whitehat

Neil Daswani

IRL Name: 
Neil Daswani
Biography: 

Neil Daswani is the Co-Founder and Chief Technology Officer at Dasient. He is a highly regarded Internet technology expert, and has served in a variety of research, development, teaching, and managerial roles at Google, Stanford University, DoCoMo USA Labs, Yodlee, and Bellcore (now Telcordia Technologies). While at Stanford, he co-founded the Stanford Center for Professional Development’s Software Security Certification Program, which has become an important tool for educating software programmers, architects, developers, engineers, IT managers, chief information officers (CIOs), and chief security officers (CSOs) about security issues and designing secure programs. His areas of expertise include security, wireless data technology, and peer-to-peer systems. He has published extensively in these areas, frequently gives talks at industry and academic conferences, and has been granted several U.S. patents.

Pictures: 
References

Jeremiah Grossman

IRL Name: 
Jeremiah Grossman
Biography: 

Jeremiah Grossman is the founder of WhiteHat Security, web application security enthusiast and a founding member of the Web Application Security Consortium (WASC). He is also a frequent speaker at industry events including the Black Hat Briefings, RSA Conference, ISACA, CSI, InfoSec World, OWASP, ISSA, and Defcon as well as a number of large universities. He has also hyped Clickjacking as a vulnerability.

Pictures: 
References

Kevin Finisterre

IRL Name: 
Kevin Finisterre
Biography: 

Kevin Finisterre is a principal of the security consultancy Digitalmunition and the former Head Of Research and Co-founder of SNOSoft, Inc. aka Secure Network Operations. Kevin's primary focus has been on the dissemination of information relating to the identification and exploitation of software vulnerabilities on various platforms. Apple, IBM, SAP, Oracle, Symantec, and HP are among many vendors that have had problems that were identified by him.

Pictures: 
References

David Litchfield

IRL Name: 
David Litchfield
Biography: 

David Litchfield was born on 1975 and is a know security researcher or expert from UK. He found hundreds of vulnerabilities in many popular products by Microsoft, Oracle and IBM. He is the author of Oracle Forensics , the Oracle Hacker's Handbook , the Database Hacker's Handbook and SQL Server Security and is the co-author of the Shellcoder's Handbook . He is a regular speaker at a number of computer security conferences and has delivered lectures to the National Security Agency, the UK's Security Service, GCHQ and the Bundesamt für Sicherheit in der Informationstechnik in Germany. He has found and helped to fix 24 security flaws in SQL Server, including the vulnerability that was exploited by Slammer, 17 in IBM's DB2, 22 in Informix and over 100 in Oracle. In February 2008 David discovered a new class of vulnerability in Oracle that can lead to "Lateral SQL Injection" and, in the November of 2006, another new class of vulnerability in the same RDBMS that can lead to "cursor snarfing" attacks. Both are general programming flaws, that can lead to data compromise. David pioneered major advancements in Oracle forensics and has authored 7 technical papers since March 2007 on the topic. He founded a company named Cerberus Information Security which was acquired by @stake in July 2000. David recently founded v3rity , a new venture. v3rity develops breach investigation software to examine compromised database servers. Until February 2010, David was Chief Research Scientist at NGSSoftware , a UK computer security services and software company he founded in 2001. NGSSoftware was acquired by NCC Group in November 2008.

Pictures: 
References

Amichai Shulman

IRL Name: 
Amichai Shulman
Biography: 

Amichai Shulman is a security researcher from Israel. Shulman is Co-Founder and CTO of Imperva, where he heads the Application Defense Center (ADC), Imperva’s internationally recognized research organization focused on security and compliance. Shulman regularly lectures at trade conferences and delivers monthly eSeminars. Under his direction, the ADC has been credited with the discovery of serious vulnerabilities in commercial Web application and database products, including Oracle, IBM, and Microsoft.

References

Donald C. Donzal

IRL Name: 
Donald C. Donzal
Biography: 

Donald C. Donzal is the founder and editor of The Ethical Hacker Network and ChicagoCon. He was the one who formed a successful consulting business , joined a startup, elco Billing Solutions, Inc, as CTO, and became Director of IT for the Department of Medicine at the University of Illinois at Chicago (UIC). Don continues to preach the wonders of technology through a combination of writing, speaking, studying and, of course, working in IT. He currently holds CISSP, MCSE 2003, CEH and is a Subject Matter Expert for CompTIA's Security+.

Pictures: 
References

Doug Steelman

IRL Name: 
Doug Steelman
Biography: 

Doug Steelman was the former director of the U.S. Department of Defense (DoD) Dynamic Network Defense Operations for U.S. Cyber Command. Steelman previously was the Director of DoD Network Defense for the Joint Task Force-Global Network Operations. He earlier served as the Pentagon Network Assurance Division Chief where he led day-to-day Pentagon Computer Incident Response Team operations. He currently works now in Dell Secureworks as its Chief Information Security Officer.

Pictures: 
References

i0n1c

IRL Name: 
Stefan Esser
Biography: 

Stefan Esser is an independent Security Consultant, that is well known in the security community for his advisories, white papers, disclosures and exploits about popular Open Source Software packages like Linux, NetBSD, Samba, Cyrus IMAPD, Gaim, Ethereal, CVS, Subversion, MySQL and PHP. Stefan contributes to the source code of PHP for 5 years and was a founding member of php.net's Security Response Team until he retired from it in the end of 2006. Because of his indepth knowledge of the PHP source code, he is an excellent auditor for PHP web applications, with a background knowledge that is unique in the PHP community. In 2007, Stefan was listed by Eweek as one of the 15 Most Influential People in IT-Security after having organized the Month of PHP Security.

Pictures: 
References

Gary Golomb

IRL Name: 
Gary Golomb
Biography: 

He is the Lead Research and Development Engineer at NetWitness Corporation where he has focused on reverse engineering and advanced pattern isolation and detection algorithms in executables, host processes, and network traffic, with several patents pending.

He has previously served as the founder and president of Proventsure (acquired by NetWitness), Director of Research and Development for the Dragon IDS at Enterasys Networks, and lead the IT Forensics Investigator for the George Washington University (GWU).Academically, He worked in the field of bioinformatics and proteomics, and developed an algorithm for identifying unknown proteins.

Pictures: 
References

Atty. Al. S. Vitangcol III

IRL Name: 
Atty. Al. S. Vitangcol III
Biography: 

Atty. Al. S. Vitangcol III is a practicing lawyer, a registered engineer, a contracts review expert, an academic scholar, an Information Technology (IT) specialist, and an automated elections specialist in the Philippines. A lawyer in the Philippines with a formal education in IT and a solid IT working experience behind him. He got some EC-Council certs which he thinks is enough for him to become a hacker. He was nominated to the 2007 Ramon Ozaeta Most Outstanding Lawyer Award, which is annually sponsored by the Philippine Bar Association (PBA).

He is a former law professor at the Lyceum of the Philippines - College of Law and a former lecturer at the Ateneo de Manila University – Graduate School of Business. He is a member of various local organizations and the Australian-based International Employment Relations Association (IERA).

Pictures: 
References
Syndicate content