Marc Stiegler Email & Phone Number

Currently security consultant for Mistio.com. Deployed DecideRight2 Beta version at https://decideright2.com in November, 2015. Developed the original application DecideRight, published with Avantos in 1995. DecideRight is a decision analysis and presentation tool. Mr. Stiegler designed and implemented the program . Received favorable reviews from PC Magazine (“about as visually intuitive as software gets these days”) and Wall Street Journal’s Walter Mossberg. Won Software Publisher Association Best Business Software award for 1995.

Developed Two Factor Access Control, a technique that supplies stronger resistance to phishing and XSRF than Two Factor Authentication. You can read a short brief on the technique at http://skyhunter.com/marcs/noPhishing.pdf. Developed a demo implementation of the system in JavaScript on Node.js using OpenID as the identity provider. A live demo is available on request, as is the demo source code.

In the years before the advent of Box.net and DropBox, developed the Secure Cooperative File Sharing System, SCoopFS (pronounced "Scoops"). SCoopFS was a peer-to-peer system in which users could send files as attachments via a secure mail-like system; when the recipient saved the attachment, SCoopFS would automatically start synchronizing the sender and recipient files so that when one of them changed their copy, the other one was automatically updated. Results were described in 2010, “Making Policy Decisions Disappear into the User’s Workflow”, CHI.2009, “Not One Click for Security?”, SOUPS.Developed Clusterken, an open source computing platform for writing secure scalable reliable cluster-oriented applications. A comparative analysis of Clusterken and Hadoop for writing a publication/subscription system suggested that, for applications that do not naturally follow a spawn/gather idempotent pattern, Clusterken delivers four times the productivity and yields higher reliability. Reported in "Clusterken: A Reliable Object-Based Messaging Framework to Support DataCenter Processing", Open Cirrus Summit in Moscow, 2011, the tech report can be found atwww.hpl.hp.com/techreports/2011/HPL-2011-44.pdf‎During this time, Mr. Stiegler also was invited four times to give presentations at the annual RSA Conference:2013, RSA Security Conference, “Writing Applications that are Easier to Defend than Attack”2012, RSA Security Conference, “Crowdsourcing Access Control in the Cloud”2010, RSA Security Conference, “Including the User in Your Application Security Equation”2009, RSA Security Conference, “Why Identity Doesn’t Matter”His 2010 Google Tech Talk, “The Lazy Programmer’s Guide to Security” has received over 45,000 page views.

Research in Virus Safe Computing culminated in developing Polaris, a Windows overlay that confined applications so that the applications could still interoperate, but viruses were so limited in authority they could do little or no harm. Polaris blocked all zero-day attacks during the 50-person 18-month pilot program. A brief description of Polaris was published in Communications of the ACM (CACM), 2006, “Polaris: Virus-Safe Computing for Windows”.

Combex was a startup company dedicated to building the next-generation of usable yet secure infrastructure and applications. Mr. Stiegler led the proposal writing effort that landed a DARPA contract to develop a prototype of a web browser that achieved security goals beyond the state of the art. Upon winning the contract, Mr. Stiegler designed and led implementation of the resulting DarpaBrowser, and of the CapDesk graphical desktop that rendered traditional computer viruses ineffective. A week-long immersive security review led by Dr. David Wagner of UC Berkeley concluded that the DarpaBrowser and CapDesk had indeed gone beyond the state of the art in security; the review is available at http://combex.com/papers/darpa-review/ The ideas invented for CapDesk formed the basis for the Polaris work at HP described elsewhere. Principles first devised for CapDesk have since been assimilated into the Chrome browser and the Mac OS.

Electric Communities was a startup company developing Habitats, a massive multiplayer virtual reality in the Second Life genre (before there was a Second Life). At the time of Mr. Stiegler’s arrival the company had been operating for 3 years, spent $10M, and did not yet have a schedule for Beta. Mr. Stiegler reorganized the development team, introduced management techniques such as PERT charts, worked with marketing to strip the requirements by 30%, and shipped the Beta in 9 months.

As VP of Engineering for Autodesk, Mr. Stiegler fought off corporate doubts that the brand-new Windows 3 would be more successful than Windows 2, and initiated a high-priority port of AutoCAD to the new operating system. By enabling Autodesk to arrive more than a year before any competitors on the most important CAD platform of the future, Mr. Stiegler enabled Autodesk to establish a natural monopoly for the company that lasted over a decade.

Master Of Science (M.S.), Computer Science

B.S., Physics, Psychology, And Mathematics (Completed Requirements For All Three)