Lockdown 2006 Archive

Speakers

(Information on this page will be continuously updated)

Paul Barford
Assistant Professor, Department of Computer Sciences, University of Wisconsin-Madison

Thomas Board
Director, Information System Architecture, Northwestern University

Since 2003, Mr. Board has been the director of Information Systems Architecture within Northwestern University's Information Technology division. In this role, he leads efforts to consolidate and integrate software infrastructure supporting enterprise applications for research, teaching and administration. The fundamental concerns include digital identity, user authentication and authorization, secure interoperability between applications, and secure interoperability with third parties.

Mr. Board joined Northwestern in 1976 as a systems programmer at the academic computing center, where he rose to direct the facility in 1983. He was instrumental in bringing the first "super-minicomputer" to that center in 1979 and in establishing the first on-campus computer store for Apple and IBM PC computers in 1983. In 1984, he moved to the University's new telecommunications project and directed the installation of the Evanston and Chicago telephone systems between 1984 and 1986. From 1986 until 1994, Mr. Board directed several projects including the deployment of telephone service in student living units, the deployment of local area networks, and the construction of the University's fiber-optic backbone network in 1993.

In 1994, Mr. Board returned to the academic computing organization to manage user support just as personal computers were becoming an essential tool. He initiated creation of software installer packages for Windows and Macintosh computers that significantly reduced one-on-one support. Mr. Board also chaired task forces that recommended closing the on-campus computing store and that proposed the distributed model for division and departmental technology support in use today.

In 1995, the reorganization of Northwestern's Information Technology division created a new service unit, Technology Support Services that Mr. Board directed until 2003. During that time, he continued to drive both technology introduction and improved service levels, including distributed management of NetIDs to schools for better local service to students and faculty.

Before coming to Northwestern, Mr. Board was a systems programmer at Computer Science Corporation where he supported unmanned satellite missions at Goddard Spaceflight Center in Greenbelt, Maryland.

Mr. Board has been a presenter at conferences for ACUTA (Association for Communications Technology Professionals in Higher Education) and ACM SIGUCCS. He was a founding member of the INSIGHT-100 user group for NorTel SL-100 telephone switches and served as its vice-president and president.

Mr. Board earned a BA in Mathematics from Northwestern in 1973 and a MS in Computer Science from Northwestern in 1979.

James C Foster
James C. Foster, Fellow, is the Deputy Director of Global Security Solution Development for Computer Sciences Corporation. Foster is responsible for directing and managing the vision, technology, and operational design for CSC’s global security services. Prior to joining CSC, Foster was the Director of Research and Development for Foundstone Inc (acquired by McAfee). and was responsible for all aspects of product, consulting, and corporate R&D initiatives. Prior to joining Foundstone, Foster was a Senior Advisor and Research Scientist with Guardent Inc (acquired by Verisign) and an editor at Information Security Magazine(acquired by TechTarget Media), subsequent to working as an Information Security and Research Specialist for the Department of Defense. Foster's core competencies include high-tech management, international software development and expansion, web-based application security, cryptography, protocol analysis, and search algorithm technology. Foster has conducted numerous code reviews for commercial OS components, Win32 application assessments, and reviews on commercial and government cryptography implementations.

Foster is a seasoned speaker and has presented throughout North America at conferences, technology forums, security summits, and research symposiums with highlights at the Microsoft Security Summit, BlackHat, MIT Wireless Research Forum, SANS, MilCon, TechGov, InfoSec World 2001, and the Thomson Security Conference. He also is commonly asked to comment on pertinent security issues and has been cited in USA Today, Information Security Magazine, Baseline, Computer World, Secure Computing, and the MIT Technologist. Foster holds degrees in Business Administration, Software Engineering, and Management of Information Systems and has attended the Yale School of Business, Harvard University, the University of Maryland, and is currently a Fellow at University of Pennsylvania's Wharton School of Business.

Foster is also a well published author with multiple commercial and educational papers; and has authored, contributed, or edited for major publications to include "Snort 2.0", "Snort 2.1" 2nd Edition, "Hacking Exposed" 4th Ed and 5th Ed, "Special Ops Security", "Anti-Hacker Toolkit" 2nd Ed, "Advanced Intrusion Detection", "Hacking the Code", "Anti-Spam Toolkit", "Programmer's Ultimate Security DeskRef", "Google for Penetration Testers", "Buffer Overflow Attacks", and "Sockets, Shellcode, Porting, and Coding".

Clint Hatton
Clint Hatton, Technical Consultant for SPI Dynamics – a Web application security software innovator.

Clint has an extensive background in information and physical security. He spent several years working with numerous lottery organizations -- implementing secure systems throughout the world. He was also Director of Communications for a global news organization. Clint spent several years at IBM as a Senior Project Manager in the Global Services/Network Services division. Most recently, Clint has focused on application security and has worked for the leading vendors in the market.

Clint is a seasoned speaker and has presented throughout North America at conferences, technology forums, security summits, and research symposiums. This year Clint is making several presentations for the Secure Software Forum – an organization focused on Web application security and sponsored by a number of companies, including: Microsoft, Visa, Mercury Interactive, and ISSA.

Clint has published educational papers on the subject of Web application vulnerabilities, including: Cross Site Scripting, SQL Injection, Session Hijacking, and Security in the Quality Program.

James Leinweber
James Leinweber is a member of the UW-Madison's FIRST team, "BadgIRT", and is the technical security officer for the Wisconsin State Laboratory of Hygiene. His academic background includes mathematics at Michigan State and computer science here at the UW- Madison, interests he still combines as one of the campus cryptography mavens.

He's a long time member of Computer Professionals for Social Responsibility, hangs out with the Madison chapter of the League of Professional System Administrators, and co- founded the UW-Madison's Microsoft user group. James has been using computers since 1972. Most recently he's been focused on security compliance issues for HIPAA and PCI-DSS.

Allen Monette
Allen Monette is an Operating System and Desktop Security Consultant with the DoIT Help Desk's Advanced Desktop Support Group. He is ADS' technical lead on Microsoft Windows, anti-virus, anti-malware, VPN, and backup client software. Allen also does desktop management, server administration, systems analysis, and special projects that have him working closely with several other DoIT groups, particularly DoIT Security. He has been with the DoIT Help Desk since 1998 and the ADS group since its begining in 2002.

Greg Padden
Greg Padden is the Security and Network Engineer for the University of Wisconsin School of Public Health and Medicine. His academic background started with Computer Engineering at North Dakota State. His interest began in computer security began in 1991 while doing system design for tactical weapons systems for the U.S. Navy. Most recently he's been focused on security compliance issues for HIPAA.

Blake Penn
Blake Penn currently serves as the Information Security Officer at the University of Wisconsin-Whitewater where he helped build the information security program from the ground up. Blake is a seasoned information security professional with years of prior experience in various managerial, business and technical roles within IT and information security in the private sector with experience in the healthcare, manufacturing, high-tech and financial fields.

Blake holds the CISSP information security certification and multiple IT certifications. He is a member of InfraGard and was a founding officer and current Vice President of the Madison ISSA chapter. He holds a master's degree in computer science and is currently pursuing his PhD.

Linda Pruss
Linda Pruss has worked for the Division of Information Technology at the University of Wisconsin-Madison for sixteen years. She has worked in various capacities for the Division, most recently as a security technologist. Linda is a key technologist on the security team charged with the research, development and support of endpoint security technologies, best practices and security awareness.

Prior to joining the Division, Linda worked in various consulting capacities for Grant Thornton and Arthur Andersen & Co. Linda has a Master's in Business Adminstration from the University of Illinois - Champaign and a BS in Appied Computer Science and Accounting from Illinois State University. As part of her continuing education, she has collected various certifications including the Certified Public Accountant (CPA), Certified Information System Auditor (CISA), Certified Netware Engineer (CNE), and Microsoft Certified System Engineer (MCSE) designations and most recently Certified Information System Security Professional (CISSP).

Chris Ries
Chris Ries is a Security Research Engineer for VigilantMinds Inc., a managed security services provider and consulting company based in Pittsburgh. His research focuses on the discovery, exploitation, and remediation of software vulnerabilities, analysis of malicious code, and evaluation of security software. Chris has published a number of technical whitepapers based on his research, and has also contributed to a number of books on information security.

Chris is a graduate of Colby College, where he majored in computer science and completed an honors project involving automated malicious code detection. Chris has also worked as an analyst at the National Cyber-Forensics & Training Alliance, where he conducted technical research to support law enforcement.

Jeffrey Savoy
Jeffrey Savoy is the information security officer for the University of Wisconsin-Madison. He has worked for the University for over 10 years assisting in a wide range of information security responsibilities including assisting in the formation of the campus response team (BadgIRT), recommending campus security controls, serving as an expert witness in computer crimes cases and providing presentations.

Jeff is a certified information systems security professional (CISSP), Encase certified examiner (EncE) and a GIAC GCIA (certified intrusion analyst) and has a BS in Engineering Mechanics from the University of Wisconsin-Madison.

Peter Thermos
Peter Thermos is the founder and CTO of Palindrome Technologies where he provides consulting services to government and commercial customers and performs research in the area of Internet Multimedia Applications, Wireless and VoIP Security. Peter holds a Masters degree in Computer Science from Columbia University, NY and he is an active member of IETF/IEEE/ACM.

Chris Tobkin
Chris Tobkin, CISSP, is a Consulting Systems Engineer for Cisco working with Enterprises within the central United States focused on security products and technologies. He has been involved with security technologies since 1996 at the University of Minnesota handling host, database, and network security. After leaving the University of Minnesota in 2000, Chris worked for a security services and training company before joining Check Point Software Technologies as a Regional Technology Leader in 2001. Since 2004, Chris has leveraged his industry knowledge and expertise to become a key liaison between the Cisco field engineering organization and the Security Technologies Group within Cisco Systems.