Board Members

  
Richard Bejtlich Board Member

 Richard Bejtlich is the Chief Security Manager at Mandiant. He is also founded TaoSecurity to develop capabilities to detect, contain, and remediate intrusions using network security monitoring (NSM) principles. Visit the TaoSecurity Blog for the latest news on this work.

 

Dr. Jose Nazario
Board Member
 

Dr. Jose Nazario is a Senior Security Researcher with Arbor Networks.  In this capacity, he is responsible for analyzing burgeoning Internet security threats, reverse enginnering malicious code, software development, and developing security mechanisms that are then distributed to Arbor's Peakflow platforms via the Active Threat Feed (ATF) threat detection service.

Dr. Nazario's research interests include large-scale Internet trends such as reachability and topology measurement, Internet-scale events such as DDoS attacks, botnets and worms, source code analysis tools, and data mining.  He is the author of the books, "Defense and Detection Strategies against Internet Worms" and "Secure Architectures with OpenBSD".  He earned a Ph.D.in biochemistry from Case Western Reserve University in 2002.  Prior to joining Arbor Networks, he was an independent security consultant.  Dr. Nazario regularly speaks at conferences worldwide, with past presentations at CanSecWest, PacSec, Blackhat, and NANOG.  He also maintains WormBlog.com, a site devoted to studying worm detection and defense research.

  
Joel Ebrahimi
Board Member
 

Joel Ebrahimi is a solutions engineer at Bivio Networks, where he helps service providers, carriers and government organizations deploy DPI-enabled systems for improved network security, visibility, control and monetization.

Over the course of his career, Mr. Ebrahimi has developed a specialization in high-speed packet analysis, firewall integration, network intrusion prevention/detection, host-based intrusion prevention, open vulnerability and assessment language (OVAL), common vulnerabilities and exposure (CVE) and compliance. He holds a bachelor’s in computer science from the University of California, Santa Barbara.

  
Marc Norton
Board Member
 

Mr. Norton is a Project Lead at BAE Systems, manages a group of Security Analysts, and does Anomaly based IDS R&D with the NIDAR Intrusion Detection System.

Mr. Norton worked for six years as a Lead Developer and Team Lead for the Snort IDS project while at Sourcefire,Inc with multiple contributions to the Snort detection engine.

Mr. Norton worked as a Principle Developer on the Dragon IDS and built one of the first Gigabit IDS detection engines while at Enterasys,Inc.

Mr. Norton's other experience includes 18 years as an Aerospace Engineer and software developer performing Structural Dynamic Analysis and tool development on the Space Shuttle.

  
Stuart Wilson
Board Member
 

Stuart joined Endace Technology in December 2005 as VP Engineering, and now as CTO, is responsible for all product development.

Stuart managed the L4-7 Test program for Agilent's Data Networks Division (DND).  Stuart was responsible for the integration and operations of the recently acquired IP & people associated with Agilent's acquisition of L4-7 technology from Synthetic Networks Incorporated (SNI).

Prior to joining Endace Technology, Stuart worked at Hewett-Packar/Agilent Technologies.  Starting in 1997 as a research and development engineer designing high speed FPGA systems for communications test.  At his time at HP/Agilent, Stuart has managed several ground breaking products to market, notably Agilent's 40G RouterTest, delivering Layer-III 40G test capability to the market, and more recently, Agilent's NetworkTester product delivering application layer security test to the security device market.

Prior to that, Stuart worked at Philips Radio, designing custom radio communications systems, GEC Research in London as a custom ASIC designer in their VHSIC design labs, and for his own ASIC design company for 8 years.

Stuart was born in Melbourne, Australia in 1959 and holds a degree with Honours in Electronics & Communications Engineering from LaTrobe University in Melbourne, and a Postgraduate Degree in Management from the Melbourne Business School.

Core Team

 

Matt Jonkman
President
 

Matt brings over 15 years of security and entrepreneurial experience to the foundation. Matt is the founder of Emerging Threats , an open source IDS Ruleset, and Emerging Threats Pro which is a commercial version of the Emerging Threats ruleset. This makes Matt a consumer of the OISF Engine and an ideal person to lead the foundation.  Matt resides in Lafayette, Indiana.

  
Victor Julien
Lead Programmer
 

Victor has been active as a software developer in the infosec community for many years. He is the creator of the Vuurmuur firewall project, has been one of the developers at the Snort_inline IPS project. Victor has spent the last years doing contract development on Open Source security software including significant additions to Snort. At the end of 2007 he started development on the OISF codebase on which he now leads the development effort. Victor maintains a blog at http://www.inliniac.net/blog/ and uses twitter at http://twitter.com/inliniac Victor resides in Amsterdam, The Netherlands.

  
  
Anoop Saldahna 
Programmer
 

Anoop has experience from RSA, Sasken, and on Mozilla through the Google summer of code program. Anoop's experience with the RSA Access manager, j2me apps on cell platforms, and automation frameworks is an invaluable addition to the team. Anoop resides in Mangalore, India. 

  

Eric Leblond

Programmer

 

Eric Leblond has been a security and open source professional since the end of the 20th century. He has created and has been lead on the NuFW project
aimed at creating an identity based enterprise firewall. He is a long-term contributor of Netfilter, the packet filtering framework inside Linux where, among other work, he has made major contribution to ulogd2, the userspace logging daemon.

A frequent speaker in French free software and security conferences, Eric also writes articles in the specialized press like Linux Magazine France. For example, he was the main author of the Netfilter special issue (http://www.ed-diamond.com/produit.php?ref=lmhs41). He is also co-founder of the INL/EdenWall company where, as CTO, he succeeded in building enterprise-grade network appliances based on NuFW. Eric is now a freelance consultant in security and free software.  

  

Peter Manev

Lead QA

 

Peter has 10 years experience in the IT industry, including enterprise level IT security practice. An adamant admirer and explorer of innovative open source security software, Peter is currently a Security Solution Architect.

Peter resides in Gothenburg, Sweden. 

  
 Wil Metcalf  QA
  Will comes from the government and law enforcement IT Security sector with over nine years experience. In addition Will has had involvement with various open source projects over the years including snort_inline and maintains a blog at http://node5.blogspot.com. In 2012 Will joined the Emerging Threats Pro team as well. Will currently resides in Kansas City, Missouri.

 

Other Significant Contributors

Brian Rectanus
Programmer
 

Brian Rectanus (GCIA, GCIH) is the Director of Research Development at Breach Security, Inc. At Breach, he spends his time developing for and refining Web Application Firewalls, making them more efficient, easier to integrate with existing systems and more transparent to install. Brian also manages the open source ModSecurity Apache based Web Application Firewall project. He holds a BS in Computer Science from Kansas State University and has been developing, administering and securing large scale web sites for the past 10 years. Brian comes to the foundation as a timeshare from Breach Security. Brian resides in San Diego, California.

  
Breno Silva Pinto
Programmer
 Breno is a computer scientist with over 8 years experience in Information Technology, experienced with a wide range of software development techniques and languages, security systems and network technologies. Breno brings a deep mathematical education, supporting research and algorithm design for network anomaly detection mechanisms in high-speed networks. Breno is currently a computer incident response team member for the Telecom Industry in Latin America. Breno resides in Brasília, Brazil.
  
Nathan JimersonProgram Manager
 

Nathan has over 10 years experience in IT Project Management and Systems Analysis.  In his role as project manager, Nathan will be working with all OISF employees and contractors managing task assignments, the project plan and participating in the documentation initiatives for the application.  Most recently his focus has been on government funded programs, he has managed projects funded by the NSF, SBA, DoD and more. Nathan resides in Redlands, California.  

  
Gurvinder Singh Dahiya
Programmer
 Gurvinder Singh has graduated from a double masters program in Security and Mobile Computing. He was a part of Erasmus Mundus - NordSecMob program and completed his double masters degree from the Norwegian University of Science and Technology, Trondheim, Norway and Helsinki University of Technology, Helsinki, Finland. His main research interests lie in network security and protocols. In past he has done similar work on network security during his master thesis. Currently he is also working on energy consumption of security protocols in a research project funded by Nokia. Gurvinder brings several very interesting theoretical detection methods to the project and a great deal of programming experience. Gurvinder resides in Helsinki, Finland.
  
Jason MacLulich
Programmer
 

Jason leads the Endace IDS team, with special interests in hardware acceleration for intrusion detection. Jason resides in Auckland, New Zealand

  
Jason Ish
Programmer
 Jason is a senior software developer at Endace with a focus on security applications.  Jason has a degree in computer science from the University of Saskatchewan and currently resides in Victoria, BC, Canada.
  
Kirby Kuehl
Programmer
 Kirby Kuehl is a software developer at BreakingPoint Systems, Inc.  At BreakingPoint, Kirby has implemented several high performance client simulation components and worked on their pcap retransmission component.  Prior to BreakingPoint, Kirby developed several protocol inspection engines for the Cisco Intrusion Prevention System.
  
Dennis Henderson
Programmer
 Dennis has a broad experience in Information Security spanning 15 years.  He has provided Security Design and Consulting services for companies ranging from Telecom to Financial Services and currently leads a team of 14 Security Engineers and Admins at a major midwest bank.  His certifications include ISACA and CISM.
  
Martin Solum
Programmer
 Martin (BBA) is a computer systems professional with 15+ years experience in many information technology settings.  His experience includes information system & control system integration, software development, research & development and assessment projects.  Since 2000, Martin has been mainly involved in Cyber Security Research & Development including assessment and cyber security software prototyping.  Martin's focus areas include the application of cyber defense technologies to the industrial control systems space.  He completed a to-year Industrial Process Operator Program to familiarize himself with control system technologies, has done Wonderware & NERC-CIP compliance tools consulting work, and set up a control systems lab and produced network traffic from various control system devices (e.g. PLC's, substation equipment) for the DigitalBond QuickDraw passive security logging project.
  
Ivan Ristic
Programmer
 Ivan Ristic is a respected security expert and book author, known especially for his contribution to the web application firewall field and the development of ModSecurity, the open source web application firewall.  He is the author of Apache Security, a comprehensive security guide for the Apache web server.  A frequent speaker at computer security conferences, Ivan is an active participant in the application security community, member of the Open Web Application Security Project (OWASP) and officer of the Web Application Security Consortium (WASC).
  
Pablo Rincon
Programmer
 Pablo is an Engineer in Computer Science, developer and Security Researcher.  He has been focused on security since 1998.  He has been working for two years on the OSSIM Project at Alienvault.  He is specially skilled on SIEM technologies, Security Operations Center Architectures, and high performance application development.  He also has a strong knowledge of exploit coding, network protocols and secure coding practices.  Pablo currently resides in Madrid, Spain.
  
Gerardo Iglesias Galvan
Programmer
 Gerardo Iglesias Galvan studied at the Instituto Tecnologico de Morelia in Mexico until 2007 where he then attended the Norwegian University of Science and Technology then university of Tartu (Estonia) and then finally University of Luxembourg all for his masters degree in Information Security and Cryptography.  He currently resides in Mexico City, Mexico and some of his professional interests include network security, ethical hacking, honeypots and smart cards.
  
Nick Rogness
Programmer
 Nick has more than 14 years of experience working in the Service Provider industry specializing in ISP systems, networks, security, and advanced service delivery.  Nick is the Director of Broadband Services at Golden West Telecommunications where he is in charge of both Retail and Wholesale Internet product lines with focus on the rural telecommunications market.  Nick holds a B.S. in Computer Science and a M.S. in Technology Management from South Dakota School of Mines and Technology.
  
Luca Deri
Programmer
 
Luca Deri is the leader of the ntop project (http://www.ntop.org/) aimed at developing an open source monitoring platform for high speed traffic analysis.  He worked for University College of London and IBM Research, prior to receiving his PhD at the University of Berne with a thesis about software components for traffic monitoring applications.  Well known in the open-source and Linux community as well in the industry, Luca has been appointed to the technical advisory board of several leading companies.  He currently shares his time between the ntop project, the IIT Research Group of CNR (http://www.iit.cnr.it/en/), and the Computer Science Department of University of Pisa (http://www.di.unipi.it) where he has been appointed as lecturer.  Luca resides in Pisa, Italy and his home page is: http://luca.ntop.org
  
Josh Smith
Infrastucture
 

Josh is a graduate of Rochester Institute of Technology and studied Information Security and Forensics.