Risk Management and Information Security

John P. Pironti is the President of IP Architects, LLC. He has designed and implemented enterprise wide electronic business solutions, information security and risk management strategy and programs, enterprise resiliency capabilities, and threat and vulnerability management solutions for key customers in a range of industries, including financial services, insurance, energy, government, hospitality, aerospace, healthcare, pharmaceuticals, media and entertainment, and information technology on a global scale. John has a number of industry certifications including Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information System Control (CRISC), Information Systems Security Architecture Professional and (ISSAP) and Information Systems Security Management Professional (ISSMP). John frequently provides briefings and acts as a trusted advisor to senior leaders of numerous organizations on information security and risk management and compliance topics and is also a member of a number of technical advisory boards for technology and services firms. He is also a published author and writer, highly quoted and often interviewed by global media, and an award winning frequent speaker on electronic business and information security and risk management topics at domestic and international industry conferences.

Chris Wysopal, co-founder and chief technology officer of Veracode, is responsible for the security analysis capabilities of Veracode technology. Veracode was recently named #20 on the list of America’s Most Promising Companies by Forbes Magazine. Mr. Wysopal is recognized as an expert and a well known speaker in the information security field and was recently named one of InfoWorld's Top 25 CTO's and one of the 100 most influential people in IT by the editorial staffs of eWeek.

He has given keynotes at computer security events and has testified on Capitol Hill on the subjects of government computer security and how vulnerabilities are discovered in software. He also has spoken as the keynote at West Point, to the Defense Information Systems Agency (DISA) and before the International Financial Futures and Options Exchange in London. His opinions on Internet security are highly sought after and most major print and media outlets have featured stories on Mr. Wysopal and his work.

Mr. Wysopal’s groundbreaking work in 2002 while at the company @stake was instrumental in developing industry guidelines for responsibly disclosing software security vulnerabilities. Mr. Wysopal, along with Steve Christey of MITRE, proposed an IETF RFC identified as the “Responsible Vulnerability Disclosure Process,” which became the foundation for the Organization for Internet Safety (OIS). Mr. Wysopal is a founder of OIS, which established industry standards for the responsible disclosure of Internet security vulnerabilities. Mr. Wysopal is co-author of the award winning password auditing and recovery application @stake LC (L0phtCrack) which is currently used by more than 6,000 government, military and corporate organizations worldwide.

Mr. Wysopal began his career as a principal software engineer at Lotus Development Corporation where, in the mid 90’s, with the rise of the Internet, he realized the critical need for secure software. He and his colleagues then created the first security research think tank known as L0pht Heavy Industries, which was later acquired by @stake in 1999. He became the manager of @stake’s Research Group and later became @stake’s vice president of research and development where he led a world class team of security researchers tackling the problem of automating the process for finding and disclosing security vulnerabilities in software. He also managed @stake’s products group to develop new security tools focused on wireless, infrastructure and application security.

In 2004, when @stake was acquired by Symantec, Mr. Wysopal became its director of development and was responsible for the engineering team that built binary analysis technology to find vulnerabilities in software.

Mr. Wysopal wrote The Art of Software Security Testing: Identifying Security Flaws, published by Addison Wesley and Symantec Press in December 2006. Mr. Wysopal earned his Bachelor of Science Degree in Computer and Systems Engineering from Rensselaer Polytechnic Institute in Troy, New York.

Tas is a Rapid7 co-founder and the chief architect of NeXpose and has been part of the Matthews and Devine team since 1990. Giakouminakis helped form Percussion Software in 1994 where he led the server development of Notrix, Percussion's first product. In addition, he led the server development team for Rhythmyx, Percussion's Enterprise Content Management system. Tas left Percussion to launch Rapid7 in 1998. Prior to his recent experiences, he worked in the financial services sector, developing software in the security and risk areas for CitiCorp.

Jon Oberheide is CTO of Duo Security, an Ann Arbor-based startup focused on two-factor authentication and mobile security. In his free time, Jon dabbles in kernel exploitation, abusing Android devices, and beer brewing.

As Vice President of Security Solutions at Radware, Mr. Herberger is responsible for developing, managing, and increasing the company’s security practice and the primary corporate spokesperson in the Americas. Since 2010, Mr. Herberger has lead Radware’s security business product leadership & growth. Frequent guest of Fox Business News, CNN and Bloomberg Broadcast News along with numerous NYT, WSJ and Washington Post citations, Mr. Herberger is considered a foremost expert on the problems and solutions surrounding Cyber Attacks.

Before joining Radware, Carl served as V.P., Security & Compliance, a major East Coast Cloud Security provider based in Philadelphia. While at Evolve IP, was responsible for all aspects of the company’ $MM managed and professional service security offerings including P&L, marketing, pricing, delivery, technology selection and staffing.

Before joining Evolve IP, Carl served as President and Co-founder of Allied InfoSecurity, Inc. – an international provider of best-of-class security consulting and technical compliance services. Prior to his tenure at Allied InfoSecurity, Inc., Carl served as the Information Security Officer for Barclaycard US. In this role, he was responsible for the entire information security program. From 2002 to 2006, Mr. Herberger was the senior executive in charge of the SunGard Professional Services IT Security Practice which was recognized as one of the top-five IT security consulting organizations in the U.S. in 2005.