CEO and Founder, OS Objectif Sécurité SA
Geneva Area, Switzerland
CEO and Founder, OS Objectif Sécurité SA
Geneva Area, Switzerland
IT security consultant with broad experience in development, audit, and managment issues.
Well known researcher in the security community (rainbow tables), successful lecutrer at masters and PhD level
IT Security strategies, policies (17799), audits
Vulnerability assessments, penetration testing
Cryptography
Training
(Privately Held; 1-10 employees; Computer & Network Security industry)
October 2004 — Present (5 years 3 months)
CEO, Senior Consultant
(Educational Institution; 5001-10,000 employees; Research industry)
2001 — 2004 (3 years )
Creation and teaching of a masters level lecture on network security. Most popular lecture of programme, excellent student reviews
Research on advanced time-memory trade-offs. Invented a method based on "rainbow tables" that cracks windows passwords in seconds (ophcrack), now used in all major crackers on the market.
Collaborations with the Swiss Army and the local police.
(Self-Employed; Myself Only; Computer & Network Security industry)
March 2001 — September 2004 (3 years 7 months)
Security audits (penetration testing, vulnerability assessment, architecture and process audit)
Creation of security policies
Customized in-house IT security training
(Privately Held; 11-50 employees; Computer & Network Security industry)
1998 — 2001 (3 years )
Head of a team of more than 10 engineer
Created new rules and incentives to increase efficiency
Senior IT Security Consultant.
-penetration tests
-design and deployment of secure perimeters
-creation of security policies
Hands on work with Cisco (IOS, PIX), Checkpoint, Solaris, W2k, TrendMicro, Linux, Squid, sendmail, apache
(Computer & Network Security industry)
1997 — 1997 (less than a year)
Designed the new set of products of the company.
Worked both in development (writing a webserver for remote management of routers) and in sales (present at CeBit and other fairs) to know what we were able to do and what the market wanted.
Managed product launches (coordintation of documentation, software versions and sales contracts)
(Educational Institution; Higher Education industry)
January 1997 — December 1997 (1 year )
(Educational Institution; 5001-10,000 employees; Higher Education industry)
January 1991 — December 1996 (6 years )
(Public Company; 10,001 or more employees; LU; Computer Networking industry)
January 1991 — December 1992 (2 years )
R&D work in high speed networking. Got two US patents for advanced ATM network interface chip (T7652 ATM Layer Interface)
(Educational Institution; 10,001 or more employees; Research industry)
May 1989 — October 1989 (6 months)
PhD , Computer Networking
Security Audits ISO 17799 Penetration testing PKI (architecutre, policies, certification) Cryptography
Member IEEE
Member SI/FGsec
Member of the Comitee CLUSIS
CISSP since 2001