2017 BASC Speakers - Revision history

Tom Conner at 15:52, 13 October 2017

2017-10-13T15:52:54Z

Tom Conner at 14:15, 13 October 2017

2017-10-13T14:15:23Z

Tom Conner: formatting

2017-09-30T19:37:57Z

formatting

Tom Conner: more speakers

2017-09-30T19:36:59Z

more speakers

Tom Conner: more speaker

2017-09-30T19:34:10Z

more speaker

Tom Conner: 3 speakers

2017-09-30T19:31:05Z

3 speakers

Tom Conner: start speaker page

2017-09-30T19:25:39Z

start speaker page

New page

{{2017_BASC:Header_Template | Speakers/Trainers/Panelists}}

=== Matt Cheung ===
'''Veracode'''<br/>
Matt Cheung is a Quality Assurance Engineer for the static analysis
engine at Veracode. His first practical introduction to modern
cryptography was from an internship during grad school where he worked
on additively homomorphic encryption and secure multiparty computation.
In the years since, he has developed an interest in how cryptography
does and doesn't work. Matt spoke last year at BASC on the topic of
cryptography as well as presented this workshop at the Crypto and
Privacy Village at DEFCON 24.

{{2017_BASC:Footer_Template | Speakers}}

@@ Line 16: / Line 16: @@
 Anirudh Duggal is a graduate candidate at Northeastern University who works with Philips Healthcare. He works on securing medical devices and consumer products. He has around 5 years of experience in the Information Security domain. He has a keen interest in securing and breaking medical devices and infrastructure and has presented his research around the topic at conferences like Blackhat 2016 (Las Vegas), Hack In The Box (Amsterdam), Positive Hack Days (Moscow), Nullcon (Goa), Hacks in Taiwan (Taipei), CoCon (Kochi), Ground Zero (Delhi).
 Anirudh also leads the ISSA, Northeastern University chapter as the chapter President and conducts dialogues and training on Cyber security in general. Besides working on healthcare security, he has a keen interest in Sustainability and Music. He is often found biking around Boston looking for inspiration to his new music.
 === Devin Dwyer ===
@@ Line 48: / Line 44: @@
 '''Prevoty'''<br/>
 Joe Rozner (@jrozner) is a software engineer at Prevoty where he has built semantic analysis tools, language runtimes, generalized solutions to common vulnerability classes, and designed novel integration technology leveraging runtime memory patching. He has a passion for reverse engineering, exploitation, teaching, and sharing research with others.
 === Chris Smith ===
@@ Line 64: / Line 64: @@
 '''Northeastern University'''<br/>
 Roshan Thomas is a student of Northeastern University currently pursuing his Masters in Information Assurance. He is a SANS GIAC Certified Incident Handler with around 5 years of experience in the Information Security industry. He occassionally doubles as a bug bounty hunter and have been acknowledged by IBM, HP and HDFC Bank. He has presented in OWASP BASC 2016 on Android Penetration Testing.
 === Michael Weissbacher ===

@@ Line 17: / Line 17: @@
 Anirudh also leads the ISSA, Northeastern University chapter as the chapter President and conducts dialogues and training on Cyber security in general. Besides working on healthcare security, he has a keen interest in Sustainability and Music. He is often found biking around Boston looking for inspiration to his new music.
-=== Anurag Dwivedy ===
+=== Abhishek Singh ===
 '''Northeastern University'''<br/>
-Anurag Dwivedy is a Masters student in Information Assurance at the Northeastern University. Prior to moving to information security he used to work as a software developer. He is experienced in C#, C, C++, PowerShell, SQL, Perl, x86 Assembly and is familiar with the common applications used in banking & financial infrastructure. He has presented in OWASP BASC 2016 on Android Penetration Testing and in Source Boston 2017 on .NET Security Controls.
+Abhishek Singh is a Master's student for Information Assurance and Cyber Security at the Northeastern University. He has over 3 years of experience in Information Security industry. He is proficient with python, perl, bash programming languages. He has working experience in designing penetration testing and end point security testing labs.
 === Devin Dwyer ===

@@ Line 1: / Line 1: @@
 {{2017_BASC:Header_Template | Speakers/Trainers/Panelists}}
 === Stephen Allor ===
@@ Line 8: / Line 7: @@
 === Phil Barrows ===
 '''MEI Security'''<br/>
 === Pete Chestna ===
 '''Veracode'''<br/>
 Pete Chestna is Director of Developer Engagement at Veracode/CA, and he provides customers with practical advice on how to successfully roll out developer-centric application security programs. Relying on more than 10 years of direct AppSec practitioner experience as both a developer and development leader, Pete provides information on best practices amassed from personal experience in addition to working with Veracode’s 1,000+ global customers. He led Veracode’s transformation from Waterfall to Agile to DevOps and from monolith to microservice architecture. He is certified as both a scrum master and product owner. From his experience as both a practitioner and consultant, Pete has spoken internationally at both security and developer conferences on the topics of Application Security (AppSec), Agile and DevOps.
 === Anirudh Duggal ===
@@ Line 20: / Line 16: @@
 Anirudh Duggal is a graduate candidate at Northeastern University who works with Philips Healthcare. He works on securing medical devices and consumer products. He has around 5 years of experience in the Information Security domain. He has a keen interest in securing and breaking medical devices and infrastructure and has presented his research around the topic at conferences like Blackhat 2016 (Las Vegas), Hack In The Box (Amsterdam), Positive Hack Days (Moscow), Nullcon (Goa), Hacks in Taiwan (Taipei), CoCon (Kochi), Ground Zero (Delhi).
 Anirudh also leads the ISSA, Northeastern University chapter as the chapter President and conducts dialogues and training on Cyber security in general. Besides working on healthcare security, he has a keen interest in Sustainability and Music. He is often found biking around Boston looking for inspiration to his new music.
 === Anurag Dwivedy ===
@@ Line 41: / Line 36: @@
 '''Robert Hurlbut Consulting Services'''<br/>
 Robert Hurlbut, based in Enfield, CT, is a software security consultant and trainer. Robert is a Microsoft MVP for Developer Technologies and Security and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in software security, software architecture, and software development. He speaks at user groups, national and international conferences, and provides training for many clients. You can follow Robert on his blog at https://roberthurlbut.com/blog and on Twitter at https://twitter.com/roberthurlbut and co-hosting on the Application Security Podcast at https://www.appsecpodcast.org.
 === Patrick Laverty ===
 '''Rapid7'''<br/>
 Patrick Laverty has been leading the Rhode Island chapter of OWASP since April 2013, and he recently restarted the DefCon401 group in Providence. He works for Rapid7 as a penetration tester with a preference for web applications and teaches Rapid7's Application Assault web pentesting course. He worked at a university building web applications for 12 years, helped out with Rhode Island and Boston Security BSides conferences. Loves cookies. Twitter: @plaverty9
 === Chris Poulin ===
@@ Line 55: / Line 48: @@
 '''Prevoty'''<br/>
 Joe Rozner (@jrozner) is a software engineer at Prevoty where he has built semantic analysis tools, language runtimes, generalized solutions to common vulnerability classes, and designed novel integration technology leveraging runtime memory patching. He has a passion for reverse engineering, exploitation, teaching, and sharing research with others.
 === Chris Smith ===
@@ Line 64: / Line 56: @@
 '''MEI Security'''<br/>
 Vik Solem takes physical and information security seriously, bringing lessons learned from over 30 years experience in IT at such firms as BBN, AtStake, Symantec, and Tufts University. Throughout his career, Vik, a CISSP, has worked passionately on cryptanalysis, forensics, comprehensive risk assessments, vulnerability identification & mitigation, “white hat” penetration testing, security policies, and other aspects of information security in our constantly evolving threatscape. He has presented numerous times on cost-effective security best practices for small and medium sized businesses at client locations and regional conferences. Vik is a contributor to the security related organizations ASIS and Infragard, and organizes the New England Small Business Security Meetup, which meets monthly.
 === Robert Thau ===
@@ Line 77: / Line 68: @@
 '''Northeastern University'''<br/>
 Michael Weissbacher is a PhD student and Research Assistant at the SecLab of Northeastern University. His research interests are focused on the security of web applications on both client and server side.
 === April Wright ===
 '''Verizon Wireline'''<br/>
 April C. Wright is a Senior Security and Compliance Manager for Verizon Wireline, building SDLC program maturity, implementing eGRC, spearheading threat intelligence, and performing risk reduction with a vengeance via leadership of comprehensive security programs for massive global infrastructures. She is a hacker who has spent the last 25 years as a generalist, breaking, making, fixing, and defending all the things, while playing roles on offensive, defensive, operational, and development teams throughout her career. Specializing in seemingly nothing (except maybe learning about everything in the hope of sharing and employing knowledge), April has collected dozens of certifications to add letters at the end of her name, from Social Engineering to Cloud Security to First Aid to Photography. She once read on the interwebs that researchers at the University of North Carolina released a comprehensive report in 2014 confirming that she is the “most significant and interesting person currently inhabiting the earth”, so it must be true.
 {{2017_BASC:Footer_Template | Speakers}}

@@ Line 41: / Line 41: @@
 '''Robert Hurlbut Consulting Services'''<br/>
 Robert Hurlbut, based in Enfield, CT, is a software security consultant and trainer. Robert is a Microsoft MVP for Developer Technologies and Security and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in software security, software architecture, and software development. He speaks at user groups, national and international conferences, and provides training for many clients. You can follow Robert on his blog at https://roberthurlbut.com/blog and on Twitter at https://twitter.com/roberthurlbut and co-hosting on the Application Security Podcast at https://www.appsecpodcast.org.
 {{2017_BASC:Footer_Template | Speakers}}