Roy D'Souza Email & Phone Number

Quantum Ready Roots of Trust: Stateful Hash-based SignaturesResilience against Insider Attacks: Multi-party Protocols Secure Hardware Ledgers (Google Trillian)

Campbell, Ca, Us

Network security for devices and clouds.

FluidFence was an early, angel funded startup that developed a high-scale security solution for device networks and IoT that leveraged lightweight cryptography and key lifecycle management. Prospects were in the Oil & Gas Pipeline, and the Smart Grid verticals.The solution addressed the challenge of large numbers of devices, anemic processors and power, and low-bandwidth networks, supplier heterogeneity, very large numbers of legacy devices, difficulty in updating/upgrading, difficulty in scaling PKI (issuance, revocations, OCSP, CRLs, etc), determined attackers, lack of standards, frequent reliance on light-weight multicast w/ symmetric keys for realtime,

PivotCloud (previously known as AlephCloud) was a venture funded startup that focused on cloud security through cryptography and key management, with a focus on providing businesses with more visibility into, and control over the actions of the service provider that might compromise their security and privacy. But this was done in a manner that did not mandate running any off-cloud infrastructure, or add any significant complexity or performance overhead.The cryptography was NIST recommended and standard, and it leveraged light-weight multi-party protocols for managing key lifecycle to detect and prevent many classes of attacks, and to enable key recovery that was resilient against insider or other attacks. There were provisions to protect the service provider from a class of attacks due to accident or malice by end users.The cloud services operated at high scale across multiple AWS zones (and were capable of running across multiple regions) with extensive leverage of Kinesis and RedShift for visibility with privacy options.The first product (AlephCloud) provided cryptographic layer to secure document sharing through Dropbox, Box and OneDrive. The second product (PivotCloud/Pivotmail) focused on a cryptographic overlay to protect email end-to-end through Exchange, Office365, GMail and Yahoo! Mail.The software was implemented in Haskell, C/C++ and JavaScript, and the services were deployed in Amazon AWS. I was founder and CTO, architect of the solution, and one of the developers of the low-level cryptography and protocols.

Redmond, Washington, Us

Architect in the BOSG service delivery team (earlier incarnation of Office365) with focus on Metering, with participation in Provisioning, Service Syndication, and integration with Billing systems.Architect of an incubation in the SQL Azure team called Azure Trust Services (ATS) that was an attempt to provide businesses with greater visibility into, and control over access by cloud service providers into their data hosted in SQL Azure, through lightweight cryptography and key lifecycle management.ATS was invitation only, and there were several pilots where customers used it to protect payment information, and electronic health records, from the cloud service provider, thereby mitigating the compliance risks associated with PCI and HIPAA.The cryptography was experimental, with proactive leverage of emerging cryptographic techniques for providing strong security guarantees that were defined through cipher text policy, and key policy.

Mimosa was a venture funded startup that focused on protecting enterprise Exchange and SharePoint servers from data loss and service outage, through leverage of near line storage, with integration for e-discovery.It was the first solution to seamlessly integrate backup, archival and disaster recovery, and provide archival with the same scale as backup.The solution was broadly deployed and the company was acquired by Iron Mountain Digital (then Autonomy, and subsequently HP.)

San Jose, Ca, Us

Joined as a senior developer and architect. Was member of a small team that designed and prototyped a SAN based on InfiniBand.Developer and lead architect of a team that designed and implemented the first SAN router to enhance SAN Security and Scalability.Director of Advanced Development, leading a small team working on Cryptographic Security for Storage Area Networks, Edge Switches for scaling within very large data centers, and a cycle-accurate SAN simulator.Participant in Storage (SNIA) and Fibre Channel (ANSI T11) standards activities.

Rivio was a dotcom venture funded startup that focused on end-to-end service delivery of health insurance to small businesses. Investors included Marsh & McLennan (then the largest insurance provider), and the Bank of America.Architect of B2B integration between the Insurance providers and the browser-based small businesses.

Santa Clara, California, Us

Senior Developer and Senior Architect at the Intel Microcomputer Software Labs (MSL) and subsequently at the Intel Microprocessor Research Labs (MRL) in Santa Clara, California.Design and implementation/port of Windows NT to IA64, with focus on Performance (without hardware) while at the MSL.Co-architect and co-implementer of a clean Room Java Virtual Machine that was optimized to Intel processors, Designer/Lead Implementer of a Train Garbage Collector for Java Virtual Machines, Co-designer of Hardware write barriers for Intel processors for use with the Intel Java Virtual Machine, while at the MRL.

Houston, Texas, Us

Member of the team that was porting an early version of Windows NT to the Alpha Architecture.Member of the group that focused on optimizing the performance of NT for Alpha.Worked closely with the Microsoft team in optimizing NT for emerging hardware architectures.Developer of low-level utilities for monitoring and analyzing performance issues.