2018 BASC Speakers - Revision history

Laberdale: Fixed spacing

2018-10-22T21:45:56Z

Fixed spacing

Laberdale: Added Phil Barrows, John Hammond, and Vik Solem bios

2018-10-22T21:43:23Z

Added Phil Barrows, John Hammond, and Vik Solem bios

Laberdale: Added Erik Costlow.

2018-10-04T21:10:12Z

Added Erik Costlow.

Laberdale: Added another speaker.

2018-10-04T18:08:34Z

Added another speaker.

Laberdale: Added Milan Shah

2018-10-02T21:09:10Z

Added Milan Shah

Laberdale: Added Katie Knowles.

2018-10-02T17:27:39Z

Added Katie Knowles.

Laberdale: Added a couple more speakers

2018-10-02T14:09:18Z

Added a couple more speakers

Laberdale at 04:06, 2 October 2018

2018-10-02T04:06:25Z

Laberdale: Creating the 2018 BASC Speakers page

2018-10-02T04:04:39Z

Creating the 2018 BASC Speakers page

New page

{{2018_BASC:Header_Template | Speakers/Trainers}}

=== Brock Allen ===
'''Solliance, Inc.''' 
Currently Brock is an independent consultant specializing in .NET, web development, and web-based security with 25 years of industry experience. Brock is the co-author of many security related open source frameworks including IdentityServer, which is a popular open source OpenID Connect and OAuth2 framework for ASP.NET Core. He also frequently posts to the ASP.NET forums, is a MVP for ASP.NET/IIS, and a contributor to the ASP.NET platform.

=== Stephen Allor ===
'''Secure Code Warrior''' 
Steve Allor is Director of the Americas for Secure Code Warrior, a global security company that makes software development better and more secure. Since joining Secure Code Warrior soon after its inception, Steve has been passionate about helping large global enterprises in the finance, technology and telecommunications industries to scale an engaging, interactive learning approach, enabling these organizations to rally their developers as the first line of defense in their cybersecurity strategies. Over the past 20 years, Steve has held various executive leadership roles in sales, business development and marketing for technology companies, where his focus was on enabling customer success as he helped scale and grow the business. Steve has earned a Bachelor of Science degree in Marketing at Boston College Carroll School of Management, as well as a Master of Business Administration at Harvard. LinkedIn: https://www.linkedin.com/in/stephenallor

=== Philippe Arteau ===
'''GoSecure''' 
Philippe is a security researcher working for GoSecure. His research is focused on Web application security. His past work experience includes pentesting, secure code review and software development. He is the author of the widely-used Java static analysis tool Find Security Bugs. He is also a contributor to the static analysis tool for .NET called Security Code Scan. He built many plugins for Burp and ZAP proxy tools: Retire.js, Reissue Request Scripter, CSP Auditor and many others. He presented at several conferences including Black Hat Arsenal, ATLSecCon, NorthSec, Hackfest (QC), 44CON and JavaOne.

=== Phil Barrows ===
'''MEI Security''' 

=== Bryan Brannigan ===
'''Upserve''' 
Bryan Brannigan is a business-minded technologist and leader of all things infosec at Upserve. He is an advocate of defensible security practices, a supporter of reality, and practitioner of common sense. Bryan has worked in infosec for 9 years in roles that include security operations, incident response, data loss, architecture, and management.

=== Angelo Castigliola ===
'''Optiv''' 
Angelo is a Principal Consultant with Optiv Security. Angelo has over 15 years of experience in Security, Consulting, and Programming. He has had a lifelong interest in computer security. Angelo was presented a Cybersecurity award from the Department of Homeland Security for his contributions to President Obama’s Cyberspace Policy Review and The Comprehensive National Cybersecurity Initiative. His work as a Cyber Security expert has been recognized by Maine U.S. Senator Susan Collins. The Cyber Security Grassroots initiative developed by Angelo “will make a difference in our communities and in our state,” Senator Collins said.

=== Deidre Diamond ===
'''CyberSN''' 
Deidre Diamond is the Founder/CEO of national cyber security staffing, research and technology company CyberSN (cybersn.com), the Founder of #brainbabe (brainbabe.org) and an ICMCP Strategic Board Member. Deidre was previously the CEO of Percussion Software, the first VP of Sales at Rapid7 (NYSE:RPD) and the VP of Sales at Motion Recruitment.

=== Brent Dukes ===
''' ''' 
Brent Dukes is a systems and security engineer with 14 years' experience working with radio communications and IoT systems from hardware through SaaS. He has experience providing electronics reverse engineering training, but wants everyone to know he enjoys hacking ALL the things when he's not gearing up for his next CTF!

=== Andrew Gronosky ===
'''Pegasystems''' 
Andrew Gronosky is a lifetime OWASP member who has been active in the Boston chapter since 2009. As a research scientist at BBN Technologies he co-developed the patented software Crumple Zone resilient security architecture, and was security architect for the DoD-accredited TAK server. Andrew is currently a Principal Software Engineer at Pegasystems, where he is leading the threat modeling initiative.

=== Robert Hurlbut ===
'''Bank of America''' 
Robert Hurlbut, is a Threat Modeling Architect / Lead at Bank of America. Robert is a Microsoft MVP for Developer Security and Technologies and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in secure security, software architecture, and software development. He speaks at user groups, national and international conferences, and has provided training for many companies in the past. Robert is also a co-host of the Application Security Podcast at - follow on Twitter @AppSecPodcast .

=== Chris Olson ===
'''The Media Trust''' 
Chris Olson co-founded The Media Trust and continues to shape its vision and direction. Prior to founding the company, Olson served in leadership positions for various high tech and ad technology companies. He is a board member of the Interactive Advertising Bureau's Advertising Technology Council and regularly speaks about cybersecurity trends and best practices at industry events, including events such as Black Hat, Evanta, FS-ISAC and RSA. Olson earned his bachelor’s degree from Georgetown University, Washington, DC and an Executive MBA from the New York University Stern School of Business.

=== Kristen Pascale ===
'''Dell''' 
Kristen Pascale has worked as part of the Dell PSIRT for over 6 years. Prior to that, she worked at Fidelity Investments for 14 years supporting implementations and data management in the 401(k) retirement sector . She spends most of her spare time with her four boys. She is an avid runner and enjoys travelling with her family.

=== Vik Solem ===
'''MEI Security''' 

=== Tania Ward ===
'''Dell''' 
Tania Ward has worked as part of Dell PSIRT for over 5 years. Prior to that, she had worked at Microsoft for just under 14 years working on products from SQL Server, Windows Live to Microsoft Office. In her spare time she volunteers as an EMT in her local town as well as a ski patroller at Wachusett Mountain Ski Resort.

=== Eitan Worcel ===
'''IBM''' 
Eitan Worcel was an experienced developer with years of experience in the area of Application Security testing. A few years ago, Eitan crossed sides from the development organization into the product management world and now is leading the Application Security on Cloud service which helps users to secure their web or mobile applications. Eitan has worked closely with a wide range of customers assisting them in their quest to build secured web and mobile applications. He had participated in panels and presented in security events around the world, along with writing a numerous of blogs on the Application Security topic.

{{2018_BASC:Footer_Template | Speakers/Trainers}}

@@ Line 48: / Line 48: @@
 === Brent Dukes ===
-''' '''<br/>
 Brent Dukes is a systems and security engineer with 14 years' experience working with radio communications and IoT systems from hardware through SaaS. He has experience providing electronics reverse engineering training, but wants everyone to know he enjoys hacking ALL the things when he's not gearing up for his next CTF!
@@ Line 100: / Line 100: @@
 '''MEI Security'''<br/>
 Vik Solem takes physical and information security seriously, bringing lessons learned from over 30 years experience in IT at such firms as BBN, AtStake, Symantec, and Tufts University. Throughout his career, Vik, a CISSP, has worked passionately on cryptanalysis, forensics, comprehensive risk assessments, vulnerability identification & mitigation, “white hat” penetration testing, security policies, and other aspects of information security in our constantly evolving threatscape. He has presented numerous times on cost-effective security best practices for small and medium sized businesses at client locations and regional conferences. Vik is a contributor to the security related organizations ASIS and InfraGard, and organizes the monthly New England Small Business Security Meetup.
 === Tania Ward ===

@@ Line 18: / Line 18: @@
 === Phil Barrows ===
 '''MEI Security'''<br/>
@@ Line 53: / Line 55: @@
 '''Pegasystems'''<br/>
 Andrew Gronosky is a lifetime OWASP member who has been active in the Boston chapter since 2009. As a research scientist at BBN Technologies he co-developed the patented software Crumple Zone resilient security architecture, and was security architect for the DoD-accredited TAK server. Andrew is currently a Principal Software Engineer at Pegasystems, where he is leading the threat modeling initiative.
@@ Line 92: / Line 99: @@
 === Vik Solem ===
 '''MEI Security'''<br/>
+Vik Solem takes physical and information security seriously, bringing lessons learned from over 30 years experience in IT at such firms as BBN, AtStake, Symantec, and Tufts University. Throughout his career, Vik, a CISSP, has worked passionately on cryptanalysis, forensics, comprehensive risk assessments, vulnerability identification & mitigation, “white hat” penetration testing, security policies, and other aspects of information security in our constantly evolving threatscape. He has presented numerous times on cost-effective security best practices for small and medium sized businesses at client locations and regional conferences. Vik is a contributor to the security related organizations ASIS and InfraGard, and organizes the monthly New England Small Business Security Meetup.
 === Tania Ward ===

@@ Line 33: / Line 33: @@
 '''Optiv'''<br/>
 Angelo is a Principal Consultant with Optiv Security. Angelo has over 15 years of experience in Security, Consulting, and Programming. He has had a lifelong interest in computer security. Angelo was presented a Cybersecurity award from the Department of Homeland Security for his contributions to President Obama’s Cyberspace Policy Review and The Comprehensive National Cybersecurity Initiative. His work as a Cyber Security expert has been recognized by Maine U.S. Senator Susan Collins. The Cyber Security Grassroots initiative developed by Angelo “will make a difference in our communities and in our state,” Senator Collins said.
@@ Line 58: / Line 63: @@
 '''MWR InfoSecurity'''<br/>
 Katie Knowles is an information security practitioner with a love of exploration. As a Security Consultant with MWR InfoSecurity, she serves as a penetration tester to assure the security of client networks and applications as a penetration tester. Her previous work in security engineering grants her a passion to ensure the security teams she supports are equipped to quickly reduce risk and support the new business projects securely. Katie holds OSCP and GPEN certifications, and earned her BS in Electrical Engineering at RIT. She firmly believes in growing alongside her peers, contributing to strong teams, and good time spent on intriguing projects.
 === Chris Olson ===

← Older revision		Revision as of 18:08, 4 October 2018
Line 67:		Line 67:
	'''Dell'''<br/>		'''Dell'''<br/>
	Kristen Pascale has worked as part of the Dell PSIRT for over 6 years. Prior to that, she worked at Fidelity Investments for 14 years supporting implementations and data management in the 401(k) retirement sector . She spends most of her spare time with her four boys. She is an avid runner and enjoys travelling with her family.		Kristen Pascale has worked as part of the Dell PSIRT for over 6 years. Prior to that, she worked at Fidelity Investments for 14 years supporting implementations and data management in the 401(k) retirement sector . She spends most of her spare time with her four boys. She is an avid runner and enjoys travelling with her family.
		+
		+
		+	=== Dzung Pham ===
		+	'''Visa, Inc.'''<br/>
		+	Dzung is a mobile security engineer at Visa. She discovered the world of cybersecurity in the Boston Security Meetup and has been hooked every since. Before Visa, she worked as a security consultant for Synopsys.

← Older revision		Revision as of 21:09, 2 October 2018
Line 72:		Line 72:
	'''Dun & Bradstreet'''<br/>		'''Dun & Bradstreet'''<br/>
	Josh has always had an interest in computer hacking and application security. From using tools like Cheat Engine, he moved towards the application development track and eventually IT Security. As his role evolved from Identity and Access Management, he took up arms in the Application Security realm where his core focus is on conducting manual ethical hacking while aiming to become a breaker of all things!		Josh has always had an interest in computer hacking and application security. From using tools like Cheat Engine, he moved towards the application development track and eventually IT Security. As his role evolved from Identity and Access Management, he took up arms in the Application Security realm where his core focus is on conducting manual ethical hacking while aiming to become a breaker of all things!
		+
		+
		+	=== Milan Shah ===
		+	'''Uptycs, Inc.'''<br/>
		+	Milan is a serial entrepreneur with a track record of building and leading cutting edge cybersecurity technology companies. Prior to co-founding Uptycs, Milan was SVP of Products and Engineering at Core Security, where he formulated a vision for a new class of automated pen testing solutions. Milan has also served as VP of Engineering at CA Technologies and IMlogic, which was successfully acquired by Symantec. The first part of his career was spent as a member of the early Windows NT development team, and he was a key architect of Microsoft Exchange. Milan holds a Masters in EECS degree from MIT, and a Bachelors in EECS from University of Illinois, Urbana.

← Older revision		Revision as of 17:27, 2 October 2018
Line 54:		Line 54:
	Robert Hurlbut, is a Threat Modeling Architect / Lead at Bank of America. Robert is a Microsoft MVP for Developer Security and Technologies and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in secure security, software architecture, and software development. He speaks at user groups, national and international conferences, and has provided training for many companies in the past. Robert is also a co-host of the Application Security Podcast at - follow on Twitter @AppSecPodcast .		Robert Hurlbut, is a Threat Modeling Architect / Lead at Bank of America. Robert is a Microsoft MVP for Developer Security and Technologies and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in secure security, software architecture, and software development. He speaks at user groups, national and international conferences, and has provided training for many companies in the past. Robert is also a co-host of the Application Security Podcast at - follow on Twitter @AppSecPodcast .

		+
		+	=== Katie Knowles ===
		+	'''MWR InfoSecurity'''<br/>
		+	Katie Knowles is an information security practitioner with a love of exploration. As a Security Consultant with MWR InfoSecurity, she serves as a penetration tester to assure the security of client networks and applications as a penetration tester. Her previous work in security engineering grants her a passion to ensure the security teams she supports are equipped to quickly reduce risk and support the new business projects securely. Katie holds OSCP and GPEN certifications, and earned her BS in Electrical Engineering at RIT. She firmly believes in growing alongside her peers, contributing to strong teams, and good time spent on intriguing projects.

	=== Chris Olson ===		=== Chris Olson ===

@@ Line 4: / Line 4: @@
 '''Solliance, Inc.'''<br/>
 Currently Brock is an independent consultant specializing in .NET, web development, and web-based security with 25 years of industry experience. Brock is the co-author of many security related open source frameworks including IdentityServer, which is a popular open source OpenID Connect and OAuth2 framework for ASP.NET Core. He also frequently posts to the ASP.NET forums, is a MVP for ASP.NET/IIS, and a contributor to the ASP.NET platform.
 === Stephen Allor ===
 '''Secure Code Warrior'''<br/>
 Steve Allor is Director of the Americas for Secure Code Warrior, a global security company that makes software development better and more secure. Since joining Secure Code Warrior soon after its inception, Steve has been passionate about helping large global enterprises in the finance, technology and telecommunications industries to scale an engaging, interactive learning approach, enabling these organizations to rally their developers as the first line of defense in their cybersecurity strategies. Over the past 20 years, Steve has held various executive leadership roles in sales, business development and marketing for technology companies, where his focus was on enabling customer success as he helped scale and grow the business. Steve has earned a Bachelor of Science degree in Marketing at Boston College Carroll School of Management, as well as a Master of Business Administration at Harvard. LinkedIn: https://www.linkedin.com/in/stephenallor
 === Philippe Arteau ===
 '''GoSecure'''<br/>
 Philippe is a security researcher working for GoSecure. His research is focused on Web application security. His past work experience includes pentesting, secure code review and software development. He is the author of the widely-used Java static analysis tool Find Security Bugs. He is also a contributor to the static analysis tool for .NET called Security Code Scan. He built many plugins for Burp and ZAP proxy tools: Retire.js, Reissue Request Scripter, CSP Auditor and many others. He presented at several conferences including Black Hat Arsenal, ATLSecCon, NorthSec, Hackfest (QC), 44CON and JavaOne.
 === Phil Barrows ===
 '''MEI Security'''<br/>
 === Bryan Brannigan ===
 '''Upserve'''<br/>
 Bryan Brannigan is a business-minded technologist and leader of all things infosec at Upserve. He is an advocate of defensible security practices, a supporter of reality, and practitioner of common sense. Bryan has worked in infosec for 9 years in roles that include security operations, incident response, data loss, architecture, and management.
 === Angelo Castigliola ===
 '''Optiv'''<br/>
 Angelo is a Principal Consultant with Optiv Security. Angelo has over 15 years of experience in Security, Consulting, and Programming. He has had a lifelong interest in computer security. Angelo was presented a Cybersecurity award from the Department of Homeland Security for his contributions to President Obama’s Cyberspace Policy Review and The Comprehensive National Cybersecurity Initiative. His work as a Cyber Security expert has been recognized by Maine U.S. Senator Susan Collins. The Cyber Security Grassroots initiative developed by Angelo “will make a difference in our communities and in our state,” Senator Collins said.
 === Deidre Diamond ===
 '''CyberSN'''<br/>
 Deidre Diamond is the Founder/CEO of national cyber security staffing, research and technology company CyberSN (cybersn.com), the Founder of #brainbabe (brainbabe.org) and an ICMCP Strategic Board Member. Deidre was previously the CEO of Percussion Software, the first VP of Sales at Rapid7 (NYSE:RPD) and the VP of Sales at Motion Recruitment.
 === Brent Dukes ===
 ''' '''<br/>
 Brent Dukes is a systems and security engineer with 14 years' experience working with radio communications and IoT systems from hardware through SaaS. He has experience providing electronics reverse engineering training, but wants everyone to know he enjoys hacking ALL the things when he's not gearing up for his next CTF!
 === Andrew Gronosky ===
 '''Pegasystems'''<br/>
 Andrew Gronosky is a lifetime OWASP member who has been active in the Boston chapter since 2009. As a research scientist at BBN Technologies he co-developed the patented software Crumple Zone resilient security architecture, and was security architect for the DoD-accredited TAK server. Andrew is currently a Principal Software Engineer at Pegasystems, where he is leading the threat modeling initiative.
 === Robert Hurlbut ===
 '''Bank of America'''<br/>
 Robert Hurlbut, is a Threat Modeling Architect / Lead at Bank of America. Robert is a Microsoft MVP for Developer Security and Technologies and holds the (ISC)2 CSSLP security certification. Robert has 30 years of industry experience in secure security, software architecture, and software development. He speaks at user groups, national and international conferences, and has provided training for many companies in the past. Robert is also a co-host of the Application Security Podcast at - follow on Twitter @AppSecPodcast .
 === Chris Olson ===
 '''The Media Trust'''<br/>
 Chris Olson co-founded The Media Trust and continues to shape its vision and direction. Prior to founding the company, Olson served in leadership positions for various high tech and ad technology companies. He is a board member of the Interactive Advertising Bureau's Advertising Technology Council and regularly speaks about cybersecurity trends and best practices at industry events, including events such as Black Hat, Evanta, FS-ISAC and RSA. Olson earned his bachelor’s degree from Georgetown University, Washington, DC and an Executive MBA from the New York University Stern School of Business.
 === Kristen Pascale ===
 '''Dell'''<br/>
 Kristen Pascale has worked as part of the Dell PSIRT for over 6 years. Prior to that, she worked at Fidelity Investments for 14 years supporting implementations and data management in the 401(k) retirement sector . She spends most of her spare time with her four boys. She is an avid runner and enjoys travelling with her family.
 === Vik Solem ===
 '''MEI Security'''<br/>
 === Tania Ward ===
 '''Dell'''<br/>
 Tania Ward has worked as part of Dell PSIRT for over 5 years. Prior to that, she had worked at Microsoft for just under 14 years working on products from SQL Server, Windows Live to Microsoft Office. In her spare time she volunteers as an EMT in her local town as well as a ski patroller at Wachusett Mountain Ski Resort.
 === Eitan Worcel ===