Tripwire Guest Authors
Tripwire invites topical posts on security and risk management from some of the leading experts in the field. The opinions expressed in the articles are solely those of the contributor, and do not necessarily reflect those of Tripwire, Inc. If you are interested in contributing to The State of Security Blog, please contact us socialmediastrategies at tripwire dot com.
Tripwire Guest Authors has contributed 429 posts to The State of Security.
Lamar Bailey is responsible for leading Tripwire's Vulnerability and Exposures Research Team (VERT), which is comprised of world-renowned security engineers and researchers who scour the globe looking for the latest public and private vulnerabilities, then write detection algorithms based on a propriety OS, Application, and threat fingerprinting techniques for inclusion in Tripwire's commercial Vulnerability Management products.
The tripwire Vulnerability Assessment engine is part of IP360 and it is the brains for detecting network assets and evaluating these assets using the VERT algorithms. This team is comprised of world class software developers/engineers with low level understanding system and network programming.
Lamar Bailey has contributed 10 posts to The State of Security.
David Bisson is an infosec news junkie and security journalist. He works as Contributing Editor for Graham Cluley Security News, Associate Editor for Tripwire's "The State of Security" blog, Contributing Author to Carbonite, and Content Contributor to Metacompliance Ltd. and OASIS Open.
David Bisson has contributed 696 posts to The State of Security.
Graham Cluley is an award-winning security blogger, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by companies such as Sophos, McAfee and Dr Solomon's. He has given talks about computer security for some of the world's largest companies, worked with law enforcement agencies on investigations into hacking groups, and regularly appears on TV and radio explaining computer security threats.
Graham Cluley was inducted into the InfoSecurity Europe Hall of Fame in 2011, and was given an honorary mention in the "10 Greatest Britons in IT History" for his contribution as a leading authority in internet security.
Graham Cluley has contributed 97 posts to The State of Security.
Before joining Tripwire, Chris spent over 18 years leading cyber security initiatives for Fortune 500s and others. During that time he was responsible for securing over $1 trillion in acquired assets in the US, UK, Germany, Greece & Russia. His broad industry experience includes aerospace, financial, critical infrastructure, manufacturing and high-tech while his technical experience covers everything from mainframe to cloud (SaaS, PaaS & IaaS). At Tripwire Chris is the Manager of Security Content & Research and is loving every minute of it.
Chris Conacher has contributed 7 posts to The State of Security.
Karen Cummins is the Director of Federal Sales at Tripwire and promotes the success of civilian Federal agencies with a broad and robust portfolio of solutions for managing critical security controls, including both agent-based and agentless Security Configuration Management, Log Management, Vulnerability Management, and File Integrity Monitoring.
Keren Cummins has contributed 5 posts to The State of Security.
Mike is a seasoned technical manager leading network and security engineers at Tripwire. He is responsible for daily network operations as well as strategic Information Security initiatives.
Mike Dooley has contributed 2 posts to The State of Security.
Tim Erlin is a Director, Security and IT Risk Strategist at Tripwire, responsible for the Solutions and Strategy. He previously managed Tripwire’s Vulnerability Management product line, including IP360 and PureCloud. Erlin's background as a Sales Engineer has provided a solid grounding in the realities of the market, allowing him to be an effective leader and product manager across a variety of products. His career in information technology began with project management, customer service, as well as systems and network administration. Erlin is actively involved in the information security community. His contributions include blogging, podcasts, press, speaking and television.
Tim Erlin has contributed 36 posts to The State of Security.
Before he realized security was a valid career choice, Chris spent 14 seasons as a commercial fisherman, casting his nets from California to Alaska in search of tasty sea creatures. In 1986 he saw the light and became an IT security auditor for Price Waterhouse Coopers, started casting a new net for security bad guys, and earned his CISA in 1990 (yes this was before the internet – do you remember RACF?). Since then he has held a variety of positions in IT and Marketing and is now happy to be part of the security industry again at Tripwire. The technology has changed, but the issues haven’t -- it’s still about coordinating people, process, and technology to deliver controls that provide an acceptable level of risk mitigation for the business.
Chris Fisher has contributed 5 posts to The State of Security.
Eva Hanscom assists with public relations and social media at Tripwire. She works with our PR Director to develop press releases and pitches, tracks media coverage and copyedits blog content; and also supports the Community Engagement Coordinator with Tripwire’ social media accounts. Eva received a B.A. in Anthropology and Politics from the University of California, Santa Cruz with a special emphasis on online communication and culture.
Eva Hanscom has contributed 205 posts to The State of Security.
Hudson Harris (@legallevity) is the Chief Privacy Officer and Associate General Counsel for a company encompassing clinical services and software design. He focuses on risk management, compliance, and privacy/security practice creation, management, and consulting. He holds a BA in International Affairs, a Masters of International Business, M.B.A., J.D. and is a licensed attorney in California.
Hudson Harris has contributed 8 posts to The State of Security.
David Henderson is a Federal Systems Engineer who supports technical Pre/Post Sales in the Federal Civilian and DOD agency sectors. David started with Tripwire in 2010 and has enjoyed great success in assisting with sales of the Tripwire product line. There is nothing more satisfying as work than a job well done or a freshly closed deal. Keeping customers happily secure is our focus.
David Henderson has contributed 2 posts to The State of Security.
Darlene Hibbs is a Security Researcher and Software Engineer for Tripwire, and is part of the Vulnerability and Exposures Research Team (VERT). Though Darlene only recently completed her collegiate training, she is recognized as an up and coming player in the vulnerability management arena.
Darlene Hibbs has contributed 7 posts to The State of Security.
Brian is the Mid-Enterprise Account Manager covering the Northwest for Tripwire. Brian has worked in IT security for nearly 20 years working with early Anti-Virus and Firewall solutions to today’s advanced threat detection. Before joining Tripwire worked at a variety of software/hardware vendors and a reseller including stints at Symantec and Blue Coat. When Brian is not working at Tripwire on information security, he enjoys hiking, running and rooting on the SF Giants and Portland Trail Blazers.
Brian Jackson has contributed 1 post to The State of Security.
Melloney Jewell is Tripwire’s Field & Channel Marketing Manager with responsibility for marketing programs in the EMEA & APAC regions. Melloney is a Chartered Marketer with over 10 years of technology marketing experience. She studied at Lancaster University in the UK, earning a B.A. in Organizational Management and Marketing and an M.A. in Knowledge Management. Melloney loves to travel and spent five years living and working in Montreal, Canada. Now relocated back to the UK, she equally enjoys rediscovering her home ground.
Melloney Jewell has contributed 1 post to The State of Security.
Farhan Jiva is a Security Research Engineer on the Vulnerability and Exposures Research Team (VERT). Prior to Tripwire, Farhan worked at Coalfire doing consulting/penetration testing, Dell SecureWorks as a network security analyst, and worked at UGA doing penetration testing on departmental web applications. Farhan went to school at the University of Georgia for a Bachelor's and Master's degree in Computer Science.
Farhan Jiva has contributed 2 posts to The State of Security.
Irfahn holds a CISSP certification and brings a wide range of expertise in the field of Information Security specializing in Vulnerability Management, Compliance, Risk Identification and Scoring, as well as Social Engineering. He is a recognized leader in building Information Security Solutions and Customer Satisfaction. He has experience providing technical security leadership and guidance to Fortune 500 accounts, as well as smaller companies, in several verticals including financial, energy/commercial, healthcare, and retail. See what he’s thinking on Twitter @TheRealKhimji
Irfahn Khimji has contributed 14 posts to The State of Security.
Bob Loihl is a Software Engineer with 20+ years of experience developing business applications, leading teams and spreading the security word. He has a strong interest in delivering applications that are secure by design in an agile world. He has been helping Tripwire grow and mature its development processes for the last 10 years and his current hobby is incorporating SSDLC (Secure Software Development Life-Cycle) processes into the software manufacturing process. Bob is passionate about family, software, canoes and guitars. In his spare time he works at Tripwire producing high quality software using Agile methodologies. Oh yeah, he cares a tiny bit about security.
Bob Loihl has contributed 17 posts to The State of Security.
With a B.S. in Information Technology from Oregon Tech, Daniel loves solving business problems with technology. Through his studies he became obsessed with securing corporate infrastructure and soon began exploring a career in InfoSec. After a couple System Administration roles he is currently a Security Analyst at Tripwire. Outside of work Daniel enjoys trail running, attending concerts, and playing and listening to music.
Daniel Magana has contributed 3 posts to The State of Security.
I am Tripwire's CTO, and joined Tripwire at the turn of the century. I live a life of genuine curiosity, so the best thing about my job at Tripwire is traveling around the world and learning about our customers and their goals. When I travel, I avoid middle seats whenever possible.
Dwayne Melancon has contributed 141 posts to The State of Security.
David is Chief Research Officer at Tripwire where he is responsible for working with customers, partners, and industry experts to imagine, innovate, and deliver on advancing the state of the art in protecting Tripwire’s customers from the most sophisticated attackers in the world. David previously served as VP/Engineering at Tripwire, joining in 2013 through its acquisition of nCircle where he served as Chief Technology Officer and VP/Engineering. David has been an entrepreneur, leader, software developer, security researcher, and generally obsessed with network security for the last two decades.
David Meltzer has contributed 11 posts to The State of Security.
Chris Orr has been employed by Tripwire, Inc. since September 2000. Initially hired to develop and deliver training materials for such golden oldies as Tripwire for Servers and Tripwire for Routers, he quickly moved on into the Systems Engineering group where he has been ever since. His role initially required him to provide technical assistance to regions covering 27 states and all of the Federal government, but as the company has grown His territory has been whittled down to the Pacific Northwest, Western Canada and Western Enterprise (which…when he thinks about it…is still the largest geographic territory in the company…) Currently based out of scenic Lake Stevens, WA, when not flying to such lovely places as Winnipeg or Boise, Chris is teaching his daughter how to play guitar or going on Scouting trips with his son.
Chris Orr has contributed 41 posts to The State of Security.
Joe Pettit is the Managing Editor at Tripwire. Joe graduated with a degree in Business and Marketing in 2009 and then went on to create and develop the popular IT security blog, Information Security Buzz. From that venture, Joe moved to Tripwire where is continued to aid the development of their award-winning blog, The State of Security. Joe specializes in SEO, Social Media, Lead Generation and implementing new strategies to help develop Tripwire’s online presence.
Joe Pettit has contributed 15 posts to The State of Security.
Tyler Reguly is a Manager of Software Development with Tripwire, and a key member of VERT (Vulnerability and Exposure Research Team), where he focuses on web application security and vulnerability detection. Tyler is involved in industry initiatives such as CVSS-SIG and WASSEC, and has spoken at many security events, including SecTOR and OWASP Toronto. Additionally, he has contributed to the Computer Systems Technology curriculum at Fanshawe College in London, Ontario by developing and teaching a number of security related courses. Tyler is frequently quoted by security industry press and is a prolific blogger.
Tyler Reguly has contributed 79 posts to The State of Security.
Maritza Santillan is a marketing specialist, responsible for corporate communication efforts and social media at Tripwire. She studied at the University of Oregon and earned a B.A. in journalism with an emphasis on public relations and business administration. Maritza enjoys exploring the Northwest, trying new restaurants and cheering on the Ducks!
Maritza Santillan has contributed 351 posts to The State of Security.
Jack Sebbag works as Tripwire's Vice President of Sales, Advanced Solutions. He has been working in high technology sales and sales management for over 22 years. Over the course of his career, he has worked for both large and small companies. Prior to Tripwire he worked for tech startups Nakisa and MXI Security, where he served as global Vice President of Sales and Marketing and Vice President of North American Sales, respectively. Jack was Director of Sales at Oracle Technology and was instrumental in growing its security business at unprecedented rates. He also served as Vice President and General Manager of McAfee Canada for seven years.
Jack Sebbag has contributed 1 post to The State of Security.
Ed Smith is Tripwire’s Senior Product Marketing Manager for Vulnerability Management. Since Tripwire’s acquisition of nCircle in 2013, Ed has been responsible for acquiring, retaining and delighting Tripwire IP360 customers. Ed enjoys helping organizations maximize value from their technology investments, drawing from over 18 years’ experience in various roles as a Systems Engineer, Sales Engineer, Support Manager, and Trainer for companies like Dell, Adobe and Gateway.
Edward Smith has contributed 19 posts to The State of Security.
Travis Smith is a Senior Security Research Engineer at Tripwire. He has over 10 years experience in security, holds an MBA with a concentration in information security, and multiple certifications including CISSP, GIAC and GPEN. Travis specializes in integrating various technologies and processes, with a passion for forensics and security analytics with the goal of helping customers identify and mitigate real threats.
Travis Smith has contributed 11 posts to The State of Security.
Andrew Swoboda is a Security Researcher and Software Engineer for Tripwire, and is part of the Vulnerability and Exposures Research Team (VERT). Though Andrew only recently completed his collegiate training, he is recognized as an up and coming player in the vulnerability management arena.
Andrew Swoboda has contributed 6 posts to The State of Security.
Lane Thames is a software development engineer and security researcher with Tripwire’s Vulnerability and Exposure Research Team (VERT). As a member of VERT, Lane develops software that detects applications, devices, and operating systems along with vulnerability detection and management software. He also spends time looking for new vulnerabilities, contributing to the Tripwire State of Security blog, and understanding emerging cybersecurity threats. Lane received his PhD in Electrical and Computer Engineering from the Georgia Institute of Technology and has spent over 10 years working in information technology and software/hardware development. Lane worked for nCircle prior to their acquisition, and continues his research work now for Tripwire.
Lane Thames has contributed 12 posts to The State of Security.
I've had a well rounded technical life. It all started with building an electric motor from scratch with my Dad. That led to a college degree in Electrical Engineering, and then my first true technology job working at IBM's Almaden Research Center. Then it was on to "real jobs" such as an instructor writing system administration manuals and teaching classes from them in far flung places like Tokyo, testing and developing internet advertising systems, building highly concurrent distributed key-value data storage and finally landing here at Tripwire where as a System Architect I enable teams to design and build security systems that make the online world a safer place.
Mitch Thomas has contributed 7 posts to The State of Security.
Kathy Trahan is a Senior Product Marketing Manager and is responsible for vertical markets. With more than 15 years of experience in high tech and IT Security, Kathy has held prior roles at Cisco, Check Point, NetApp, Nokia, Sun Microsystems, Symantec and TrendMicro. She lives in San Jose, CA with her husband and two children.
Kathy Trahan has contributed 15 posts to The State of Security.
Ian Turner is a Senior Software Engineer for Tripwire who specializes in security research and software development of the IP360 vulnerability scanner. Ian worked for nCircle prior to the acquisition where he led the development of the web application security scanner part of IP360 and on the CCM configuration compliance scanner. Ian received his B.S. in Computer Science and in M.S. in Information Security from Georgia Tech. While working as a research scientist at the Georgia Tech Research Institute, Ian developed software to test the effectiveness of electronic warfare countermeasure control systems.
Ian Turner has contributed 3 posts to The State of Security.
As the Director of Corporate Communications, I lead our community engagement, social media, analyst relations, customer advocacy, competitive intelligence and speaking opportunities (yeah, and many more unofficial duties). A Product Marketer at heart, I live by the NIHITO (nothing interesting happens in the office) motto. I crave engagement with all of you and are in a continuous quest to learn from others. I enjoy traveling, reading and experiencing different cultures. It's a privilege to work with the energetic, collaborative and fantastic team at Tripwire. Together we develop, market and sell kick-ass products for your enjoyment.
Cindy Valladares has contributed 147 posts to The State of Security.
Andrew Wagner is a Director of Engineering at Tripwire, and leads the teams that produce and maintain Tripwire Enterprise and Data Mart. He started at Tripwire nearly a decade ago as a user interface developer and has extensive experience with the ins and outs of the products. Andrew has been developing software in small companies and large, as a developer and consultant, for nearly 20 years. His focus is on developing the agile systems that allow Tripwire to produce the highest-quality, innovative software possible.
Andrew Wagner has contributed 10 posts to The State of Security.
Visiting Professor at the School of Science & Technology - Nottingham Trent University [NTU], Visiting Professor/Lecturer at the University of Slavonia [to 2015], Registered Expert Witness, Certified Forensics Investigator Practitioner [CFIP], CEO of HEXFORENSICS LTD, Academic Practitioner & Accredited Advisor to the Chartered Society of Forensic Sciences in the area of Digital/Cyber Forensics, ENISA CEI Listed Expert, Editorial Member of the Cyber Security Research Institute [CRSI], Writer for Digital Forensics, Trainer at Meirc Training & Consulting [UAE/Dubai], Fellow of the Royal Society of the Arts [RSA], & Board Advisor to the Digital Trust.
John Walker has contributed 27 posts to The State of Security.
Andrew Whaples and his merry band of acronyms, CSP, CSM, PMI-ACP, PMP, MBA, are helping Tripwire adopt and master Agile Practices within their software development organization. Having cut his teeth in large waterfall methodologies, Andrew has seen many sides of the software development paradigm and has embraced Agile’s focus on delivering incremental customer value through highly motivated, highly supported and high-performing teams of craftsmen. Helping teams grow and sustain a passion for their work is his passion, and collaboration is his main tool of choice. When he’s not slaying impediments Andrew enjoys reading, gardening and anything that gets him out into the wild.
Andrew Whaples has contributed 2 posts to The State of Security.
Matt Williams is a Senior Product Owner at Tripwire, and is responsible for Security Configuration Management solutions, such as Tripwire Configuration Compliance Manager. A 15-year veteran of the information security industry, Matt focuses on delivering innovative solutions to complex security problems.
Matt Williams has contributed 1 post to The State of Security.
Brad works in Tripwire's R&D organization with the performance and automation team. Prior to joining Tripwire, Brad worked at Yahoo! on the service engineering and operations team for Yahoo! Small Business and e-commerce platform. Brad's years of experience dealing with the kinds of abuse and fraud typically associated with web hosting platforms has instilled in him an enthusiasm for information security that still occupies most of his free time.
Brad Winckler has contributed 3 posts to The State of Security.
Craig Young is a computer security researcher with Tripwire's Vulnerability and Exposures Research Team (VERT). He has identified and responsibly disclosed dozens of vulnerabilities in products from Google, Amazon, IBM, NETGEAR, Adobe, HP, Apple, and others. His research has resulted in numerous CVE assignments and repeated recognition in the Google Application Security Hall of Fame. Craig's presentations on Google authentication weaknesses have led to considerable security improvements for all Google users. Craig won in track 0 and track 1 of the first ever SOHOpelessly Broken contest at DEF CON 22 by demonstrating 10 0-day flaws in SOHO wireless routers. His research into iOS WiFi problems more recently exposed CVE-2015-3728 that could allow devices to inadvertently connect to malicious hot spots. Craig has more recently turned his attention to a different part of the wireless spectrum with research into home automation products as well as RFID/NFC technology.
Craig Young has contributed 45 posts to The State of Security.