Mike Schiffman Curriculum Vitae

[Sun Apr 2 22:39:06 PDT 2006] This is a short synopsis of some of the work I have done in the past few years, mainly in the Information Security field. For a complete resume, email me: mike underscore schiffman at hotmail dot com. For a short bio, click here.

Currently I work for Cisco Systems in a small, product-agnostic research group called CIAG (Critical Infrastructure Assurance Group). We look at computer security issues as they relate to our Great Nation's CI sectors.

Done Time for the Following:

• Cisco (April 2003...)
• @stake (July 2001 - Mar 2003)
• Guardent (May 2000 - May 2001)
• MCR (Oct 1999 - May 2000)
• ISS (April 1999 - August 1999)
• Cambridge Technology Partners (Feb 1998 - Jan 1999)
• Also: NDI, SBC, Network Security Associates, Spire Technologies (1993 - 2000)

Books Written:

• Modern Network Infrastructure Security, Volume I: The Protocols; With Jeremy Rauch (200?)
• Hacker's Challenge 2 (2002)
• Building Open Source Network Security Tools (2002)
• Hacker's Challenge (2001)

Whitepapers Written:

• The Common Vulnerability Scoring System (2005)
• Internet DNS Infrastructure paper (2003)
• Secure Use of VLANs (2002)
• Libnet 1.0.x Primer (2000)
• TTCP vulnerabilities paper (1998)
• OpenBSD kernel enhancements paper (1998)

Advisory Boards:

• Sensory Networks (Since 2003)
• Vigilant (Since 2003)
• Qualys (Since 2002)
• IMG Universal (Since 2001)

Notable Speaking Engagements:

• NASA Ames: The Common Vulnerability Scoring System (2006)
• Financial Services Information Sharing and Analysis Center: The Common Vulnerability Scoring System (2005)
• CanSecWest 4: The Common Vulnerability Scoring System (2005)
• RSA 14: The Common Vulnerability Scoring System (2005) pdf
• Computer Security Congress: Layer 2 Protocol Flaws Illustrated and Codified (2004) keynote pdf powerpoint tools
• RSA 13: The Evolution of Libnet (2004) keynote pdf powerpoint
• RSA 12: Building Open Source Network Security Tools (2003) powerpoint
• CanSecWest 2: The Need for an 802.11b Toolkit (2002)
• Blackhat 6: The Need for an 802.11b Toolkit (2002)
• Blackhat 3: Firewalk (1999)
• Blackhat 1: TCP/IP insecurities (1997)

Open-Source Tools Written:

• hummingbird (since 2005)
• ipgeo (since 2003)
• libradiate (since 2002)
• libsf (since 2001)
• firewalk (since 1998)
• libnet (since 1998)

Certifications:

• CISSP (since 2000)

Other:

• Real estate developing and investing
• Poker and Game Theory
• Consulting Editor for Wiley & Sons (since 2002)

Back to Main