As a solo entrepreneur, I've designed, architected, and built all aspects of the phishing and fraud sandbox that ingests millions of URLs and fully analyzes, classifies (malicious, suspicious, benign), and explains verdicts for hundreds of thousands of the most interesting links daily. The detection logic contains dozens of signals from all aspects of each site, including likelihood of brand/topic impersonation, brand or vertical targeted, newness and popularity of domain, and confidence in the verdict. My creation of Site Fingerprints (which links together related attacks and offers 0-hour, sub-second detection of phishing kits/templates) is one of many reasons why Bayse has been chosen as a partner by multiple Threat Intelligence Platforms and serves both brands and the threat intelligence community directly. The investigation UI enables pivoting and searching through detailed data points that are stored in a highly-performant relational database cluster. Learn more at https://bayse.io.

I co-created a SaaS platform for security analysts, threat research groups, and threat intelligence practitioners to quickly and easily understand, annotate, and share network-based telemetry (unifying analysis of PCAP, Zeek, NetFlow, and VPC Flow Logs).

I joined Awake as the first Threat Researcher and (over the course of 5 years) grew and led theremote-first, international Threat Research team to a size of 10 people. During my tenure, I was responsible for creating or guiding the development of many algorithms core to Awake’s IP, building out the query language, building out much of the early detection logic (Detection Engineering), starting and running the Threat Hunting function, and acting as the security adviser for many aspects of the company(including leading all security aspects of interaction with the Data Science team). Moreover, I was instrumental in co-creating the automated detection and response functionality of the platform (associated with one of several patents I received for my work at Awake). In addition to my individual contributor work, my management duties included hiring, career development, resource management, and executive strategy. I also spent considerable time working closely with the Sales organization, working directly with customers, and speaking about my threat research discoveries at security conferences.

I am a member of the adjunct faculty for the foundational course in information security at RIT. This course is taught to all incoming Information Security BS students, and is the building block for all following advanced courses.

I strive to solve problems using methods that have either been overlooked, under-analyzed, or never considered in the field of network security. Most days feel like I'm working to solve an extremely complicated puzzle, which is exactly the kind of work I love to do!

I performed information security/network research and development across a variety of disciplines.

Continuation of my research with SNL.

I worked in various research areas, with a focus on malware analysis and detection.

In this Research Assistantship position, I modeled attacks on WSNs, particularly using the TI MSP430 remote sensor line. I will be presenting my research at the 2010 International Conference on Security and Management, in the Cybersecurity education track.