Massimo Cusumano Email & Phone Number

Rome, It

Rome Area, Italy

Security Expert in the ESA Human Spaceflight and Exploration Operations Department, Directorate of Operations and Infrastructure:- Support to all security related activities within the ESA ISS Exploitation Program Security Control Board- Security WorkShop 2017 at ESA ESTEC (Noordwijk, Netherlands) with Presentation "Payloads System Security Configuration Tool"- ISS Space Segment Security Support: Preparation of hardened raspberry images to be used on board the ISS station (AstroPI, ARISS and MarconISSta Projects)- Handling interface with ESACERT and ESA Service Desk for the HISS (HRE-IC Internet Secured Services) environment concerning network configuration issues and System Security Plans. - Security Audit and Vulnerability Assessment of the ESA Payloads (EuCPAD, MobiPV, GeoFlow, Echo, Cimon, Icecube, ACLS) and HME GS Entities (CADMOS, MUSC, EAC, BUSOC, COL-CC, ATV-CC, MCC-M, COL ESC, ACES)- ESA Security WorkShop 2016 at ESA ESRIN (Frascati, Italy) with presentation "Guacamole - Centralized Access"- Penetration test of Airbus EMIS Portals- Study and implementation of authentication based with ESA PKI Digital Certificate in Token on ESA SDMS system - ISS S-DMS: Deployment of a web based application used to centrally manage and distribute security documents between ISS SART members; - Design and implementation of a Secure remote access solution to ESA ESTEC OMT facility- Preparation and maintenance of the ESA ESTEC OMT Security Management Plan- Security Maintenance activities of ESA ESTEC OMT infrastructure (FWs/VPN, log inspection, remote service and system monitoring). - ESA Security WorkShop 2012 in EADS/Astrium (Bremen, Germany): New Secure Document Management System- ATV/Columbus Control Centres, USOCs, Facility Responsible Centres security support activities including: direct support, documentation review, etc.- Risk assessment of the ATV Ground Segment based on the configuration to support the ATV Edoardo Amaldi mission

Security Expert in the Human Spaceflight and Exploration Operations Department, Directorate of Operations and Infrastructure: - ATV/Columbus Control Centres, USOCs, Facility Responsible Centres security support activities including: direct support, documentation review, support to security procedure definition.- Definition of a ATV-CC Security Countermeasures Plan; the plan includes: identification of the most critical vulnerabilities or patches from previous audit, identification of the security countermeasures, test of the security countermeasures on test/development environment; support for implementation of countermeasures in operational environment.- ESA HME PKI Operations activities.- Risk assessment of the ATV Ground Segment based on the configuration to support the ATV Johannes Kepler mission.- Design and implementation of a new ESA Security Documentation Management System (ESA S-DMS) based on OpenKM; customized the authentication mechanism to use the ESA HME digital certificate;

Security Expert in the Human Spaceflight and Exploration Operations Department, Directorate of Operations and Infrastructure: - ATV/Columbus Control Centres, USOCs, Facility Responsible Centres security support activities including: direct support, documentation review, support to security procedure definition. - ESA HME PKI Operations.- Design and Implementation of a ESA Security Documentation Management System (ESA S-DMS) based on OpenDocMan.- Risk assessment of the ATV Ground Segment based on the configuration to support the ATV Jules Verne mission.- Risk assessment of the COL-CC Ground Segment based on the configuration to support the Columbus program.- Security Audit and Vulnerability Assessment of ESA User Support and Operation Centres (USOC) and Facility Responsible Centres

Security Consultant for the ESA ESTEC in the Netherlands:- Support the ESA in the all activities related to the Information Security of ESA Ground Segment Entities Control Centres (ATV and Columbus), USOCs and Facility Responsible Centres (CADMOS, DAMEC, ERASMUS, MARS, MUSC, EAC, B-USOC, COL-CC, ATV-CC, LMX-ESC, COL-ESC) and International Partners. The activities including:- ESA HME PKI design, Implementation and test: PKI software selection; participation to installation, configuration and test/validation; PKI Integration with authentication (smart card, web server) and authorization (LDAPs, Firewalls, VPNs) systems; support to remote test conducted with ESA GS Entities.- Security support to USOCs and Facility Responsible Centres (writing and review of Security Documentation, Firewalls and VPN configuration, etc.)- Security Audit Assessment of HME GS Entities: Definition and execution of a Security Audit Plan; the plan include of “interview and questionnaires” and verification of the compliance to policy and procedures; the Plan has as reference/metrics the ISO 27001 standard. - Security Vulnerability Assessment of HME GS Entities: Definition and execution of a Security Vulnerability Assessment Plan; the plan include all of the following aspects: “Planning, Preparation and Scheduling”, Conduct, “Analysis and Validation” and Reporting.- Definition and implementation of a log Analysis system to validate the HME GS Entities Firewall configuration.- Contribution to design and implementation of the MSM GS Phase 1 Security Infrastructure, in particular: definition and maintenance of the Security Configuration Plan; management, maintenance and development of Firewalls, Intrusion Detection, Web Access Control Systems, Web and Mail Server including the creation and maintenance of the security documentation.- Monitor and maintenance of MSM GS Phase 1 security infrastructure during Taxi Flight 5S, 6S and 8S mission preparation, test, simulation and operations.

Security EngineerContribution to requirement definition, architecture design (network and security), software selection and software test/evaluation of Security Infrastructure for the Italian bank “Banco di Napoli” related to a “multi-channel program services”.