User:MichaelCoates - Revision history

MichaelCoates at 19:32, 23 July 2015

2015-07-23T19:32:00Z

MichaelCoates: /* History */

2014-01-21T19:47:13Z

‎History

MichaelCoates: /* Bio */

2013-12-04T20:54:40Z

‎Bio

MichaelCoates at 17:30, 10 September 2012

2012-09-10T17:30:17Z

MichaelCoates at 01:19, 25 October 2011

2011-10-25T01:19:20Z

MichaelCoates: /* Bio */

2011-08-08T22:45:45Z

‎Bio

MichaelCoates: /* History */

2011-08-08T22:44:02Z

‎History

Brennan at 20:29, 13 June 2011

2011-06-13T20:29:01Z

MichaelCoates at 23:20, 22 May 2011

2011-05-22T23:20:35Z

MichaelCoates: /* History */

2011-05-19T00:40:18Z

‎History

@@ Line 1: / Line 1: @@
 List of all edits to the OWASP wiki: [[:Special:Contributions/MichaelCoates|click here]].
-'''Michael Coates''' - [https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#Global_Board_Members Chairman of the Board]
+'''Michael Coates''' - [https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#Global_Board_Members Global Board Member]
 [[Image:MichaelCoates-OWASP.jpg|100px]]

@@ Line 56: / Line 56: @@
 A bit more in my own words...
-Today I work at Mozilla, a company of less then 750 people with a massive footprint with over 450 million users. Here I'm responsible for the security of Firefox, all of our web applications, servers and infrastructure. This includes threat modeling, secure design, training, testing and continual security maintenance.  Security can be tough, and perhaps one of the most interesting challenges is designing security solutions that scale and are usable to such a massive number of people.
+My day job is at Shape Security - an exciting startup in the heart of silicon valley. Here we're evaluating how applications are compromised and building new approaches to fundamentally change the model of defending applications. This is an exciting role where I focus on the secure design of our product and also evaluating the threat space to educate and understand risks facing large applications.
 Security is what I do. Like many of us in the security industry, this is more than just a means of employment, it's a hobby and a passion.  Throughout my professional career I've had the opportunity to assess and secure a wide variety of systems.  Straight out of college my career started in the risk division of a CPA firm. With a focus on financial institutions, our security team performed traditional no knowledge black box penetration assessments, internal network assessments, and even social engineering.  Some of my best security stories involve the stories and persona I invented in order to talk my way into the bank's vault or server room (all part of the approved engagement of course).

@@ Line 41: / Line 41: @@
 ==Bio==
-Michael Coates is currently the Director of Security Assurance at Mozilla. In this role he leads a team that is responsible for the security lifecycle of Firefox, Mozilla web applications, the protection of Mozilla's infrastructure and sensitive user data.  Michael holds a Master's degree in computer security from DePaul University and a Bachelor of Science degree in computer science from the University of Illinois.
+Michael Coates is the Chairman of the OWASP board. In addition, he is the creator of OWASP AppSensor, a project dedicated to creating attack aware applications that leverage real time detection and response capabilities.
-Michael Coates has extensive experience in application security, security code review and penetration assessments. He has conducted hundreds of security assessments for financial, enterprise and cellular customers worldwide.   Michael is an active leader in OWASP since 2008. He is the creator and leader of the AppSensor project, a project to create attack aware applications that leverage real time detection and response capabilities, and is a recognized contributor to the 2010 OWASP Top 10. He is a frequent speaker at security conferences including numerous OWASP conferences in US and Europe, the Chicago Thotcon conference, and has provided application security training for BlackHat and many enterprises.
+Michael is also the Director of Product Security at Shape Security, a Silicon Valley startup developing an entirely new type of web security product to protect web sites against modern attacks.
 ==History==

@@ Line 41: / Line 41: @@
 ==Bio==
-Michael Coates is currently in charge of the Infrastructure Security team at Mozilla. In this role he leads a team that is responsible for the security lifecycle of Mozilla web applications, the protection of Mozilla's infrastructure and sensitive user data.  Michael holds a Master's degree in computer security from DePaul University and a Bachelor of Science degree in computer science from the University of Illinois.
+Michael Coates is currently the Director of Security Assurance at Mozilla. In this role he leads a team that is responsible for the security lifecycle of Firefox, Mozilla web applications, the protection of Mozilla's infrastructure and sensitive user data.  Michael holds a Master's degree in computer security from DePaul University and a Bachelor of Science degree in computer science from the University of Illinois.
 Michael Coates has extensive experience in application security, security code review and penetration assessments. He has conducted hundreds of security assessments for financial, enterprise and cellular customers worldwide.   Michael is an active leader in OWASP since 2008. He is the creator and leader of the AppSensor project, a project to create attack aware applications that leverage real time detection and response capabilities, and is a recognized contributor to the 2010 OWASP Top 10. He is a frequent speaker at security conferences including numerous OWASP conferences in US and Europe, the Chicago Thotcon conference, and has provided application security training for BlackHat and many enterprises.
@@ Line 49: / Line 49: @@
 A bit more in my own words...
-Today I work at Mozilla, a company of less then 500 people with a massive footprint with over 450 million users. Here I'm responsible for the security of all of our web applications, servers and infrastructure. This includes threat modeling, secure design, training, testing and continual security maintenance.  Security can be tough, and perhaps one of the most interesting challenges is designing security solutions that scale and are usable to such a massive number of people.
+Today I work at Mozilla, a company of less then 750 people with a massive footprint with over 450 million users. Here I'm responsible for the security of Firefox, all of our web applications, servers and infrastructure. This includes threat modeling, secure design, training, testing and continual security maintenance.  Security can be tough, and perhaps one of the most interesting challenges is designing security solutions that scale and are usable to such a massive number of people.
 Security is what I do. Like many of us in the security industry, this is more than just a means of employment, it's a hobby and a passion.  Throughout my professional career I've had the opportunity to assess and secure a wide variety of systems.  Straight out of college my career started in the risk division of a CPA firm. With a focus on financial institutions, our security team performed traditional no knowledge black box penetration assessments, internal network assessments, and even social engineering.  Some of my best security stories involve the stories and persona I invented in order to talk my way into the bank's vault or server room (all part of the approved engagement of course).

@@ Line 1: / Line 1: @@
 List of all edits to the OWASP wiki: [[:Special:Contributions/MichaelCoates|click here]].
-'''Michael Coates'''
+'''Michael Coates''' - [https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#Global_Board_Members Chairman of the Board]
 [[Image:MichaelCoates-OWASP.jpg|100px]]
@@ Line 14: / Line 14: @@
 ==OWASP Involvement==
 [[:Category:OWASP_AppSensor_Project|AppSensor]]  - Project Lead, project started Summer of Code 2008

← Older revision		Revision as of 20:29, 13 June 2011
Line 1:		Line 1:
		+	List of all edits to the OWASP wiki: [[:Special:Contributions/MichaelCoates\|click here]].
		+
	'''Michael Coates'''		'''Michael Coates'''

← Older revision		Revision as of 23:20, 22 May 2011
Line 55:		Line 55:

	Don't get me wrong, the deep dive into the technical items is great. I've done it for years. But the key item has been translating these technical issues into the overall risk to the business and users. Managing risk is the driving factor for everything that we end up doing in security.		Don't get me wrong, the deep dive into the technical items is great. I've done it for years. But the key item has been translating these technical issues into the overall risk to the business and users. Managing risk is the driving factor for everything that we end up doing in security.
		+
		+	=OWASP Board Candidate 2011=
		+
		+	'''My Vision For OWASP'''
		+
		+	Technology is changing at a rapid pace and security plays a vital role in the technology ecosystem. Security should not be seen as a blockade to innovation; instead, security can be leveraged to allow our technology to do more than we ever realized. OWASP is well poised to provide the advanced security knowledge, tools and training to empower companies to integrate security as a product differentiator and impetus for technology advancement.
		+
		+	My vision for OWASP includes a board that creates opportunities and acts as a catalyst for OWASP projects and the advancement of the OWASP mission. OWASP is powerful because of the massive expertise that we contain from all of our contributors around the world. I believe that the OWASP board should provide the necessary resources, technologies, funding and support for OWASP contributors to be successful in growing security technology, addressing security challenges and sharing these skills with the world.
		+
		+	In addition, I feel the OWASP board should work to help OWASP identify key challenges that should be focused upon in a planned period of time. The combination of addressing an identified security challenge and continued support for individual project growth will allow OWASP to both leverages our collective expertise and also support organic individual project growth. I believe this two-pronged approach will allow OWASP to continue to grow and create world-class security resources.
		+
		+	The following areas are key positions that I hold and represent the direction I wish to pursue on the OWASP board:
		+
		+	* '''Breaking out of the Echo Chamber''': OWASP should focus on working with people that have never heard of OWASP before. I plan to build the necessary presentations, tools and funding to get OWASP members at college campuses and developer conferences to teach OWASP materials.
		+
		+	* '''Funding''': OWASP is a non-profit and is powered by our mission and our volunteers. However, we can do more if we have the necessary resources to dream big. I plan to pursue grants and funding that enable OWASP to do more to spread our knowledge and advance our mission.
		+
		+	* '''Integration with Enterprises''': As a security professional employed at a major technology company I wish to further expand OWASP's involvement with corporate entities to address the core risks and challenges they are facing. This involves sitting down with these industries through our global committees and identifying their needs and how we can help meet them.
		+
		+	* '''Community and Open''': I strongly believe in the O in OWASP. Like the web, security should be open and available to all. The power of OWASP lies in the individuals that donate their time and skills. I plan to grow our community and identify ways we can further strengthen the worldwide community.

← Older revision		Revision as of 00:40, 19 May 2011
Line 54:		Line 54:
	I was fortunate enough to land a spot in a top-notch application security consulting firm. With this company I was able to focus every day on threat modeling, code review and web application penetration assessments for the most critical applications in the world. From working on major financial systems to voting devices, I had a chance to really see it all.		I was fortunate enough to land a spot in a top-notch application security consulting firm. With this company I was able to focus every day on threat modeling, code review and web application penetration assessments for the most critical applications in the world. From working on major financial systems to voting devices, I had a chance to really see it all.

−	Don't get me wrong, the deep dive into the technical items is great. I've done it for years. But the key has been ~~bringing that up to~~ overall risk to the business. Managing risk is the driving factor for ~~everyone~~ that we end up doing.	+	Don't get me wrong, the deep dive into the technical items is great. I've done it for years. But the key item has been translating these technical issues into the overall risk to the business and users. Managing risk is the driving factor for everything that we end up doing in security.