Guest

CIAG Research Team

Mike Schiffman

Mike Schiffman, Software Engineer


Background and Biography:

Mike Schiffman has over 10 years of experience in high-tech, most of which have been spent in computer security. He has worked in several different areas including research and development, consulting, writing, and training. Mike's primary areas of expertise lie in network security, research and development, protocol analysis and tool development. He is the co-author of the well-known network security tool firewalk, as well as author to the ubiquitously used low-level packet shaping library libnet. Mike has led consulting engagements for Fortune 500 companies in many vertical markets, including critical infrastructure, financial, automotive, manufacturing, and software. As a sought-after speaker, he has presented to industry professionals at conferences such as The Blackhat Briefings, the RSA conference, and CanSecWest as well as government agencies including the NSA, CIA, DOD, FBI, NASA, AFWIC, SAIC, and Army intelligence. Mike has authored several books on computer security; including Building Open Source Network Security Tools (Wiley & Sons); a how to book on rolling your own network security tools as well as the Hacker's Challenge book series (Osborne McGraw-Hill), a line of books on computer security forensics and incident response. He co-authored and contributed to several other books, including Hacking Exposed (Osborne McGraw-Hill) and Hack Proofing Your Network: Internet Tradecraft (Syngress Media Inc.). He has written for numerous technical journals and authored many white papers on topics ranging from UNIX kernel enhancements to network protocol deficiencies. Mike is currently writing his fourth book, Modern Network Infrastructure Security (Addison Wesley). Mike serves on the advisory boards of Qualys, IMG Universal, Vigilant, and Sensory Networks. Currently, Mike holds a research role at Cisco Systems. Prior to that Mike has held senior roles at the following companies: @stake, Guardent, ISS, and Cambridge Technology Partners. Mike has a CISSP certification and is interested in real world applications of game theory.

Research Interests:

Open source software, network security tool design, macro Internet systems, protocol design and implementation, financial systems

CIAG Research Projects:

The Common Vulnerability Scoring System, Internet infrastructure scanning (BGP, DNS), Critical Infrastructure sector analysis, electronic fraud profiling

Speaking Engagements:

RSA, CanSecWest, The BlackHat Briefings, The CSO Interchange

Standards Committee Engagements:

IETF

List of Publications:

  • Book: Hacker's Challenge I
  • Book: Hacker's Challenge II
  • Book: Building Open Source Network Security Tools

Contact: mschiffm@cisco.com