Chief Security Strategist at People Security
Greater New York City Area
Chief Security Strategist at People Security
Greater New York City Area
Currently Founder and Chief Security Strategist at People Security (www.peoplesecurity.com) an enterprise security education company. I’ve co-authored a few books on software security including How to Break Software Security: Effective Techniques for Security Testing (with Dr. James Whittaker, published by Addison-Wesley, 2003), and The Software Vulnerability Guide (with Scott Chase, published by Charles River 2005). Most of my professional life has been spent creating methodologies that help build demonstrably more secure software and training developers, architects, security testers and executives on security. A lot of my time is spent evangelizing security through talks/keynotes at conferences and corporations, writing industry books and articles on software security, and interacting with the press.
software security, security metrics, evoting security
(Computer & Network Security industry)
January 2007 — Present (2 years 7 months)
My role is to help define application security assurance processes and methodologies as well as to develop courses and e-learning solutions that enable software designers, developers, and testers to build more secure and robust applications. My goal is to help create application security awareness through delivering talks/keynotes at key conferences and Fortune 500 corporations, writing industry-defining books and articles on software security, and interacting with the press.
(Educational Institution; 201-500 employees; Higher Education industry)
January 2003 — Present (6 years 7 months)
My work at Florida Tech is heavily research oriented. My research is primarily in the fields of software security and testing.
(Computer Software industry)
September 2002 — December 2006 (4 years 4 months)
Lead the creation of new methodologies, techniques, and processes to build security into software.
Ph.D. , Applied Mathematics , 1999 — 2002
software security, security testing, secure development, security metrics, security education
Awarded “Top 5 Influential Thinkers in IT Security” in 2006 by SC Magazine.
Designated a “Most Valued Professional (MVP)” for Software Security by Microsoft (2005, 2006, 2007).