18 December 2023

NARF INDUSTRIES PLC

Critical Infrastructure Collaboration Led by US-based MITRE Corporation

Mitigating cyber threats to embedded devices across critical infrastructure industries

NARF Industries plc ("NARF", the "Company", or the "Group"), (LSE: NARF) (OTCQB: NFIN.F) the cybersecurity group specializing in high-end threat intelligence for critical infrastructure security, is pleased to announce a collaboration effort with MITRE and Red Balloon Security to develop a new threat model for embedded software and hardware solutions that mitigate cyber threats to critical infrastructure.  

MITRE is a not-for-profit US corporation with over $2.2 billion in annual revenues, and which manages federally funded research and development centers supporting a variety of US government agencies.  Red Balloon Security provides firmware-level solutions for manufacturers to secure devices that protect essential infrastructure.

The new framework will focus on the critical infrastructure sector, which depends on embedded devices that often lack proper security controls and are increasingly threatened.  EMB3D™ is intended to be broadly used by organizations in the security ecosystem - device vendors, manufacturers, asset owners, security researchers, and testing organizations- to better evaluate device risks.

Steve Bassi, CEO of NARF, commented, "This collaboration enhances our work in critical infrastructure security, including sectors such as electrical and gas. Partnering with industry leaders like MITRE to introduce a new threat model to the security ecosystem holds significant importance."

EMB3D is intended to be a living framework, where new threats and mitigations are added and updated over time as new threat actors emerge and security researchers discover new categories of vulnerabilities, threats, and security defenses. Anticipated to be released in early 2024, EMB3D will be a public community resource, where all information is openly available, and the security community can submit additions and revisions.

MITRE's announcement can be found at the following link:

https://www.mitre.org/news-insights/news-release/mitre-red-balloon-security-and-narf-announce-emb3d

**ENDS**

For further information on the Group please visit www.narfgroup.com or contact:

About NARF Industries plc

NARF Industries (LSE: NARF)(OTCQB: NFIN.F) is a US based leading provider of cybersecurity research, solutions, and services to government entities. With a steadfast commitment to protecting national security and critical infrastructure, it offers comprehensive expertise in addressing the evolving cyber threats faced by its clients.

NARF works with various US government agencies including the Department of Defense ("DoD"), the Defense Advanced Research Projects Agency ("DARPA"), and the Department of Homeland Security ("DHS"). The Group often collaborates with world renowned private research companies and leading educational establishments in the performance of contracts.

About MITRE

MITRE's mission-driven teams are dedicated to solving problems for a safer world. Through their public-private partnerships and as an operator of federally funded R&D centres, they work across government and in partnership with industry to tackle challenges to the safety, stability, and well-being of the US. mitre.org.

About Red Balloon Security

Founded in 2011, Red Balloon Security (www.redballoonsecurity.com) is a leading cybersecurity provider and research firm that specialises in the protection of embedded devices across all industries.