User:Stivalet - Revision history

Stivalet at 09:37, 15 July 2018

2018-07-15T09:37:18Z

Stivalet at 10:54, 29 January 2018

2018-01-29T10:54:13Z

Stivalet: /* Bertrand STIVALET */

2016-06-22T13:38:29Z

‎Bertrand STIVALET

Stivalet: /* Bertrand STIVALET */

2016-06-22T13:37:46Z

‎Bertrand STIVALET

Stivalet at 20:28, 31 March 2016

2016-03-31T20:28:46Z

Stivalet at 15:45, 28 March 2016

2016-03-28T15:45:29Z

KateHartmann: Creating user page for new user.

2016-03-28T14:15:18Z

Creating user page for new user.

New page

I'm currently working as a Guest Researcher at the National Institute of Standards and Technology. Within the Static Analysis Tool Exposition (SATE) project, I'm conducting researches on how source code security analyzers react facing a large range of vulnerabilities. My job consists of studying tools' strengths and weaknesses in order to help improve the current state of the static code analysis field.

My areas of expertise are:
+ Vulnerability Assessment and Research
+ Static and Dynamic Application Security Testing
+ Software Assurance

@@ Line 2: / Line 2: @@
 == Bertrand STIVALET ==
-I'm a Security Engineer/Pentester working for http://www.immunIT.ch[http://www.immunIT.ch].
+I'm currently working as '''ICT Security Expert''' for the [https://www.icrc.org International Committee of the Red Cross] (ICRC) in Geneva.  Before accepting this new challenge, I had the great opportunity to be a '''Pentester''' for 2 years in Switzerland. I also worked 5 years for the [https://www.nist.gov National Institute of Standards and Technology] (NIST) where I was conducting researches  on how source code security analyzers react facing a large range of vulnerabilities with different complexities (see Publications section below). I was part o the SAMATE Team where my role consisted of studying tools' strengths and weaknesses in order to help improving the current state of the static code analysis field. I graduated in 2011 from TELECOM Nancy, a leading engineering school at the University of Lorraine in France for a Master's degree in Computer Science with a minor in networking and security.
 My areas of expertise are:
-  + Penetration Testing
+  + Penetration Testing & Security Audit
   + Vulnerability Assessment and Research
   + Static and Dynamic Application Security Testing
 My personal projects demonstrate my engagement to the IT security world. In that regard I have produced the PHP/C# Vulnerability Test Suite and the A Bug A Week Challenge.
-My involvement in the IT security community around Washington DC is significant. I attend meetings and forums on a regular basis and have also helped organizing the 2015 B-Sides conference in Washington DC.
+My involvement in the IT security community around Geneva and Washington DC is significant. I attend meetings and forums on a regular basis and have also helped organizing the 2015 B-Sides conference in Washington DC.
 More information:
@@ Line 21: / Line 18: @@
 * NIST publications https://www.nist.gov/people/bertrand-stivalet
 * Research Gate https://www.researchgate.net/profile/Bertrand_Stivalet
+Contact:
 _Bertrand STIVALET

@@ Line 15: / Line 15: @@
 My involvement in the IT security community around Washington DC is significant. I attend meetings and forums on a regular basis and have also helped organizing the 2015 B-Sides conference in Washington DC.
-More information => http://stivalet.ch[http://stivalet.ch]
+More information:
 _Bertrand STIVALET

@@ Line 15: / Line 15: @@
 My involvement in the IT security community around Washington DC is significant. I attend meetings and forums on a regular basis and have also helped organizing the 2015 B-Sides conference in Washington DC.
-More information => https://stivalet.ch[https://stivalet.ch]
+More information => http://stivalet.ch[http://stivalet.ch]
 _Bertrand STIVALET

@@ Line 2: / Line 2: @@
 == Bertrand STIVALET ==
-I'm currently working as a Security Researcher at the National Institute of Standards and Technology. Within the Static Analysis Tool Exposition project, I'm conducting researches on how source code security analyzers react facing a large range of vulnerabilities. My job consists of studying tools' strengths and weaknesses in order to help improve the current state of the static code analysis field.
+I'm a Security Engineer/Pentester working for http://www.immunIT.ch[http://www.immunIT.ch].
 My areas of expertise are:
   + Vulnerability Assessment and Research
   + Static and Dynamic Application Security Testing
@@ Line 10: / Line 13: @@
 My personal projects demonstrate my engagement to the IT security world. In that regard I have produced the PHP/C# Vulnerability Test Suite and the A Bug A Week Challenge.
-I'm also an Ethical Hacking and Pentesting enthusiast. I'm currently self-studying to pass the CEH and CompTIA Security+ certifications. My involvement in the IT security community around Washington DC is significant. I attend meetings and forums on a regular basis and have also helped organizing the 2015 B-Sides conference in Washington DC.
+More information => https://stivalet.ch[https://stivalet.ch]
 _Bertrand STIVALET

@@ Line 1: / Line 1: @@
 I'm currently working as a Guest Researcher at the National Institute of Standards and Technology. Within the Static Analysis Tool Exposition (SATE) project, I'm conducting researches on how source code security analyzers react facing a large range of vulnerabilities. My job consists of studying tools' strengths and weaknesses in order to help improve the current state of the static code analysis field.
 My areas of expertise are:
@@ Line 5: / Line 9: @@
 + Static and Dynamic Application Security Testing
 + Software Assurance