From architecture to operation.
Unidirectional gateway architectures, industrial protocol integration, and security engineering for critical infrastructure.
Specialist consulting & engineering
Meet Jadebrain
Jadebrain is a specialist consulting and engineering company focused on unidirectional technologies, with deep experience in industrial and operational technology (OT) environments. We design, integrate, and validate unidirectional systems that protect critical operations while preserving the data flows they require.
Recommendations are grounded in operational requirements, explicit security assumptions, and technical evidence, with independent judgment across vendors and technologies.
Start a conversation
Our people
Dr. Jesus Molina
Principal Consultant
Dr. Jesus Molina is a cybersecurity engineer and technical leader with more than 20 years of experience. His work spans security architectures for critical infrastructure, product development, and leadership roles in the Trusted Computing Group and the Industrial Internet Consortium.
An inventor on 12 granted U.S. patents, he is also Academic Director of the postgraduate programme in railway cybersecurity at UPC School. His experience brings together industrial engineering, technology innovation, standards leadership, and academic education.
Helping shape the technology.
Leadership and board responsibilities at the Trusted Computing Group; security leadership at the Industrial Internet Consortium.
Advancing engineering practice.
Railway cybersecurity at UPC School, connecting security architecture, industrial practice, and technical education.
View the programme ↗Experience you can explore
Selected work
Publications, talks, and inventions relevant to Jadebrain’s engineering practice. Work from previous roles retains its original publisher and attribution.
16 selected works
Industrial security & architecture
Segmentation 202: Unidirectional Architectures
Five architectural patterns for separating inbound and outbound flows at critical IT/OT boundaries.
Segmentation 201: Unidirectional Gateways vs. Firewalls
A consequence-driven comparison of firewalls and unidirectional gateways for operational technology networks.
Power Generation OT Security: Applying and Interpreting ISA/IEC 62443 Standards
A power-sector guide to consequence-driven risk assessment, zoning and conduits, and engineering-grade cybersecurity controls.
NIS2 for Operational Technology Professionals: A Guide to Cybersecurity Compliance
A guide to the scope, obligations, and operational technology implications of the European NIS2 Directive.
Cybersecurity Imperatives for Vital Rail Networks at Operations Control Centers
A practical rail cybersecurity guide aligned with IEC 62443 and TS 50701 for operations control center vital networks.
Research & hardware assurance
Controlling Data in the Cloud: Outsourcing Computation without Outsourcing Control
A widely cited examination of data control, accountability, and risk in cloud computing.
TrustCube: An Infrastructure that Builds Trust in Client
A client trust infrastructure built around trusted computing technologies and remote assurance.
A Mobile Trusted Platform Module (mTPM) Architecture
A trusted platform architecture designed for mobile computing environments.
Copilot: A Coprocessor-Based Kernel Runtime Integrity Monitor
A hardware-assisted system for independently monitoring operating-system kernel integrity at runtime.
Talks & teaching
The Case for Vertical-Specific Rail OT Security Training Materials
Why OT cybersecurity education should be adapted to sector engineering practices rather than taught only through generic standards.
What Does OT Really Mean?
A conversation about the meaning of OT, the Iberian blackout, and the risks surrounding modern remote-access architectures.
Learn How to Control Every Room at a Luxury Hotel Remotely
The DEF CON 22 presentation demonstrating how an insecure KNX deployment exposed a luxury hotel to remote control.
Selected patents
Method and system for monitoring system memory integrity
Granted February 10, 2015. A system for monitoring memory integrity using an independent monitoring component.
Method and system for implementing a mobile trusted platform module
Granted August 27, 2013. A remotely supported trusted platform module architecture for mobile devices.
Hardware trust anchor
Granted August 6, 2013. Hardware-based independent security assessment and trust-state reporting.
Method and system for implementing an external trusted platform module
Granted September 18, 2012. An external trusted platform module for remote host environments.
No matching work. Try a different term or clear the search.