At the center of our work is searching for new security concepts and mechanisms that haven’t been attacked before. Fresh targets are more likely to contain bugs which can put users at risk. Generally, we try to be as creative as hackers, and a month or two ahead of them.
We hunt for new concepts which might be used to attack high-value targets and we seek ideas to mitigate these. To do this, a researcher needs to understand patterns of previous attacks and techniques, categorize them and use that knowledge to develop new mitigations for new attacks that are similar.