to develop a closed app distribution system , get secure voip working over wi - fi , and hopefully get industry partners on board before it ' s fully ready to rollout project fishbowl .
agents will also be able to install national defense - related apps from an app store run by the us defense information systems agency , ensuring that only secure applications are installed ( sorry path ) .
this configuration can be used for secure communication with end to end pcs and cellular telephones alike ( ios and android both have voip clients in their respective stores that support srtp and sip + tls . )
“if we let it go to all kinds of places , we lost control of figuring out what the phone was doing . if i want pizza , i have to go through the enterprise which has to route me to pizza hut . ”
but at first , nist suggested not srtp but dtls . nsa had no reason to question that recommendation , so it went shopping for a phone with both dtls and srtp , using the “rule of two” as justification for both . “we couldn’t buy one . we could pay someone to make it , but that wasn’t the plan . the plan was to be able to buy commercial components , layer them together , and get a secure solution . ”
inside usmobile ' s
dark internet tunnels ,
calls and texts made with scrambl3 ' s private mobile network are private and secure . and for additional privacy and security , a user ' s private network is not interconnected to standard mobile phone numbers , landlines or any other segment of the publicly switched telephone network ( pstn ) – thus avoiding u . s . government bulk surveillance programs that include prism and calea . while usmobile collaborated with the nsa on this new secure mobile architecture , the company then went on to independently develop its implementation of the architecture and source code ; the nsa does not have a
back door
to usmobile ' s private mobile network .
speaking at the rsa conference in san francisco , margaret salter , a technical director in the nsa’s information assurance directorate , outlined the beefed - up phone : it runs a stripped - down version of android with multiple layers of encryption , has a custom voip app , and a
police app
that logs everything done on the device . salter didn ' t reveal much about the hardware , but based on the agency ' s wish list of features , it seems like there may be modifications at that level as well . the nsa hopes to use project fishbowl as a reference design for manufacturers to incorporate the systems the agency needs into consumer devices . this would allow the same off - the - shelf phone used by a civilian to be authorized for use on the nsa ' s secured network , which is the other side of the equation .
the craziest thing about a typical “top secret” u . s . government phone is that you can probably spot it from a football field away . if your mental picture of a hollywood - style nsa agent drives a black amc ambassador , wears a polyester suit and ray - bans , and smokes luckies , then his phone may either be maxwell smart’s shoe or a general dynamics sectera edge ( pictured left ) . at any distance , it looks like one of the pocket football games my junior high school vice principal used to confiscate and collect in his back drawer .
late last year we heard rumblings that the national security agency was testing android phones for use on a secured networ k , and now we ' ve got confirmation that this is indeed happening . one hundred customized motorola android phones are in use by various employees at the nsa as part of project fishbowl . the project is part of the agency ' s mobility program , a two - pronged approach to developing secure mobile solutions without sacrificing the user experience of the modern smartphone . the nsa also wants to shift away from costly government - developed systems to inexpensive off - the - shelf solutions , which is where the android handsets come in .
the national security agency wants a real - world smartphone , not the one it has now – not the one you see here . of course , it must fulfill the dept . of defense’s requirements for session encryption and data retention . but beyond that fact , the nsa wonders why its secure phone can’t have multitouch , apps , and speed just like the civilians have . based on looks alone , you’d think the civilians are a couple of pegs ahead of the g - men . this is a story of looks being more deceptive than even a security agency could have anticipated .
users will be able to install defence applications on the device from an enterprise app store run by the us defence information systems agency . this would ensure only secure applications were installed , and remove the need for nsa staff to otherwise vet the integrity of third party applications .
the above configuration will dial client1 if anyone dials extension 100 and client2 if anyone dials extension 200 . the 1 here indicates that it is the first step in the call process . asterisk allows you to setup extensive voice prompts and menus for callers as well as setup conference bridges , fax documents , voice mails , call parking lots etc etc . this will however meet our bare requirements in making secure phone calls over a vpn with fully encrypted svoip . keep in mind that we need to safeguard keys when transferring them , and client1 . pem / client2 . pem both contain private keys along with the client certificates .
“we needed a voice app that did dtls ( datagram transport layer security ) , suite b and srtp ( secure real - time transport protocol ) and we couldn’t buy it , ” salter said . “but the industry was thinking more about session description … so we went with that . ”
salter’s team considered whether it was feasible for nsa to utilize a real , commercial smartphone – one like all the kids are using nowadays – but with software that made the device perhaps more secure than the sectera edge . “the phones are so popular and exploding all over the place , because we can play angry birds on them , and do whatever you want . but we needed enterprise management – some control over it , because honestly , we didn’t really want you to be able to go load angry birds on your ts [ top secret ] phone… that was not a business model that we could support , or even defend . ”
voice traffic needed to be encrypted twice – once through ipsec and once again on the voip layer through srtp . this was in keeping with a design principle the nsa calls “the rule of two : ” as margaret salter described it , “two independent bad things have to go wrong in order for an adversary to take advantage of your phone or data . ”
the national security agency , america ' s eyes and ears , constantly deals with highly - sensitive data . problem is , discussing that data over unprotected airwaves represents a huge security risk , often requiring agents to communicate in code . that ' s why the agency has developed its own super - secure android handset .
it is important to note that each private key ( file type ends in . key ) must be protected in order to maintain network integrity . key exchanges must be conducted across secure lines of communication . this could involve directly handing over the keys in person on an encrypted device , it could be a prearranged symmetric
“the advantage of this architecture is that the communication that the mobile device management software would typically have with the device , that communication can now run inside the vpn , so it makes that even more secure , ” hanour said . “it creates value for the mobile device management system as well because you can protect it inside the vpn . ”
now that cyberspace is the primary arena in which we protect information , we are working toward shaping an agile and secure operational cyber environment where we can successfully outmaneuver any adversary . a key step in building confidence in cyberspace is a willingness to offer what we know . please visit our site at urltoken to learn more about our unique experiences and capabilities .
over time , it became more difficult over time for the agency to define “ease of use” on a comparative scale . in just the last five years , the consumer universe appeared to leave the nsa’s secure market behind . “the world everyone wants is , i want to get what i want , when i want it , where i want it . ”
salter describes the “shopping” process for commercial products capable of meeting this frankly ordinary level of encryption , as “hard… we went shopping , we had our little bag and our little list , and we were wandering around looking for stuff . and one of the things we were wandering around looking for was a suite b ikev2 ipsec app that ran on a phone . that was a difficult shopping list to maintain . ”
scrambl3 users remain anonymous when they sign - up for an account and choose their private scrambl3 name . new users only need a valid email address and an android phone to use this privacy technology – no credit card information is required for the public beta . scrambl3 further extends the level of privacy of its users by preventing
public lookups
and
friend requests ,
which are typical of other mobile networks .
the real face of the national security agency looks more like margaret salter . at the rsa conference in san francisco last wednesday , salter told attendees the story of the nsa’s secure mobility strategy . she leads a department called the information assurance directorate . for the better part of four decades , iad has been tasked with securing secret government communications , and building specifications for the tools to do it . the nsa contracts with private suppliers to build a class of devices it calls gots ( government off - the - shelf ) . the gestation cycle for each of these devices – from the conceptual stage , to development , to deployment – typically consumes years . perhaps the best - known gots product is still in wide use today – 1987’s stu - iii secure telephone , which looks about as home on an agent’s desk today as an ibm pc .
instead of dialing up using traditional public phone numbers , scambl3 users call or text using a private scrambl3
black book
contact listing available only to them and other users with whom they have privately shared their scrambl3 name . a private mobile network is only formed after both parties add each other ' s scrambl3 names to their respective black books . and for even further privacy , the contacts in each user ' s black book will disappear when users log out of the scrambl3 app on their phones .
surprisingly , the devices employ off - the - shelf components and run on openly - available protocols .
the plan was to buy commercial components , layer them together and get a secure solution ,
margaret salter , head of the nsa ' s information assurance directorate , said .
it uses solely commercial infrastructure to protect classified data .
calls will be double - encrypted through both ipsec and srtp , per nsa policy .
but their ease of use ranked right up there with a world war ii cipher machine . “once you get something in the hands of an individual user who’s not a cleared comsec custodian , someone who knows what they’re supposed to be doing with this stuff and understands all the details , ease of use became incredibly freakin’ important . and it turned out that , although our stuff was incredibly secure , it was not incredibly easy to use . ”
the part was not to be found , for reasons salter attributes to the industry paying attention to a feature that nist hadn’t considered , called session descriptors – headers that describe the content of media being exchanged in a voip traffic session . “unified communications is more than just making a phone call , ” she explained . “there’s presence , conference calls , and all these cool things they show you they can do… and the only way to do that really is to use that session descriptors protocol rather than break up the dtls . ”
nsa set out to endow fishbowl with support for public cryptographic standards that were good enough , in combination with one another , to enable classified - level communication . nsa calls these standards suite b . “for encryption , it’s aes at the 128 - and 256 - bit strength . for key exchange , it’s elliptic curve diffie - hellman – and we’ve got two nist curves , the p256 and the p384 . for the signatures , it’s elliptic curve dsa , with those same parameters . and we add a hash function , which is the sha - 2 series . we needed those , because they’re the cryptography that’s strong enough to protect classified . ”
they launched project fishbowl , a pilot to produce a smartphone made of mostly commercial parts and infrastructure ( more cots than gots ) , capable of supporting classified voice and data , while remaining as easy to use as its civilian counterpart and staying inexpensive . the historical significance of the nsa embracing commercial crypto standards cannot be stressed enough . anyone familiar with how rsa came to be in the first place will recall the fights its engineers faced keeping the government from classifying it , taking its power out of the public’s hands . perhaps the whole point of the rsa standard and the rsa conference is to promote the power of security for everyone through manageable encryption .
the information assurance ( ia ) mission at the national security agency ( nsa ) serves a role unlike that of any other u . s . government entity . national security directive ( nsd ) 42 authorizes nsa to secure national security systems , which includes systems that handle classified information or are otherwise critical to military or intelligence activities . ia has a pivotal leadership role in performing this responsibility , and partners with government , industry , and academia to execute the ia mission .
now we will generate the required keys in order to use tls to encrypt our sip signalling . first we need to create the directory to store our keys in . similar to openvpn , asterisk also comes with its own scripts to help ease the task of creating cryptographic keys . the script comes in
contrib / scripts / ast _ tls _ cert .
in case you ' re using the debian packages , i ' ve included a copy in the github repository . you ' ll be asked for a password to be using with the certificate authority for signing additional keys . pick something secure that you ' ll be able to remember in the future as well .
salter said she would previously need to “speak in code” if using a commercial mobile device to discuss classified information .
the information assurance directorate ran into a string of problems during the build due to a lack of interoperability between vendor products .
salter said a lack of interoperability between ssl vpn options forced designers to use ipsec .
designers were also challenged by the functionality in commercial products . vendors were chosen not by reputation or preference , but by their support of required functionality . each was plotted on a grid and chosen by “drawing a line through the list” .
salter said the security specifications , such as those sought for the voice application , would be useful to everyone .
“we need to send a message [ about ] standards , interoperability and plug and play ,
she said .
voice calls are encrypted twice in accordance with nsa policy , using ipsec and srtp , meaning a failure requires “two independent bad things to happen , ” salter said .
got a news tip for our journalists ? share it with us anonymously here .
you must be a registered member of itnews to post a comment . log in | register
all rights reserved . this material may not be published , broadcast , rewritten or redistributed in any form without prior authorisation . your use of this website constitutes acceptance of nextmedia ' s privacy policy and terms & conditions .
note : the iad . gov website uses tls 1 . 2 , supported by a department of defense ( dod ) pki certificate , to ensure confidentiality and integrity for all users . iad . gov website users will need to have the current dod root and intermediate certificate authorities ( ca ) loaded into their browsers to avoid receiving untrusted website notifications .
install dod root and cas please visit the information assurance support environment ( iase ) site to download the dod root ca certificates . select the trust store tab and choose the latest installroot : nipr windows installer .
the security platform will also be applied to tablets , another nsa official told the technology review . so far , 100 of the devices have been developed and distributed to government officials .
what ' s more , the nsa is hoping that carriers and mobile manufacturers will adopt some of the same concepts for their own products . that is , run all data from its voip app through its own servers , which i ' m sure consumers would have absolutely no qualms with . there ' s no word on how well this device protects its sensitive contents from being left it in a bar . [ sc magazine via technology review ]
kinja is in read - only mode . we are working to restore service .
to make a call , users dial out using the voip app , which then sends encrypted data over any given carrier ' s data network . however , instead of routing directly to another device , the data goes through the nsa ' s servers to be verified , logged , and re - encrypted , before being sent back out to the data network and on to its destination . just like its android phones , the nsa is building this infrastructure with existing enterprise - level equipment .
by signing up , you agree to our privacy policy and european users agree to the data transfer policy .
this article has a component height of 4 . the sidebar size is short .
pcmag reviews products independently , but we may earn affiliate commissions from buying links on this page . terms of use .
for the top stories in tech , follow us on twitter at @ pcmag .
this newsletter may contain advertising , deals , or affiliate links . subscribing to a newsletter indicates your consent to our terms of use and privacy policy . you may unsubscribe from the newsletters at any time .
© 1996 - 2018 ziff davis , llc . pcmag digital group pc , pc magazine and pc urltoken are among the federally registered trademarks of ziff davis , llc and may not be used by third parties without explicit permission .
html public
- / / w3c / / dtd xhtml 1 . 0 transitional / / en
urltoken
the only term being thrown around government more than “2016 elections” these days is “cybersecurity , ” particularly following a rash of damaging and high - profile data breaches . with that focus on protecting information top of mind in agencies , usmobile officials hope to find a ready market for their commercial app , which lets government workers use their personal smartphones for top - secret communications .
when the turnkey solution comes to market in october , it will work with android and apple ios devices . it uses the security - enhanced linux operating system and a defense - in - depth approachthe layered approach uses a vpn connection with an encrypted voip call travelling within . when an agency deploys scrambl3 enterprise , administrators will set up what usmobile calls black books , or lists of contacts that each user can communicate with via the vpn .
“a lower - level person wouldn’t necessarily have the director of that particular agency listed , ” hanour said . “conversely , the director of that particular agency would have [ a ] contact list populated with people that are at the higher levels of management . ”
when a user logs into the app on a smartphone , it creates a vpn that connects to the agency’s server , whether it’s in the cloud or on premises . currently , scrambl3 enterprise software is deployed only on ibm power systems linux servers .
a two - rack server can handle up to 3 , 000 concurrent calls , hanour said , a capacity “that would handle comfortably an agency of 50 , 000 people . ”
once connected , users can see who in their black book is also logged in , as indicated by a green dot next to the name , and then select the mode of communication : email , voice call or text . both senders and recipients would need to have scrambl3 installed .
“once you establish this powerful vpn , you can run anything through it , ” hanour said . “anything that you can put on a server , you can use scrambl3 to communicate with . ”
calls are highly encrypted until they reach the recipient , where the app decrypts them . that communication happens at a top - secret - grade level as specified by nsa . despite that encryption / decryption process , hanour said , latency is unnoticeable .
for additional protection , nothing is recorded – users can’t even leave voicemail – unless an agency specifies otherwise . for instance , hanour said , some law enforcement regulations require that all communication among officers be recorded .
to use scrambl3 , agencies don’t need mobile device management systems , but it integrates with any that might exist .
licensing fees for scrambl3 depend on the number of users , but typically start at $ 5 per user per month . the most it would cost , hanour said , is about $ 10 per user per month .
right now , scrambl3 for android is available in beta form in the google play store for testing . scramble3 for ios will be available next month .
the beta version does not include all scrambl3’s features , such as conference calling . when the release version is up and running in october , scrambl3 will offer the only top - secret - grade conference call capability outside dod’s network , hanour said . users will be able to initiate a conference call by touching a few people’s names and pressing the call button .
besides law enforcement , hanour sees potential customers in several types of government operations , including health care , the state department when conducting diplomatic relations and even individual politicians , who might want to communicate in absolute privacy .
“the whole idea is to create trusted communications over untrusted networks ( i . e . , the internet ) , ” hanour said .
guys weak up . do you really think nsa would creat an app that they can ' t control ? ? ? pleaseee stop to dream .
so i use ironsocket vpn and hooray ! it has been a success to be able to have ironsocket that gives 100 % protection from hackers or whoever . ! we can ' t avoid unwanted networks that ' s why we have to be more careful . i connect to any wifi zones anywhere i go and i feel safe on anything i scan , download , etc . in my mobile .
ban on encryption is impossible . this is understatement made by people that doesn ' t even have a clue that whole internet is practically encrypted . though i doubt that you can expect a complete privacy and security from free applications . only companies like urltoken and urltoken provide complete privacy and security on mobile communications .
please post your comments here . comments are moderated , so they may not appear immediately after submitting . we will not post comments that we consider abusive or off - topic .
8251 greensboro drive , suite 510 mclean , va 22102 703 - 876 - 5100 © 1996 - 2017 1105 media , inc . all rights reserved .
samsung has taken the ‘make in india’ initiative to another level by launching ‘ . . .
copyright © 2018 bennett , coleman & co . ltd . all rights reserved . for reprint rights : times syndication service
still , as salter told the rsa attendees , for the better part of half a century , the nsa explicitly defined its own market , a private universe of products made for its own exclusive consumption . “that was cool for us , for the longest time . we kinda had a monopoly on this from the very beginning , ” she remarked . “we were mostly building things like radios for combat , [ and ] big link encryptors to hook one site up to another site . ”
“so one of the things i harp on most is , why was that so hard ? ” remarked salter .
what appeared at first to be the protocol of choice for digital voice was srtp . “turns out , getting the key management scheme nailed down for that was hard , ” she said . finally , iad was able to work out a way to do this using transport layer security – which it also discovered was preferable to ssl for every other conceivable purpose as well .
none of these standards are unfamiliar to the security community . six years ago , said salter , nsa announced suite b as good enough for classified level . “then there was a big asterisk next to that , ” she added , “that said , ‘by the way , your key management has to be reasonable , and nsa has to look at it to make sure it’s all good . ’ we were trying to give the industry a lead time , to say eventually , if you’ve got these algorithms in your products , we’ll be able to use them in solutions… to protect classified information . ”
but none of the session descriptors protocols in use supported the upgraded tls 1 . 2 – the substitute for the deficient ssl – and few of these protocols enabled client authentication . this was necessary in order to avoid an engineering technique called split tunneling , which salter described as a kind of intentional leak that might be acceptable for some businesses but not for national security .
“one of the things we should be demanding , ” she stated at another point , “is that voice apps that do these protocols interoperate with one another . why in heaven’s name don’t they ? ”
later , a questioner from the audience offered an answer : he noted that , despite the rapidly accelerating changes in mobile technology , the customer does not appear to be in charge of what those changes are , who’s in control of them , or where they are leading . perhaps any large group of companies , whether in private industry or the government , should be capable of laying down the law when it comes to the foundations and standards they’ll accept for phones purchased in mass quantities .
“i think for us , our mechanism is going to be to publish everything as widely as humanly possible , ” replied the employee of a government secrets agency , “and hope to heck that this makes sense to people… we’ll say , ‘this is our architecture that we’re doing for mobility , ’ and other corporations will say , ‘hey , somebody did all this work for us ! ’ and hopefully just take it , show it to their vendor , and say , ‘i want one of these . ’ that’s our hope . ”
scrambl3 is built on a new generation of technology that provides a quantum leap in mobile privacy and security for businesses , government and individuals .
when scrambl3 users communicate with each other , scrambl3 creates a
dark internet tunnel
between their smartphones . this tunnel cloaks the calls and texts by making them invisible on the internet .
business executives . scrambl3 protects publicly - traded company insider information ; substantially reduces the risk of theft of trade secrets and intellectual property , of particular concern in overseas markets ; safeguards customer and personnel information , and communications related to litigation and contract negotiations matters ; and demonstrates management and governance ' best practices ' approaches to protecting company information .
government officials . scrambl3 protects global leaders , government employees , law enforcement personnel , and elected officials at a top secret and below top secret level for classified and sensitive official as well as personal communications .
effective today , the scrambl3 app for android - based phones is available for a 60 - day free beta offering from the google play store . following the beta test period , usmobile will offer individual scrambl3 subscriptions for approximately
– charlotte , dr . zheng conducted an independent analysis of scrambl3 . ( see his complete analysis at
the white house has said publicly that it is reviewing use of android - based smartphones that incorporate the same top secret standards and technology that scrambl3 employs in its private mobile platform .
scrambl3 users can make calls on their private mobile network using both cellular 3g / 4g data plans and wi - fi .
in our brave new world , where the details of our lives and businesses are becoming increasingly public through social media , sophisticated marketing techniques and government surveillance , we are seeing a trend toward protecting our privacy ,
hanour said .
we believe privacy is the future , and while people are connecting in positive ways through social networks , we are also seeking privacy solutions to keep our mobile calls and texts confidential .
computing platforms . with scrambl3 enterprise , businesses and governments can create their own top secret grade mobile communications network and mobile intranet that runs exclusively on their private servers . this disruptive technology will start at just
per month for up to 50 users . usmobile and ibm will jointly market scrambl3 enterprise solutions to businesses and governments around the world beginning in 2015 q3 .
- based company founded by a team of engineers with the mission to provide a private mobile network with the highest level of mobile communications privacy and security for its customers .
copyright © 2018 pr newswire association llc . all rights reserved . a cision company .
with all the media attention about government spying , nsa data collection and intercepts , fisa courts , snowden , etc . . . people are finally waking up and realizing that they need to take steps to actively protect themselves on the internet . as society becomes more and more connected , the possibility of data theft and corruption grows even more . be honest though . are you really surprised ?
now with that out of the way , what technologies are out there that can help safeguard us safe from the government , crooks , and nosy neighbors ? the obvious answer is encryption , and layered security . how can we apply this to telecommunications that will work for us on the go and at home ? the nsa actually was kind enough to provide us with the specifications needed to build our own clone of an infrastructure that is trusted to protect up to top secret classified material and communications .
. in order to spare you the details of 116 pages of agency and technical speak , here are the basic components of mcp .
the web browser on the user equipment is configured to prohibit the storing or caching of any data in non - volatile memory .
for the time being , we ' re going to disregard the requirements for web , email etc . we ' re solely focused on the svoip and vpn setup . i know that the requirements now state the use of an ipsec vpn , but the original requirements they planned on using an ssl based vpn . due to inter - operability issues with proprietary ssl vpns , the nsa elected to go with ipsec . for ease of setup and use , we ' re going to use
whether you choose to run openvpn and asterisk from your desktop , on a raspberry pi , in a virtual instance , on a vps , or a dedicated solution , go ahead and prep your environment . for consistency sake , i ' m going to show the commands to do the setup on a
we already discussed that pki is a requirement for our little project , because we ' re not going to use a static configuration due to security concerns . this allows each client to have his / her own public / private key pair . the first step is to setup our own local certificate authority ( ca ) . fortunately , openvpn comes with a tool suite designed to keep pki management simple . it ' s called
easy - rsa .
now , depending upon your distribution and packaging system , it may be installed in various directories . for debian , it ' s / usr / doc / openvpn / examples / easy - rsa / 2 . 0 . go ahead and copy that directory into your vpn user ' s home directory .
# cp - r / usr / doc / openvpn / examples / easy - rsa / 2 . 0 ~ / easy - rsa # cd ~ / easy - rsa
as you can see , you can define key length and other variables associated with the keys that will be generated while using the easy - rsa suite . go ahead and make any changes that you feel necessary for this step . you will be asked again if you want to change any of the variables listed at the bottom during the key building process .
now we ' re going to build the actual ca certificates with the following commands .
follow the prompts and change anything that you may have forgotten about in the vars file .
again , follow the prompts for each command in order to generate the required key pairs .
. if you ' d like to change any of the variables , please do so at this time . you can change listening address , lan ip space , key locations and so on . save the server . conf file to / etc / openvpn / server . conf . now we need to pull in the keys we previously created using easy - rsa .
as previously discussed , transferring private key requires a great deal of thought and security . you should have a chosen method for key distribution ( one that involves physical mediums and not transmitting the keys over plaintext protocols ) , and sent the clients the following files .
. you will need to change the server ip address in order to match it back to your own openvpn server .
you now have a fully functional vpn configuration . generate as many client keys as needed , and send them the appropriate configuration files . now , its time to move on to asterisk .
asterisk is a full featured , open source pbx solution that includes all of the supported features that we require for this exercise . first of all , we ' re going to go ahead and install asterisk onto our respective servers . again , you can host this on the same box as the vpn or on any number of platform choices . if you ' re going to run it on another computer , you ' ll need to generate vpn keys so that it can connect through the vpn . use the previous steps to set this up . i am again giving the commands for installing this on a debian based system . for my configuration , i ' ll be placing the asterisk box on the same server as openvpn . keep this in mind , and change your ips / network segments accordingly .
# mkdir / etc / asterisk / keys # . / ast _ tls _ cert - c 192 . 168 . 77 . 1 - o
fish bowl communications
- d / etc / asterisk / keys
this created quite a few files under / etc / asterisk / keys . the ca . crt is important , because it will be required in order to distribute to the clients . we also still need to create additional keys for the clients in order for them to be able to communicate with asterisk . go ahead and create two certificates for client1 and client2 respectively .
# . / ast _ tls _ cert - m client - c / etc / asterisk / keys / ca . crt - k / etc / asterisk / keys / ca . key - c client1 - o
fish bowl communications
- d / etc / asterisk / keys - o client1 # . / ast _ tls _ cert - m client - c / etc / asterisk / keys / ca . crt - k / etc / asterisk / keys / ca . key - c client2 - o
fish bowl communications
- d / etc / asterisk / keys - o client2


kennet partners is a private equity investment firm that provides growth capital to information technology , internet and business services companies in europe and the us .

kennet partners is headquartered in london , england , and has an office in foster city , california .

the firm raised its third fund in 2008 with € 201 million , bringing total capital under management to over $ 600 million .

kennet partners

kennet partners and co - investor joe wang have . . . . . .
prolexic technologies closes $ 13 . 9 million in growth funding , led by kennet partners
fairview capital partners is kennet ' s # 3 rival . fairview capital partners was founded in 1994 in west hartford , connecticut . fairview capital partners is in the diversified financial services industry . fairview capital partners generates $ 15 . 1m more revenue than kennet .
glassdoor gives you an inside look at what it ' s like to work at kennet partners , including salaries , reviews , office photos , and more . this is the kennet partners company profile . all content is posted anonymously by employees working at kennet partners .
kennet partners announces us $ 16 million investment in urltoken ( now conversica ) and names mark a . bradley as ceo
kennet ' s managing director , hillel zidel , currently has an approval rating of 68 % . kennet ' s primary competitors are
jennifer gunn joined sunstone partners as cfo in 2018 . jennifer manages sunstone partners’ finance function and back - office processes .
kennet focuses on making private equity investments in digital media , e - commerce , semiconductor , consumer internet and software businesses . kennet ' s headquarters is located in london , england . for every employee , kennet generates $ 203 . 1k in revenue . kennet has 29 companies in its portfolio , including crossborder . kennet has 18 followers on owler .
owler has collected 14 screenshots of kennet ' s website since may 2014 . the latest kennet website design screenshot was captured in sep 2017 .
kennet focuses on making private equity investments in digital media , e - commerce , semiconductor , consumer internet and software businesses . kennet was founded in 1997 . kennet ' s headquarters is located in london , england , gb w1f 8fl . kennet ' s latest ac . . .
sunstone partners was founded in 2015 and is headquartered in san mateo , ca . it was previously known as tc growth partners .
bromsgrove - based rimilia has raised $ 25m ( £19 . 1m ) in a round co - led by kennet partners and eight road . . .
, director at kennet , will join the board of directors of next performance .
fgpe is the biggest rival of kennet . fgpe was founded in 1969 , and its headquarters is in hildenborough , england . fgpe has 131 more employees than kennet .
the big ( e - commerce ) investor of the hour is currently kennet partners . the growth stage financiers seem dead set on quickly dispensing up to $ 300 million .
kennet is a leading international growth equity firm that invests in companies in north america and europe . kennet supports entrepreneurial technology businesses with expansion capital to accelerate growth and build exceptional shareholder value . kennet is an experienced investor with approximately $ 600 million in funds under management . urltoken
kennet ' s michael elias began to develop a relationship with jose franca and , in mid - 2004 , began discussing an investment from kennet to finance continued expansion of the business .
kennet invests in growth companies providing information technology products and business services that leverage information technology .
these are all the companies that kennet has acquired . kennet ' s latest acquisition was treehouse interactive , inc . in mar 2015 . treehouse provides marketing automation and partner relationship management solutions .
these are all the companies that kennet has invested in . kennet ' s latest investment was treehouse interactive , inc . in mar 2015 . treehouse provides marketing automation and partner relationship management solutions .
michael biggee is a managing director and co - founder of sunstone partners . prior to founding sunstone partners , mike was a managing director of trident capital , which he joined in 2005 .
arneek multani is a managing director and co - founder of sunstone partners . prior to founding sunstone partners , arneek was a managing director of trident capital , which he joined in 2002 .
the firm is currently investing out of sunstone partners i , lp , a fund with $ 310 million of committed capital . sunstone partners invests in both sizable minority positions and control transactions .
the top 10 competitors in kennet ' s competitive set are fgpe , bvca , fairview capital partners , insight , talis capital , thewma , accel partners , chatham capital group , bessemer trust and balderton capital . together they have raised over 6 . 9b between their estimated 7 . 8k employees .
kennet will support next performance , a high growth provider of online performance marketing services , with its continued expansion .
john moragne is a managing director and co - founder of sunstone partners . prior to sunstone partners , john co - founded trident capital in 1993 . he invests in internet , healthcare it and enterprise software .
bvca has been one of kennet ' s top competitors . bvca is a private company that was founded in , in null . bvca competes in the investment banking & brokerage industry . bvca has nan less employees vs . kennet .
of worldone said “having an investor like kennet make a $ 25m commitment is a strong vote of confidence in what we have achieved and where worldone is headed . kennet was an easy choice given its exceptional management team and history of success . worldone will benefit on multiple levels from kennet’s investment and involvement . we look forward to the future . ”
tara rajani is an associate at acon investments . prior to joining acon in 2018 , ms . rajani was an associate in the client services and syndications group at alliance partners . before alliance partners , . . .
kennet supports worldone , a high - growth provider of data collection services to the healthcare industry , in its global expansion .
kennet is an experienced growth equity team with a track record of building global market leaders and achieving high - value exits .
kennet has employees and is the third highest among it ' s top 10 competitors . the top 10 competitors average 138 .
kennet ' s javier rojas on how kent plunkett & urltoken delivered an almost 22x ratio of exit value to capital used . urltoken
london , 8 september 2011 kennet partners , the technology growth equity investor , has announced a $ 25 million investment in worldone , a market leader in global healthcare data collection . the financing will be used to accelerate worldone’s global expansion and to fund continued development of new business lines . michael elias , managing director at kennet , will join the board of directors of worldone .
vienna , austria - january 23 2017 tricentis , raises $ 165 million from insight venture partners to del . . .
crossborder solutions , a provider of corporate tax software and services , has raised $ 6 million in series a funding . kennet partners led the round . december 12 , 2017 – menlo park , ca ; tarrytown , ny : crossborder solutions , a leading worldwide provider of corporate tax software and services , announces it has secured $ 6m series a funding led by kennet [ … ]
kennet is a leading international private equity firm that invests in growth companies in north america and europe . kennet invests in technology and technology - enabled business services , offering expansion capital to businesses that want to accelerate growth and build exceptional shareholder value in partnership with an experienced investor .
urltoken kennet ' s javier rojas on covey : the book to read on developing a game plan for accomplishing what you want in life .
kennet ' s revenue is the second highest among it ' s top 10 competitors . the top 10 competitors average $ 6 . 6m .
leipzig ( germany ) and boston , ma ( usa ) , february 23rd , 2009 — spreadshirt , the world’s creative apparel platform , today announced an investment of €10 million by kennet partners , a leading private equity firm , and existing investor accel partners . spreadshirt is a leading company for online mass customization , where goods can be easily personalized by consumers to make them more relevant and valuable , with a minimum order of one . spreadshirt extends this capability to partners , large and small , who want to offer personalized shirts and other apparel to their communities and customers . partners range from individuals with a blog , to the world’s largest brands .
howard zeprun manages sunstone partners ' operations as well as the processes of portfolio company investment and liquidity . howard brings to sunstone partners and its portfolio companies a deep well of transactional experience and legal knowledge together with business perspective , creative thinking and a solutions orientation .
receipt bank , the leading bookkeeping automation software company , announces today that it has raised usd $ 10m in growth capital from kennet partners , a leading international growth equity firm that invests in successful highgrowth companies in europe and north america , supporting entrepreneurial technology businesses with expansion capital .
kennet partners wants to add a little green to the garden . with about $ 300 million under management , the investment firm provides capital to small and mid - sized information technology businesses seeking to expand it product lines , acquire assets , or fund growth . among its . . .
kennet is a different kind of investor . we help successful , entrepreneurial technology businesses in north america and europe take the next big jump in growth .
san francisco , ca - ( may 1 , 2013 ) kennet partners , a leading international growth equity firm that invests in companies across north america and europe , today announced it has made a $ 16 million investment in urltoken llc , the fast - growing internet technology company behind ava , the artificial intelligence lead management platform . as part of the investment , kennet has appointed internet industry veteran mark a . bradley as ceo of urltoken .
s web services to support employees , customers and partners over the internet . the company was acquired by allen systems group in march 2012 .
since 1997 kennet has invested in more than 40 companies in europe and north america . our portfolio spans the software , services , internet and semiconductor industries :
kennet’s gustavo alberelli added , “as organizations of all sizes increasingly adopt cloud computing solutions , ddos and cyber attacks have soared in both frequency and sophistication . prolexic has quickly emerged as the leader in cloud security and demand for its differentiated products has intensified . kennet looks forward to building prolexic into an industry leader . ”
) was a leading provider of managed security services to fortune 500 companies . kennet led the acquisition of ubizen from the euronext market in a take - private transaction with
franklin shieh is an investment associate at sunstone partners . prior to joining sunstone partners , franklin was an investment banking analyst at barclays in the global technology group . during his time at barclays , franklin focused on m & a and capital raising for software , internet & digital media , and electronics companies .
kayla lane is an executive assistant at sunstone partners . she supports the vice presidents and associates personnel . kayla served as an administrative assistant for 7 years .
we are a leading growth equity firm built on the premise that investors should do more than just provide capital . that ' s why we founded sunstone partners .
charlie culp is an investment associate at sunstone partners . prior to joining sunstone partners , charlie was an investment banking analyst at bmo capital markets in the technology and business services group . during his time at bmo , charlie focused on m & a and capital raising for software , internet & digital media , and hardware companies .
jeff was a member of the board of directors of trident portfolio company fruition partners , which was sold to csc in 2015 . he is a member of the board of directors of trident portfolio company fruition partners . he is also a member of the board of directors of telligent , inc . and on the executive board of the dallas symphony orchestra .
“ddos attacks have become costly forms of cyber - crime , and they are increasingly being proactively addressed by businesses to avoid the devastating costs of ddos - related downtime , ” said kennet’s javier rojas .
resilience provides linux - based , high - availability appliances that run best of best - of - breed security applications . resilience partners with leading vendors including check point software and websense .
tara rajani is an associate at acon investments . prior to joining acon in 2018 , ms . rajani was an associate in the client services and syndications group at alliance partners . before alliance partners , ms . rajani was an associate in the financial analysis and consulting team at american capital . ms . rajani began her career with pricewaterhousecoopers in their core assurance practice .
sunstone partners is a spinout from trident capital , a multi - stage investment firm with seven funds and $ 1 . 9 billion of capital under management since 1993 . sunstone partners will share the back office resources of trident capital , including trident capital’s finance and administration team ( including howard zeprun and michael derrick ) and trident capital’s third - party fund administrator , standish management .
accel partner harry nelis underlines the fit with kennet , pointing out its experience with businesses that want to accelerate growth : “since 2006 , accel has supported spreadshirt’s development as it has become the market leader for creative apparel in europe , and established itself in north america . with kennet joining the shareholder group , we have additional expertise to take spreadshirt across the chasm into the mainstream on both sides of the atlantic . ”
immediately prior to founding trident capital , john was an investor at bain capital and its related fund , information partners capital fund , at which he invested primarily in technology buyouts and growth investments .
“kennet partners is a dynamic and fastpaced environment . after analyzing many leading edge companies for possible investment , urltoken and the team that ben has built are clearly years ahead of the competition , ” stated bradley . “ urltoken has the right components for significant expansion and market leadership – by leveraging its cutting - edge ava artificial intelligence technology . i look forward to guiding the company to achieve its potential . ”
hillel zidel , director at kennet , said “the demand for dynamic retargeting has grown significantly as a result of the high level of performance it provides and next performance is uniquely positioned as one of the leaders in the category . ”
of next performance said “after a thorough selection process , we felt that kennet would be the ideal investor in next performance because of their experience of working with companies as they expand internationally and their successful track record in the online advertising sector . next performance is already operating its retargeting business in 10 countries , and we will use the capital to significantly expand our international presence . ” he added “we are pleased to welcome kennet on board as a strategic partner . ”
yolanda brown is the accounting specialist at acon investments . prior to joining acon in 2008 , ms . brown served for five years as accounting specialist at thayer capital partners . previously , ms . brown . . .
rasheed haynes is an investment associate at sunstone partners . prior to joining sunstone partners , rasheed was an investment banking analyst at morgan stanley in the healthcare group . during his time at morgan stanley , rasheed focused on mergers and acquisitions and capital raising for companies across the healthcare sector . rasheed graduated cum laude with a b . s . degree in applied economics and management from cornell university . rasheed was raised in landover , maryland .
# # # european media enquiries : spreadshirt - pr - manager , eike sievert , + 49 341 594 00 5382 , eike . sievert @ urltoken kennet - su johnston , + 44 ( 0 ) 20 7839 8020 , sjohnston @ urltoken
john morgan barr is a director at acon investments . prior to joining acon in 2009 , mr . barr worked at private equity firm fox meadow capital partners , where he focused on sourcing and executing investments . . .
“kennet reviewed many bootstrapped , founder - led companies over the past year and were very impressed with what ava’s founder , ben brigham , and his team have accomplished , ” said eric filipek , managing director of kennet , silicon valley . “our significant investment demonstrates our confidence in how machine learning is changing lead management . further , the addition of mark a . bradley , a seasoned executive with whom we’ve had a long association , as ceo adds significant strength and depth to this management team . ”
spreadshirt mixes an online ‘web 2 . 0’ platform with the offline worlds of fashion , mass customization , and real - time manufacturing . spreadshirt customers can quickly create one - of - a - kind , high - quality , expressive apparel . spreadshirt extends this capability to partners , large and small , who want to offer personalized shirts and other apparel to their communities and customers . partners range from individuals with a blog , to the world’s largest brands .
32 . the new players © service des relations industrielles ( sri ) © epfl 1983 1983 in 1979 , adler & company of new york established an bill davidow , svp office in silicon valley . in sales & marketing at 1983 , two adler partners , intel launches mdv james swartz and arthur patterson , spun - off to create the bi - coastal firm , accel partners , having offices in new york and silicon valley . 1984 gregory avis roe stamps stephen woodsum
portugal - based company chipidea had a range of power management semiconductor intellectual property ( ip ) , which it licensed to chipmakers . although power management represented only a small part of chipidea ' s business , kennet became interested in the company for several reasons :
ankur rathi is a vice president at sunstone partners . prior to joining sunstone partners , ankur was an associate at riverside partners , a technology and healthcare focused private equity firm in boston . before riverside , ankur was an associate at allstate investments , focused on global investing as a limited partner in private equity firms . ankur began his career as an investment banking analyst at bmo capital markets in the mergers & acquisitions group . raised outside of chicago , ankur earned b . s . degrees with high honors in accountancy and in finance from the university of illinois at urbana - champaign . he also received his m . b . a . with honors from the wharton school at the university of pennsylvania .
henry tamada is an analyst at acon investments . mr . tamada originally started working with acon in 2016 as an intern . prior to joining acon , he worked at mts health partners , an m & a advisory boutique . . .
gustavo alberelli is a managing director and co - founder of sunstone partners . he currently serves as a board director of netspi , outmatch , and userzoom and formerly served as a board director of prolexic technologies ( acquired by akamai technologies ) .
howard has been with sunstone partners since inception , and with trident capital since 2002 . prior to joining trident , howard was a partner at wilson sonsini goodrich & rosati . he also spent several years as chief corporate counsel at apple computer .
previously , gus was a managing director at trident capital and director at kennet partners where he led growth equity investments across the technology sector , typically as the first institutional investor . in 2003 , gus started his investment career at trinity ventures where he primarily worked with early stage technology companies . prior to becoming an investor , gus held several business development and marketing positions at saltare , a venture - backed enterprise software company . he began his career as an analyst in the technology investment banking division of robertson stephens .
henry tamada is an analyst at acon investments . mr . tamada originally started working with acon in 2016 as an intern . prior to joining acon , he worked at mts health partners , an m & a advisory boutique dedicated solely to the healthcare industry .
corp . ( pse : ip ) , said , “since prolexic offers customers the best cyber defense available against ddos attacks , we have seen demand for our product offerings increase exponentially . kennet’s expertise in helping technology companies expand throughout the united states & europe will be a great complement to
in 2002 , kennet initiated a project to identify european technology companies focusing on the problem of power management . we believed that the increasing adoption of more powerful wireless devices would create high demand for power - efficient technologies at multiple levels - including batteries , semiconductor chips , and displays .
john reardon heads sunstone partners ' portfolio operations team . john has more than 30 years of experience in the healthcare industry and technology sector . he has been a successful entrepreneur , software company ceo , hospital system executive , private equity firm operating partner and investor .
spreadshirt was founded in 2002 in leipzig without any outside capital and now employs more than 300 people in europe and the united states . spreadshirt has millions of individual consumers as customers , and over a half million shop partners worldwide . meet spreadshirt and its people at the
sunstone partners is an investment fund focused on growth equity investments and majority buyouts in technology businesses in north america . the team previously worked together at trident capital , a multi - stage investment firm with seven funds and $ 1 . 9 billion under management since 1993 .
“as a post - bubble entrepreneur , it is great to see our idea come to this stage of growth financing , ” said lukasz gadowski , chairman of spreadshirt . “i am looking forward to working with the spreadshirt team , accel and kennet to take personalization and self expression to new heights . ”
“we’ve been extremely impressed with the rapid growth of next performance , a great example of a founder - led , bootstrapped business . our investment in next performance is the result of our continued focus on the online advertising segment both in europe and the us” , said michael elias , managing director at kennet .
gabriel shaukat is a vice president at sunstone partners . prior to joining sunstone partners , gabe was an associate at primus capital , a healthcare and technology focused private equity firm in cleveland . before primus , gabe worked as an investment banking analyst at suntrust robinson humphrey in the consumer and retail group . raised in columbus , georgia , gabe earned a b . b . a . degree in finance with highest honors from the university of georgia . he also received his m . b . a . with honors from the university of chicago booth school of business .
john morgan barr is a director at acon investments . prior to joining acon in 2009 , mr . barr worked at private equity firm fox meadow capital partners , where he focused on sourcing and executing investments in media , healthcare , basic industries and the u . s . hispanic marketplace . prior to that , mr . barr worked at empyrean capital partners , an event - driven and special situation hedge fund . mr . barr has held principal investing positions with goldman sachs and private equity firm clarity partners . mr . barr has also held advisory positions with j . p . morgan securities in equity research and investment banking . mr . barr serves on the board of directors of several acon fund / investment vehicle portfolio companies , including acon franchise holdings , biomatrix holdings and iwpharmacy . previously , mr . barr served on the board of idx , a former acon portfolio company .
23 . sequoia © service des relations industrielles ( sri ) © epfl 30 years of activity joining valentine , the firm will grow with famous to - become partners . pierre lamond ( national ) - 1981 mike moritz ( time magazine ) – 1986 doug leone ( hp , sun ) – 1988
yolanda brown is the accounting specialist at acon investments . prior to joining acon in 2008 , ms . brown served for five years as accounting specialist at thayer capital partners . previously , ms . brown also worked at choice hotels international for 12 years in the role of supervisor and billing specialist .
as with most kennet investments , a portion of the funding was invested in the company , while the remainder was used to purchase existing shares from the company ' s founders . this rewarded the founders for value created in the business to date , and enabled them to feel comfortable with the risks of pushing for further growth .
ale amesquita is focused on business development at sunstone partners . prior to joining sunstone partners , ale was on the business development team at prosperworks , a cloud based , cross - platform crm that plugs into g suite . throughout her time at prosperworks , ale focused on generating new business and strategically growing existing accounts in the smb space . before prosperworks , ale worked at nbcuniversal where she helped manage agency and brand relationships in the broadcast vertical . ale graduated with a b . a . in journalism and a b . a . in public relations from depaul university . ale was born in lima , peru and spent her early childhood in caracas , venezuela until finally moving to cincinnati , ohio .
25 . the reid dennis legacy © service des relations industrielles ( sri ) © epfl 1976 then dennis launches institutional venture partners ( ivp ) in 1976 . the same year , mcmurtry and marquardt found technology venture investors ( tvi ) with james bochnowski ( shugart assoc . ) later join pete thomas ( intel ) , james katzman ( tandem ) robert kagle ( bcg )
santiago delgado is an operating principal who works directly with certain portfolio companies of funds sponsored by acon investments providing advice on a range of operational issues . mr . delgado began working with acon in 2018 . prior to commencing to consult for acon and with acon portfolio companies , he was a vice president at thomas h . lee partners where he was responsible for developing and implementing operational improvement , cost reduction and revenue enhancement programs for portfolio companies . prior to thomas h . lee partners , mr . delgado was a consultant at bain & company with a focus on increasing value of companies in the technology , industrial and retail industries . mr . delgado started his career at national instruments , with roles in engineering , product management and corporate development .
30 . the new players © service des relations industrielles ( sri ) © epfl 1976 1978 foundersdubose montgomery was a dick kramlich ( arthurfounder of menlo ventures in rock & associates ) 1976 . carlisle joined in 1982 frank bonsal ( alexand jarve in 1985 brown ) chuck newall ( t . rowe price ) ed glassmeyer co - founded in 1978 with stewart greenfield of oak investment partners .
impartner provides a saas - based partner relationship management tool that simplifies all aspects of managing indirect channels . the product is a full - featured saas - based enterprise application for partner / community management . it allows an enterprise to enable branded portals for all of its channel partners . these branded portals provide the conduit for a customer to arm its channel with content , leads and other services .
“automation enables the best accounting firms to reduce their costs , save time and increase the speed and quality of their service . we are incredibly proud to be working with so many great firms who are redefining small business accounting and delighted to be partnering with such an experienced growth investor as kennet . with this investment we will be able to further improve our industry leading technology and to help even more firms enhance their bookkeeping processes . ”
is an exclusive , invitation - only online destination where invited members discover premier brands in time limited campaigns . it is the leading european private buyers’ club with more than 400 brand relationships across the region and an online community of more than 3 . 5 million members . it has operations in spain , germany and italy , and offers a unique and efficient direct marketing channel to its brand partners .
founded in 1983 , accel partners has a long history of excellence and innovation in the venture capital business and is dedicated to partnering with outstanding entrepreneurs and management teams to build world - class companies . accel today invests globally using dedicated teams and market - specific strategies for local geographies , with offices in palo alto , california ; london , uk ; and bangalore , india ; as well as in china via the
following kennet ' s investment , chipidea expanded its business considerably , building the world ' s largest group of analog and mixed signal engineers in a private company . in february 2007 , chipidea acquired the assets of nordic semiconductor ' s data converter ip business unit , adding a significant catalog of ip to its analog and mixed - signal portfolio . by june 2007 , chipidea had 312 employees and had operations in portugal , belgium , france , poland , china , and macau .
jennifer has over 19 years of experience in corporate and fund accounting and administration in the asset management industry . prior to sunstone partners , jennifer was controller of matthews international capital management , a u . s . investment firm focused on multiple investing strategies in asia . before that , jen spent the first 12 years of her career in public accounting with pricewaterhousecoopers , llp where she was most recently a senior manager and leader in the alternative asset management practice .
mike currently serves as a board director of netspi and host analytics , and is a board observer at alienvault and hytrust . mike is a former board director or observer of arxan technologies ( acquired by ta associates ) , bluecat ( acquired by madison dearborn ) , fruition partners ( acquired by csc ) , prolexic ( acquired by akamai ) , solera networks ( acquired by blue coat ) , tablus ( acquired by emc ) and voltage security ( acquired by hp ) .
prior to joining trident capital in 2008 , john was the ceo of clinicomp intl . , a hospital emr company . earlier in his career , john’s wide ranging industry roles included regional vp of strategic planning and corporate development for st . joseph health system and co - founder of two other healthcare it companies . john has also been an operating partner at jp morgan partners , where he helped turn around eight troubled portfolio company investments while serving as president , ceo or board member .
37 . august , foundation © service des relations industrielles ( sri ) © epfllightspeed , redpoint jim anderson ( the a in mpae ) , kathryn gould marquardt ( tvi ) & john ( oracle ) , johnston ( tvi , h & q ) bill elmore ( inman ) launch august in 1995 . launch foundation in 1995 . redpoint was founded in 1999 by top the vc arm of weiss , peck & greerpartners each from brentwood venture venture partners ( 1971 ) spun - off incapital and ivp october 2000
paulette brown is a controller at acon investments . prior to joining acon in 2008 , ms . brown’s private equity experience included serving for four years as the controller at perseus and as the accounting manager at thayer capital partners for five years , each washington , dc - based private equity firms . ms . brown has also worked as a senior accountant in the corporate brokerage division of insignia / esg , a commercial real estate firm , and at manor care and its former subsidiary , choice hotels international , where she was a senior accountant and manager of the franchise billing department .
31 . the new players © service des relations industrielles ( sri ) © epfl 1981 1981 bill bowes is the founder and prior to founding usvp , bill was the founding shareholder ( and its first employee ) of sevin rosen was founded in 1981 by amgen l . j . sevin ( mostek ) and ben rosen ( ti ) 1982 paul ferri , a venture capitalist for more than 30 years , was the founding partner of matrix partners in 1982 . prior to matrix , he founded hellman ferri investment associates ( 1977 to 1982 ) and was a general partner of westven management ( 1970 to 1978 ) .
60 . and a few people © service des relations industrielles ( sri ) © epfl a relatively recent activity sir david cooksey was the founder of advent venture partners in 1981 and was chief executive from 1981 to 1987 and bryan wood chairman from 1987 until his retirement in founder 1982 2006 . michiel de haan founder 1980 1982 vincent worms and thomas mckinley tvm launched in 1983 with €87m founded in 1945 by british banks ; the 3i group was created in 1987 a us company created in 1969 by when the banks sold their stakes to alan patricof which has a a public limited company . european presence since the 80s urltoken
emiliano b . machado is a director at acon investments . prior to joining acon in 2009 , mr . machado was an associate with credit suisse’s latin america investment banking group in new york . prior to that , mr . machado was an associate with fm & co . , a cross border m & a advisory boutique in new york . mr . machado worked previously at mtn capital partners , a private equity firm in new york as well as in the principal investments division of funbep pension fund in brazil . mr . machado may , from time to time , serve on the board of directors of an acon fund portfolio company
scott hammack is a multiple time successful technology entrepreneur and ceo . he currently serves as executive chairman of sunstone partners portfolio company , netspi . previously , scott was ceo of prolexic technologies , a trident capital portfolio company sold to akamai technologies in 2014 for $ 415 million . prior to prolexic , scott was chairman and ceo of cyberguard corporation ( nasdaq : cybg ) , where he successfully turned around the company from near bankruptcy and then it ultimately was sold to secure computing for $ 295 million . scott started his career as founder & ceo of masterchart , which he started in his basement , bootstrapped , and eventually sold to allscripts , inc . for $ 125 million .
36 . benchmark capital © service des relations industrielles ( sri ) © epfl 1995 bruce dunlevie andy rachleff bob kagle kevin harvey david biernein 1995 bruce dunlevie and andy rachleff , two veterans of the industry ( from mpae , merillpickard , anderson & eyre ) , decided to create their own company , benchmark . their goalwas to have a firm with a
fundamentally different architecture ,
with no one person at thetop . the men had connections , money and their own brain power and they immediately setto work . they added two more partners to their ranks in very short order , bob kagle from theventure capital world and kevin harvey from the technology sector , and then brought indavid bierne , who had built a highly successful executive search business centeredaround technology .
html public
- / / w3c / / dtd xhtml 1 . 0 strict / / en
urltoken
, a fast growing online advertising company that specialises in dynamic retargeting . the financing will be used to fund next performance’s continued european expansion .
next performance delivers high value retargeting and audience targeting services for brands and large retailers using its proprietary optimization technology . next performance’s innovative offering includes dynamic personalized banners , local targeting and massive reach campaigns on multiple business models ( cpa ,
) . since its establishment in 2008 , next performance has expanded rapidly - its client base has increased from 11 customers in january 2009 to over 500 in may 2011 . the combined retargeting and audience targeting proposition has enabled next performance to provide advertisers with a unique solution both to retarget existing customers as well as to acquire new customers .
launched in 2008 , next performance delivers high value online retargeting and audience targeting services for brands and large retailers . the company has 500 clients across europe ( france ,
germany , austria , netherlands , switzerland , belgium , italy , spain , and portugal ) . working with ad exchanges , networks and exclusive publishers and using its proprietary optimization technology , next performance delivers billions of personalized dynamic banner impressions per month . for more information :
we use cookies to ensure that we give you the best experience on our website . you can opt out of tracking cookies being set if you wish .
spreadshirt will use the funding to add new products and capabilities to its online platform , to strengthen its international footprint , and for innovative messaging to the massive market of people who wear clothes .
“spreadshirt mixes an online ‘web 2 . 0’ platform with the offline worlds of fashion , mass customization , and real - time manufacturing . combining this with our global coverage means we require a financing partner with a range of experience to contribute more than simply cash , ” says
, demonstrated their partnership mindset , and past results . we were sold . ”
“spreadshirt is an example of a capital - efficient business that has built not only a strong leadership position in europe , but also quality leadership in north america , ” comments mr . bleyleben . “the entrepreneurial team behind spreadshirt — founder and chairman
jana eggers — have built a dynamic , innovative business for mass - customized ecommerce . ” mr . bleyleben was elected to join spreadshirt’s board .
spreadshirt is the “things you wear” answer to the growing desire for personal branding — letting customers quickly create one - of - a - kind , high - quality , expressive apparel . our customers are :
buyers . like tattoos , phone skins and myspace or facebook pages , spreadshirt lets customers show who they are with what they wear , be it customized t - shirts , hoodies , jackets , bags , or accessories . if consumers don’t immediately have their own ideas , they are supported in finding what’s right for them with hundreds of thousands of top - quality designs from spreadshirt’s extensive design community .
holiday inn express , and nissan , along with individual designers , bloggers and hobbyists , to offer unique , expressive clothing for their brand without worrying about demand management , inventory , manufacturing , logistics , payments or customer service . a basic spreadshirt shop is free to set up and to operate .
designers . each week designers compete for fame and monetary prizes at lafraise , europe’s largest t - shirt design competition and a spreadshirt brand . the community votes , the designers get immediate feedback on their work , and limited edition t - shirts are printed and sold . lafraise also works with top brands like celio , greenpeace , and sony to offer unique , crowd - sourced t - shirt designs to their communities and customers .
brightcove , comscore , etsy , facebook , focus media , foundry networks , gameforge , glammedia , imperva , infinera , interwoven , jboss , kayak , macromedia , metropcs , mu sigma , polycom / picturetel , portal software , qliktech , rapt , real networks , redback networks , riverbed , sohu . com ,
et , veritas , walmart . com , webroot , xensource , and zimbra .
cloud security company continues rapid growth as federal governments & global 2000 customers increasingly battle cyber attacks and demand ddos protection systems .
prolexic technologies has announced the completion of a $ 13 . 9 million financing led by
founded in 2003 , prolexic was the first company to establish global scrubbing centers to stop ddos ( distributed denial - of - service ) attacks in the cloud . leveraging unique filtering techniques , high - speed bandwidth and peering , advanced routing and other patent - pending devices , prolexic provides the most advanced and powerful ddos detection and network protection systems available .
prolexic’s ddos mitigation service utilizes the company’s proprietary mitigation & control software and its experienced global security operations team together with the necessary bandwidth and hardware to fend off ddos cyber attacks . regardless of an attack’s size or complexity , prolexic ensures its customers are protected .
both the federal government and private sector have experienced a surge in cyber attacks . according to the
department of homeland security , federal agencies suffered 41 , 776 cyber attacks in 2010 , an increase of almost 40 % over 2009 . in the private sector , several global 2000 companies experienced cyber attacks following the recent wikileaks ordeal , which highlighted the disruptive power of larger ddos attacks .
founded in 2003 , prolexic is an it security provider of cloud - based cyber defense solutions , such as distributed denial - of - service ( ddos ) detection and mitigation , for the federal government and global 2000 customers . for more information please visit urltoken
chipidea is a prime example of an established business that used external financing intelligently to manage a careful geographic and business line expansion plan .
analog and mixed - signal engineers are a scarce resource within the semiconductor industry . chipidea had established a critical mass of engineers in this area .
semiconductor ip is a european strength . several of the most important providers of semiconductor ip are headquartered in europe , including the worlds ' largest vendor ,
during the summer of 2007 , michael was instrumental in leading the board ' s discussions with potential acquirers that had approached the company . in august 2007 , chipidea was acquired by
exits in the past six years , and represents yet another example of a home - grown european technology company that was able to achieve global market leadership .
for inquiries related to this message please contact support . for sales inquiries , please visit urltoken
if you believe this to be in error , please confirm below that you are not a robot by clicking
i ' m not a robot
below .
please make sure your browser supports javascript and cookies and that you are not blocking them from loading . for more information you can review the terms of service and cookie policy .
“trademob has rapidly developed a leadership position in the large and fast - growing market for app marketing , ” said hillel zidel . “what ravi and the team have developed over the last two years is hugely impressive , and we ' re excited to be working together to create a global market leader . trademob is a great example of the type of founder - led , capital - efficient business that we like to invest in . ”
of trademob . “we’re excited to have a partner on board that provides us not only capital , but also vast strategic experience in our market . ”
founded in 2010 in berlin , trademob optimizes mobile app campaigns , helping app marketers increase user retention , in - app engagement and app store ranking . using its innovative tracking technology and real - time campaign optimization technology , trademob delivers exceptional performance to mobile marketers . trademob provides advertisers with access to more than 100 mobile ad networks and has a reach of more than 500 million mobile users in 190 countries . clients include ebay classifieds , booking . com , universal music , axel springer
and many others . the company has offices in berlin , london , madrid , paris and new york .
since officially launching its app marketing offering in november 2011 , trademob has experienced double - digit monthly revenue growth and is now one of the leading app marketing platforms in europe .
berlin - based trademob is a data - driven mobile app marketing platform led by technology entrepreneurs and math experts . founded in august 2010 , trademob offers its clients an easy and efficient opportunity to promote their mobile apps globally while optimizing mobile marketing goals and budgets . trademob’s optimization engine and data - driven approach maximize active app users , in - app engagement and mobile revenue . the company’s independent platform aggregates all relevant ad networks and reaches more than 500 million mobile users worldwide . for more information , visit urltoken .
following the motto “funding your ideas , ” tengelmann ventures gmbh , a fully - owned subsidiary of the tengelmann group , has been investing in fresh and rapidly growing startups for several years and has now become one of the most significant startup investors in germany . the operative retail subsidiaries
kik , kaiser’s tengelmann and plus . de , as well as the real estate company
real estate , also belong to the tengelmann group . this family - owned enterprise was established in 1867 in mülheim an der ruhr and is currently managed by the fifth generation of the family . operating in 15 different countries and employing a staff of approximately 80 , 000 people who work in 4 , 000 stores , the company most recently turned over annual sales of
high - tech gruenderfonds invests in young , high - potential high - tech startups . the seed financing provided is designed to enable startups to take an idea through prototyping and to market launch . typically , high - tech gruenderfonds invests
2 million per portfolio company in follow - on financing . investors in this public / private partnership include the federal ministry of economics and technology , the kfw banking group , as well as fourteen industrial groups of
html public
- / / w3c / / dtd html 4 . 0 transitional / / en
urltoken
type : capital managed : companies invested in : investment managers : total staff size : number of offices : min . investment size : max . investment size :
jan 2 urban jungle urban jungle raises £1m in seed funding to build tech - enabled home . . .
copyright © 1999 - 2018 emerging technology research europe inc . all rights reserved .
founded in 2000 , worldone research ltd . has 330 + employees and is headquartered in new york and london , with regional offices in tokyo , hong kong , sao paolo and mexico city . worldone is an international research agency specializing in healthcare data collection for leading market research companies , agencies , and consulting firms . with one of the largest healthcare focused panels in the industry , worldone’s client portfolio includes the world’s top healthcare agencies and brands . worldone offers both online and offline access to medical professionals in over 80 countries . for more information : urltoken
the ai event of the year for growth marketers . aug . 21 - 22
the best in ai . an invite - only executive event . oct . 22 - 23
recommind , which offers an “ediscovery” service aimed at law firms , has raised $ 7 . 5 million in a first round of venture funding . despite the slowing economy , chief executive robert tennant says his company should stay very busy in the coming months .
that’s because san francisco - based recommind provides a key tool for litigation . its axcelerate product is used during electronic discovery , also known as ediscovery , which is the initial process of sorting through electronic records . with financial institutions collapsing , and legal battles likely to follow , the need for ediscovery may be on the rise . tennant says recommind has been getting increased requests from its law firm customers , and he expects more to come , even as many companies cut back on their costs .
“some technology companies’ capital decisions will get delayed … but when a judge says , ‘thou shalt produce , ’ you have to produce , ” he says .
of course , there are other startups entering the market — either involved directly in ediscovery or in archiving documents for legal purposes — and they’re getting funding , too . for example , mimosa systems raised $ 17 million earlier this year . other competitors include ediscovery company attenex and enterprise search company autonomy . ( recommind also provides enterprise search . )
but tennant says recommind’s service is particularly advanced . he calls it “ediscovery 2 . 0” — a phrase tennant sounds slightly embarrassed to use , but which gets the idea across . recommind’s axcelerate automates the initial process of sorting through documents and judging their relevance , thus making ediscovery faster and more affordable .
recommind has also been in the business for a while , with customers like well - known legal firms cooley godward kronish and wilson sonsini goodrich and rosati . it’s already profitable , and has been growing at about 100 percent per year , tennant says . so why does it need the funding ? there’s a big opportunity for growth , he says . recommind will use the money to expand its sales team and also acquire some new technology .
you’ve funded your growth the hard way : by selling real value to real customers .
you don’t need venture capital to validate your idea : the market has already done that . you need a different kind of capital .
we’re an experienced growth equity investor with a long track record of building global market leaders and achieving high - value exits .
the companies we invest in often do not need money to survive . they have options .
but the right investment from the right partner can help them keep ahead of their markets , expand internationally , ramp up their sales forces and lead to greater value for shareholders .
the trigger to raise capital may be a desire to accelerate expansion with additional funding , or to create liquidity for the founders or early investors .