2014 BASC Speakers - Revision history

Tom Conner at 16:29, 10 October 2014

2014-10-10T16:29:01Z

Tom Conner at 16:25, 10 October 2014

2014-10-10T16:25:20Z

Tom Conner at 16:24, 10 October 2014

2014-10-10T16:24:53Z

Tom Conner at 15:56, 10 October 2014

2014-10-10T15:56:17Z

Tom Conner at 15:55, 10 October 2014

2014-10-10T15:55:49Z

Tom Conner at 14:36, 10 October 2014

2014-10-10T14:36:01Z

Tom Conner at 21:39, 9 October 2014

2014-10-09T21:39:41Z

Tom Conner at 03:03, 2 October 2014

2014-10-02T03:03:24Z

Tom Conner at 03:02, 2 October 2014

2014-10-02T03:02:26Z

Tom Conner at 02:52, 2 October 2014

2014-10-02T02:52:26Z

@@ Line 52: / Line 52: @@
 prestigious institutions such as the United States Military
 Academy, and previously worked for the National Security Agency.
-DeMott holds a PhD from Michigan State University.
+DeMott holds a PhD from Michigan State University.<br clear=all>
 === Jeff Williams ===

@@ Line 59: / Line 59: @@
 === Josh Corman ===
-'''Sonatype'''
+'''Sonatype'''<br/>
 Joshua Corman is the Chief Technology Officer for Sonatype. Previously, Corman served as a security researcher and strategist at Akamai Technologies, The 451 Group, and IBM Internet Security Systems. A respected innovator, he co-founded Rugged Software and IamTheCavalry to encourage new security approaches in response to the world’s increasing dependence on digital infrastructure. Josh's unique approach to security in the context of human factors, adversary motivations and social impact has helped position him as one of the most trusted names in security. He is also an adjunct faculty for Carnegie Mellon’s Heinze College, IANS Research, and a Fellow at the Ponemon Institute.

@@ Line 57: / Line 57: @@
 '''Contrast Security'''<br/>
 Jeff Williams is the founder and CTO of [http://contrastsecurity.com Contrast Security], bringing the power of instrumentation and real time analytics to secure your application portfolio. Previously, Jeff was a founder and CEO of [http://aspectsecurity.com Aspect Security]. He also served as Global Chairman of the OWASP Foundation where he created many open-source standards, tools, libraries, and guidelines – including the OWASP Top Ten, WebGoat, ESAPI, XSS CheatSheet, ASVS and more. Jeff welcomes hearing from you and may be reached directly at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com].
 === Anson Gomes and Jeremy Spencer ===

@@ Line 43: / Line 43: @@
 === Jared DeMott ===
-[[File:DrJared.jpg|left]] Dr. Jared DeMott is a seasoned security researcher, and has spoken at conferences such as DerbyCon, BlackHat, Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon, ThotCon, GRRCon, and Bsides*. Past notable research
+[[File:DrJared.jpg|left]] Dr. Jared DeMott is a seasoned security researcher, and has spoken at conferences such as DerbyCon, BlackHat, Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon, ThotCon, GRRCon, and Bsides*. Past notable research relates to stopping a trendy hacker exploit technique (known as ROP), by placing as a finalist in Microsoft’s BlueHat prize contest, and by more recently showing how to bypass Microsoft’s EMET protection tool.
 Jared is active in the security community by teaching his

@@ Line 43: / Line 43: @@
 === Jared DeMott ===
-[[File:DrJared.jpg|left]] Dr. Jared DeMott is a seasoned security researcher, and has
+[[File:DrJared.jpg|left]] Dr. Jared DeMott is a seasoned security researcher, and has spoken at conferences such as DerbyCon, BlackHat, Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon, ThotCon, GRRCon, and Bsides*. Past notable research
-spoken at conferences such as DerbyCon, BlackHat,
+relates to stopping a trendy hacker exploit technique (known as ROP), by placing as a finalist in Microsoft’s BlueHat prize contest, and by more recently showing how to bypass Microsoft’s EMET protection tool.
 Jared is active in the security community by teaching his

← Older revision		Revision as of 21:39, 9 October 2014
Line 41:		Line 41:

	Geller Bedoya is a senior application security at nVisium. Geller graduated from Georgia Tech with a degree in Electrical Engineering. As a undergraduate student Geller tackled a range of security challenges from memory forensics to botnet research. After graduation, he promptly put his security knowledge to work at a financial brokerage where he aided in design and implementation of security throughout the SDLC. He performs security code reviews and application security testing of products. Outside the office, he finds peace of mind by cycling and running.		Geller Bedoya is a senior application security at nVisium. Geller graduated from Georgia Tech with a degree in Electrical Engineering. As a undergraduate student Geller tackled a range of security challenges from memory forensics to botnet research. After graduation, he promptly put his security knowledge to work at a financial brokerage where he aided in design and implementation of security throughout the SDLC. He performs security code reviews and application security testing of products. Outside the office, he finds peace of mind by cycling and running.
		+
		+	=== Jared DeMott ===
		+	Dr. Jared DeMott is a seasoned security researcher, and has
		+	spoken at conferences such as DerbyCon, BlackHat,
		+	Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon,
		+	ThotCon, GRRCon, and Bsides*. Past notable research
		+	relates to stopping a trendy hacker exploit technique
		+	(known as ROP), by placing as a finalist in
		+	Microsoft’s BlueHat prize contest, and by more
		+	recently showing how to bypass Microsoft’s EMET
		+	protection tool.
		+
		+	Jared is active in the security community by teaching his
		+	Application Security course, and has co-authored the book –
		+	Fuzzing for Software Security Testing and Quality Assurance.
		+	DeMott has been on three winning Defcon CTF teams, and has the
		+	black badges to prove it. He has been an invited lecturer at
		+	prestigious institutions such as the United States Military
		+	Academy, and previously worked for the National Security Agency.
		+	DeMott holds a PhD from Michigan State University.

	=== Jeff Williams ===		=== Jeff Williams ===

← Older revision		Revision as of 03:03, 2 October 2014
Line 54:		Line 54:

	Jeremy graduated from Columbia University's School of Engineering and Applied Science in 2013 with a B.S. in Computer Science. At Columbia, Jeremy engaged in computer system software development within operating systems, compilers, and networking stack. Prior to iSEC, Jeremy held an internship at Goldman Sachs where he did security related software development.		Jeremy graduated from Columbia University's School of Engineering and Applied Science in 2013 with a B.S. in Computer Science. At Columbia, Jeremy engaged in computer system software development within operating systems, compilers, and networking stack. Prior to iSEC, Jeremy held an internship at Goldman Sachs where he did security related software development.
−

	=== Michael Weissbacher ===		=== Michael Weissbacher ===

@@ Line 46: / Line 46: @@
 Jeff Williams is the founder and CTO of [http://contrastsecurity.com Contrast Security], bringing the power of instrumentation and real time analytics to secure your application portfolio. Previously, Jeff was a founder and CEO of [http://aspectsecurity.com Aspect Security]. He also served as Global Chairman of the OWASP Foundation where he created many open-source standards, tools, libraries, and guidelines – including the OWASP Top Ten, WebGoat, ESAPI, XSS CheatSheet, ASVS and more. Jeff welcomes hearing from you and may be reached directly at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com].
-=== Jonathan Chittenden and Anson Gomes ===
+=== Anson Gomes and Jeremy Spencer ===
 '''iSEC Partners'''<br/>
-Prior to his employment with iSEC, Jonathan worked for the Air Force as a civilian. His roles consisted of reverse engineering malware for both signature and exploitation development. This experience enabled Jonathan to be comfortable working at a low-level with unknown protocols and binaries. During this time, he also assisted in the development of an open-source intelligence application to be used to identify indicators of compromise.
+Anson Gomes is a security researcher and consultant at iSEC Partners. He specializes in web applications and web services security, network security, mobile application security, and architecture reviews. He has led numerous assessments for applications written in languages such as Java, .NET, PHP, and Objective C. In his spare time, Anson spends his time researching cloud systems, custom protocols, and embedded devices. He is passionate about red teaming and social engineering. Anson has also given multiple presentations both locally at NYC and at major conferences such as Black Hat and OWASP AppSec USA. He lives in New York City.
-During his employment with iSEC Partners, Jonathan has been tasked with a variety of engagements. Of which his memorable projects include performing assessments of a novel application container and custom kernel modules to be used for virtualization. Jonathan has also collaborated and presented on a tool called AWS Scout. Scout helps automate security assessments of several Amazon Web Services. The tool was showcased at Blackhat USA 2012 Arsenal and OWASP AppSec 2012 conference. Recently Jonathan gave a turbo talk at Blackhat USA 2013 on an embedded system called Twine, which covered analysis and findings of the research project. Jonathan graduated with a M.S. in Cyber Security from NYU: Polytechnic and a BBA in Infrastructure Assurance and Information Security from UTSA.
+Jeremy Spencer is a Security Consultant at iSEC Partners, an information security consulting firm that specializes in application, network, and mobile security. He has conducted multiple web, mobile, and network penetration tests and has successfully reported vulnerabilities in applications written in languages such as Java, PHP, Python, and Ruby.
 === Michael Weissbacher ===

@@ Line 34: / Line 34: @@
 === George Ehrhorn ===
 '''MathWorks'''<br/>
-George Ehrhorn is the IT Security Manager for MathWorks, a leading developer of mathematical computing software for engineers and scientists. George is responsible for the IT Security program at MathWorks including infrastructure security, risk assessment, and web application security. Prior to MathWorks George worked in IT Audit and Security functions at SunGard Data Systems, Ellucian, and Wayfair.com.
+George Ehrhorn is the IT Security Manager for MathWorks, a leading developer of mathematical computing software for engineers and scientists. George is responsible for the IT Security program at MathWorks including infrastructure security, risk assessment, and web application security. Prior to MathWorks George worked in IT Audit and Security functions at SunGard Data Systems, Ellucian, and Wayfair.com. Some of the nerdiest things about George are that he plays competitive bridge and that he was president of the math club in college. Twice.
 === Jack Mannino and Geller Bedoya ===