Board Members

Jennifer Steffens
Board Member
 

As its CEO, Jennifer Steffens is responsible for all aspects of IOActive's North American business operations including sales, delivery, and finance as well as driving the company's strategic vision.  Steffens brings a wealth of industry and business experience to the company, having been an early member of several successful startups.

Earlier in her career, Steffens was a Director at Sourcefire, where she helped build and grow the business from $250K to over $35M run rate in just four years.  Working closely with the CTO, Steffens helped commerfialize the open source Snort technology and build several service offerings around the research initiatives.  Prior to joining IOActive, she came to Seattle to help the struggling startup GraniteEdge reinvent itself.  She spearheaded initiatives to restructure the company, and developed a product strategy to drive early market penetration that ultimately secured two additional rounds of funding.

With over 10 years of industry experience, Steffens has also held senior management positions at Ubizen, NFR Security, and StillSecure.  She graduated from Mary Washington University with a Bachelor of Science in Psychology.
  
Dr. Jose Nazario
Board Member
 

Dr. Jose Nazario is a Senior Security Researcher with Arbor Networks.  In this capacity, he is responsible for analyzing burgeoning Internet security threats, reverse enginnering malicious code, software development, and developing security mechanisms that are then distributed to Arbor's Peakflow platforms via the Active Threat Feed (ATF) threat detection service.

Dr. Nazario's research interests include large-scale Internet trends such as reachability and topology measurement, Internet-scale events such as DDoS attacks, botnets and worms, source code analysis tools, and data mining.  He is the author of the books, "Defense and Detection Strategies against Internet Worms" and "Secure Architectures with OpenBSD".  He earned a Ph.D.in biochemistry from Case Western Reserve University in 2002.  Prior to joining Arbor Networks, he was an independent security consultant.  Dr. Nazario regularly speaks at conferences worldwide, with past presentations at CanSecWest, PacSec, Blackhat, and NANOG.  He also maintains WormBlog.com, a site devoted to studying worm detection and defense research.

  
Matt Jonkman
Board Member
 

Matt brings over 10 years of security and entrepreneurial experience to the foundation. Matt is the founder of Emerging Threats, formerly known as Bleeding Snort/Bleeding Threats. Emerging Threats is NSF and Army Research Office Funded to maintain a public IDS Signature Ruleset. This makes Matt a consumer of the OISF Engine and an ideal person to lead the foundation. 

Matt Spent five years in the Army as an Air Traffic Control RADAR and Communications Tech, several years in Sprint Corporate Security and Banking security.He currently works for Metaflows under NSF grant funding as well as leading Emerging Threats and the OISF. Matt resides in Lafayette, Indiana.

  
Marc Norton
Board Member
 

Mr. Norton is a Project Lead at BAE Systems, manages a group of Security Analysts, and does Anomaly based IDS R&D with the NIDAR Intrusion Detection System.

Mr. Norton worked for six years as a Lead Developer and Team Lead for the Snort IDS project while at Sourcefire,Inc with multiple contributions to the Snort detection engine.

Mr. Norton worked as a Principle Developer on the Dragon IDS and built one of the first Gigabit IDS detection engines while at Enterasys,Inc.

Mr. Norton's other experience includes 18 years as an Aerospace Engineer and software developer performing Structural Dynamic Analysis and tool development on the Space Shuttle.

  
Stuart Wilson
Board Member
 

Stuart joined Endace Technology in December 2005 as VP Engineering, and now as CTO, is responsible for all product development.

Stuart managed the L4-7 Test program for Agilent's Data Networks Division (DND).  Stuart was responsible for the integration and operations of the recently acquired IP & people associated with Agilent's acquisition of L4-7 technology from Synthetic Networks Incorporated (SNI).

Prior to joining Endace Technology, Stuart worked at Hewett-Packar/Agilent Technologies.  Starting in 1997 as a research and development engineer designing high speed FPGA systems for communications test.  At his time at HP/Agilent, Stuart has managed several ground breaking products to market, notably Agilent's 40G RouterTest, delivering Layer-III 40G test capability to the market, and more recently, Agilent's NetworkTester product delivering application layer security test to the security device market.

Prior to that, Stuart worked at Philips Radio, designing custom radio communications systems, GEC Research in London as a custom ASIC designer in their VHSIC design labs, and for his own ASIC design company for 8 years.

Stuart was born in Melbourne, Australia in 1959 and holds a degree with Honours in Electronics & Communications Engineering from LaTrobe University in Melbourne, and a Postgraduate Degree in Management from the Melbourne Business School.

Core Management Team

 

Matt Jonkman
President
 

Matt brings over 10 years of security and entrepreneurial experience to the foundation. Matt is the founder of Emerging Threats, formerly known as Bleeding Snort/Bleeding Threats. Emerging Threats is NSF and Army Research Office Funded to maintain a public IDS Signature Ruleset. This makes Matt a consumer of the OISF Engine and an ideal person to lead the foundation. 

Matt Spent five years in the Army as an Air Traffic Control RADAR and Communications Tech, several years in Sprint Corporate Security and Banking security.He currently works for Metaflows under NSF grant funding as well as leading Emerging Threats and the OISF. Matt resides in Lafayette, Indiana.

  
Victor Julien
Lead Programmer
 

Victor has been active as a software developer in the infosec community for many years. He is the creator of the Vuurmuur firewall project, has been one of the developers at the Snort_inline IPS project. Victor has spent the last years doing contract development on Open Source security software including significant additions to Snort. At the end of 2007 he started development on the OISF codebase on which he now leads the development effort. Victor maintains a blog at http://www.inliniac.net/blog/ and uses twitter at http://twitter.com/inliniac Victor resides in Amsterdam, The Netherlands.

  
Will Metcalf
Lead QA
 

Will comes from the government and law enforcement IT Security sector with over nine years experience. In addition Will has had involvement with various open source projects over the years including snort_inline and maintains a blog at http://node5.blogspot.com. Will currently resides in Kansas City, Missouri.

  
Nathan Jimerson
Program Manager
 Nathan has over 10 years experience in IT Project Management and Systems Analysis.  In his role as project manager, Nathan will be working with all OISF employees and contractors managing task assignments, the project plan and participating in the documentation initiatives for the application.  Most recently his focus has been on government funded programs, he has managed projects funded by the NSF, SBA, DoD and more. Nathan resides in Redlands, California.
  

Josh Smith

Infrastructure

 

Josh is currently an undergraduate at Rochester Institute of Technology studying Information Security and Forensics.  During the summer, he works as an intern for VeriSign iDefense on the Malcode Operations team.  He is also heading up the RIT Honeynet Project Chapter.

  

 

Programming Team

Brian Rectanus
Programmer
 

Brian Rectanus (GCIA, GCIH) is the Director of Research Development at Breach Security, Inc. At Breach, he spends his time developing for and refining Web Application Firewalls, making them more efficient, easier to integrate with existing systems and more transparent to install. Brian also manages the open source ModSecurity Apache based Web Application Firewall project. He holds a BS in Computer Science from Kansas State University and has been developing, administering and securing large scale web sites for the past 10 years. Brian comes to the foundation as a timeshare from Breach Security. Brian resides in San Diego, California.

  
Breno Silva Pinto
Programmer
 Breno is a computer scientist with over 8 years experience in Information Technology, experienced with a wide range of software development techniques and languages, security systems and network technologies. Breno brings a deep mathematical education, supporting research and algorithm design for network anomaly detection mechanisms in high-speed networks. Breno is currently a computer incident response team member for the Telecom Industry in Latin America. Breno resides in Brasília, Brazil.
  
Anoop SaldanhaProgrammer
 Anoop has experience from RSA, Sasken, and on Mozilla through the Google summer of code program. Anoop's experience with the RSA Access manager, j2me apps on cell platforms, and automation frameworks is an invaluable addition to the team. Anoop resides in Mangalore, India.
  
Gurvinder Singh Dahiya
Programmer
 Gurvinder Singh has graduated from a double masters program in Security and Mobile Computing. He was a part of Erasmus Mundus - NordSecMob program and completed his double masters degree from the Norwegian University of Science and Technology, Trondheim, Norway and Helsinki University of Technology, Helsinki, Finland. His main research interests lie in network security and protocols. In past he has done similar work on network security during his master thesis. Currently he is also working on energy consumption of security protocols in a research project funded by Nokia. Gurvinder brings several very interesting theoretical detection methods to the project and a great deal of programming experience. Gurvinder resides in Helsinki, Finland.
  
Jason MacLulich
Programmer
 

Jason leads the Endace IDS team, with special interests in hardware acceleration for intrusion detection. Jason resides in Auckland, New Zealand

  
Jason Ish
Programmer
 Jason is a senior software developer at Endace with a focus on security applications.  Jason has a degree in computer science from the University of Saskatchewan and currently resides in Victoria, BC, Canada.
  
Kirby Kuehl
Programmer
 Kirby Kuehl is a software developer at BreakingPoint Systems, Inc.  At BreakingPoint, Kirby has implemented several high performance client simulation components and worked on their pcap retransmission component.  Prior to BreakingPoint, Kirby developed several protocol inspection engines for the Cisco Intrusion Prevention System.
  
Dennis Henderson
Programmer
 Dennis has a broad experience in Information Security spanning 15 years.  He has provided Security Design and Consulting services for companies ranging from Telecom to Financial Services and currently leads a team of 14 Security Engineers and Admins at a major midwest bank.  His certifications include ISACA and CISM.
  
Martin Solum
Programmer
 Martin (BBA) is a computer systems professional with 15+ years experience in many information technology settings.  His experience includes information system & control system integration, software development, research & development and assessment projects.  Since 2000, Martin has been mainly involved in Cyber Security Research & Development including assessment and cyber security software prototyping.  Martin's focus areas include the application of cyber defense technologies to the industrial control systems space.  He completed a to-year Industrial Process Operator Program to familiarize himself with control system technologies, has done Wonderware & NERC-CIP compliance tools consulting work, and set up a control systems lab and produced network traffic from various control system devices (e.g. PLC's, substation equipment) for the DigitalBond QuickDraw passive security logging project.
  
Ivan Ristic
Programmer
 Ivan Ristic is a respected security expert and book author, known especially for his contribution to the web application firewall field and the development of ModSecurity, the open source web application firewall.  He is the author of Apache Security, a comprehensive security guide for the Apache web server.  A frequent speaker at computer security conferences, Ivan is an active participant in the application security community, member of the Open Web Application Security Project (OWASP) and officer of the Web Application Security Consortium (WASC).
  
Pablo Rincon
Programmer
 Pablo is an Engineer in Computer Science, developer and Security Researcher.  He has been focused on security since 1998.  He has been working for two years on the OSSIM Project at Alienvault.  He is specially skilled on SIEM technologies, Security Operations Center Architectures, and high performance application development.  He also has a strong knowledge of exploit coding, network protocols and secure coding practices.  Pablo currently resides in Madrid, Spain.
  
Gerardo Iglesias Galvan
Programmer
 Gerardo Iglesias Galvan studied at the Instituto Tecnologico de Morelia in Mexico until 2007 where he then attended the Norwegian University of Science and Technology then university of Tartu (Estonia) and then finally University of Luxembourg all for his masters degree in Information Security and Cryptography.  He currently resides in Mexico City, Mexico and some of his professional interests include network security, ethical hacking, honeypots and smart cards.
  
Nick Rogness
Programmer
 Nick has more than 14 years of experience working in the Service Provider industry specializing in ISP systems, networks, security, and advanced service delivery.  Nick is the Director of Broadband Services at Golden West Telecommunications where he is in charge of both Retail and Wholesale Internet product lines with focus on the rural telecommunications market.  Nick holds a B.S. in Computer Science and a M.S. in Technology Management from South Dakota School of Mines and Technology.
  
Luca Deri
Programmer
 
Luca Deri is the leader of the ntop project (http://www.ntop.org/) aimed at developing an open source monitoring platform for high speed traffic analysis.  He worked for University College of London and IBM Research, prior to receiving his PhD at the University of Berne with a thesis about software components for traffic monitoring applications.  Well known in the open-source and Linux community as well in the industry, Luca has been appointed to the technical advisory board of several leading companies.  He currently shares his time between the ntop project, the IIT Research Group of CNR (http://www.iit.cnr.it/en/), and the Computer Science Department of University of Pisa (http://www.di.unipi.it) where he has been appointed as lecturer.  Luca resides in Pisa, Italy and his home page is: http://luca.ntop.org

 

Donate

OISF Events

10-11-2010 - 10-14-2010
HITB SECCON

Search