Scott Moore Email & Phone Number

St Augustine, Florida, United States

Working on the Nessus Agent team to deliver new software solutions for vulnerability management.

KeyCaliber’s mission is to advance the capabilities of security programs in a meaningful and cost-effective way. We have years of experience defending networks and quantifying cyber risk so we understand that organizations can be extremely complex, implementing cybersecurity can be immensely challenging, and cyber attackers can be very sophisticated. We are here to make the fight not just manageable but winnable.I am the lead developer for our backend, big data solution utilizing Spark… Show more KeyCaliber’s mission is to advance the capabilities of security programs in a meaningful and cost-effective way. We have years of experience defending networks and quantifying cyber risk so we understand that organizations can be extremely complex, implementing cybersecurity can be immensely challenging, and cyber attackers can be very sophisticated. We are here to make the fight not just manageable but winnable.I am the lead developer for our backend, big data solution utilizing Spark and Postgres across AWS and Google Cloud. I have automated our cloud deployment using Terraform and Python/Bash scripting. Our highly scalable data ingest solution uses PySpark within Kubernetes via automated data ingest jobs from Argo. Show less

Reston, Virginia

Reston, Virginia

Lead developer and architect for the NetWitness Core services products. This includes all the backend systems that process the packets and logs (Decoders) and those systems that index the metadata and provide query access (Concentrators and Brokers).Wrote the 10G Packet Decoder high performance packet database. This database uses a shared huge page cache and background thread to flush packets to disk on one volume while buffering on another volume. In addition to being highly… Show more Lead developer and architect for the NetWitness Core services products. This includes all the backend systems that process the packets and logs (Decoders) and those systems that index the metadata and provide query access (Concentrators and Brokers).Wrote the 10G Packet Decoder high performance packet database. This database uses a shared huge page cache and background thread to flush packets to disk on one volume while buffering on another volume. In addition to being highly asynchronous for reads and writes, it was also updated to provide the ability to move data from a hot tier -> warm tier ->cold tier (for eventual backup on a customer provided system). Each database file writes a manifest that is kept online for years, allowing custom searches via an API, to determine exactly what files should be restored from backup, when required. Restored files are placed in a separate collection, which provides query access to the recovered data.Enhanced our networking API to connect to AMQP, which provides seamless access to all our APIs using MessagePack as the common AMQP interchange format. Wrote all the conversion code from MessagePack to our internal native protocol, which allows the APIs to remain unchanged, regardless of how the requests and responses are received. The exact same conversion was done for our RESTful API as well.Enhanced our packet capture system to decrypt TLS 1.0 thru 1.2 and feed the decrypted packets to our parser pipeline for full visibility analysis. The packets are stored encrypted, but the premaster key is written to our meta database so the user can decrypt on demand and see the decrypted streams during network session reconstruction.Wrote a high speed, highly multi-threaded compression/decompression stream class which sits underneath our database. This gave NetWitness the ability to compress with LZMA, GZip or BZip2 at processing speeds over 30k events per second. Show less

Arlington, Virginia

As a contractor, worked on iOS/Android games and the award winning White Noise application. Work included enhancing the sound engine to use a lockless audio buffering system to feed various audio codecs and writing a physics engine to provide animation of a character that bounces on springs. This work was done using a mix of C++ and Objective-C.

500 Grove Street, Herndon, Va 20170

Our business was started by CTX, which was bought by Mantech. After several years, Mantech spun us out as a new, independent company called NetWitness. NetWitness was, and still is, considered the premier packet capture security solution. I was one of a handful of engineers that were instrumental in designing and implementing our software services. These systems are still in use today at RSA, over 10 years later.I was largely responsible for our API development, network protocol and… Show more Our business was started by CTX, which was bought by Mantech. After several years, Mantech spun us out as a new, independent company called NetWitness. NetWitness was, and still is, considered the premier packet capture security solution. I was one of a handful of engineers that were instrumental in designing and implementing our software services. These systems are still in use today at RSA, over 10 years later.I was largely responsible for our API development, network protocol and award winning Investigator client. In addition, I wrote our proprietary, high speed databases for storing raw packets and the associated metadata we created from parsing the raw data. The networking API has built in proxying capabilities, where our Administrator client (written in C++/Qt) could securely connect through any NetWitness service to any other NetWitness service, linking up to 250 hops. This feature allowed Administrators hierarchical access to all our services in data centers around the world, without firewall headaches.Designed and implemented our command API for services like Decoder, Concentrator and Broker. Each service's API is designed as a virtual file system, where each node in the system can be a folder for other nodes, a statistic or configuration node. Every node has a list of commands that can be executed (discovery is supported by a help message). In addition, every node can be monitored, which allows clients to display updates in real-time (nodes created or destroyed, values changed). Only changes are sent over the network when monitored. In addition, monitoring is very network efficient because notifications are compressed into single messages to avoid the updates from being "too chatty". Show less

Chantilly, Virginia

Designed and implemented TCP/IP session reconstruction code in C++ for viewing in original user format. This content library could not only recreate the "user experience" (show what the user saw in the browser), but it was very good at extracting files from well known protocols such as HTTP, SMB, FTP, SMTP and POP3. The library is still in use today within the RSA NetWitness Platform.Lead developer for the early version of NetWitness Investigator, which was a windows client to process… Show more Designed and implemented TCP/IP session reconstruction code in C++ for viewing in original user format. This content library could not only recreate the "user experience" (show what the user saw in the browser), but it was very good at extracting files from well known protocols such as HTTP, SMB, FTP, SMTP and POP3. The library is still in use today within the RSA NetWitness Platform.Lead developer for the early version of NetWitness Investigator, which was a windows client to process and analyze packets (either real-time or from pcaps). Innovative features include protocol analysis which would simplify network activity into meta (or "user actions"). Show less

Falls Church, Virginia

Project lead and sole developer of server side reporting system. It was written as a Java servlet, which accepts XML data as input, transforms it to XSL-FO and produces a report (as a PDF). Key features include easy customization for customers, report queuing and load balancing (my own creation – servers can be daisy chained for scalability).The above report server also includes a Java Swing applet/application I wrote for customers. This application allows customers to change report… Show more Project lead and sole developer of server side reporting system. It was written as a Java servlet, which accepts XML data as input, transforms it to XSL-FO and produces a report (as a PDF). Key features include easy customization for customers, report queuing and load balancing (my own creation – servers can be daisy chained for scalability).The above report server also includes a Java Swing applet/application I wrote for customers. This application allows customers to change report layouts, orientation (portrait or landscape), paper size and edit text in certain parts of the report.Wrote a high performance C++ library to create XML documents on our middle tier for improved scalability. The library exceeded all expectations so I wrote and submitted an article to the C/C++ Users Journal for publication about it. Article was accepted and published in March 2003.Wrote C++ library to treat an XML DOM like an ADO Recordset or a multi-dimensional array. Show less

Dahlgren, Virginia

Top Secret/SCI ClearanceDeveloped COM “Business Objects” in C++/ATL for performing various operations on a large, complicated intelligence database. Several in-house applications use this software package including an Excel VBA program that I wrote that displays database information in a spreadsheet.Lead architect and developer for general-use data object model on Windows NT. The data objects are written in C++/ATL as COM objects so they can be utilized in a wide variety of… Show more Top Secret/SCI ClearanceDeveloped COM “Business Objects” in C++/ATL for performing various operations on a large, complicated intelligence database. Several in-house applications use this software package including an Excel VBA program that I wrote that displays database information in a spreadsheet.Lead architect and developer for general-use data object model on Windows NT. The data objects are written in C++/ATL as COM objects so they can be utilized in a wide variety of languages/environments.Designed and implemented a C++ class library for database access on SGI, Sun and Windows NT platforms.Wrote a database application (using the library described above) for a large-scale intelligence database. This application was written in C++ with X-Windows/Motif as the GUI for both SGI and Sun Unix workstations.Project leader for software which showed the differences between two different geographic data sets and allowed the merging of features between them. This program utilized an extremely fast OpenGL/Motif GUI interface on SGI workstations. Show less

Bs, Computer Science, Overall 3.1, Computer Science 3.4

Activities and Societies: Racquetball, Annual Programming Competition between Schools

Education record

Transferred to JMU in the fall of '87