Arron "finux" Finnon

Arron has a number of years experience in IDS/IPS auditing and testing, and has authored a number of white papers and talks on IDS/IPS evasion techniques, IDS/IPS signature matching failures, as well as founding the Open Source Network Intrusion Framework (OSNIF) project. The OSNIF Projects aim is to produce and promote an open source testing methodology for IDS/IPSes.

 

Craig Young - Vert Security Researcher at Tripwire

Craig Young (@CraigTweets) is a computer security researcher with Tripwire's Vulnerability and Exposures Research Team (VERT). He has identified and responsibly disclosed dozens of vulnerabilities in products from Google, Amazon, IBM, NETGEAR, and others. His research has resulted in numerous CVE assignments and recognition in the Google Application Security Hall of Fame. His BSides SF talk on Google's 2-step verification system provided the impetus for Google to deploy security fixes which make millions of Google users safer.  Six months later his DEF CON 21 talk on WebLogin token abuse once again led to improved security for all.

Linkedin: www.linkedin.com/in/craigatl

Hugh Davenport  - Development Manager at Aura RedEye

Hugh Davenport works as a Development Manager at Aura RedEye Security in Wellington. He studied at Victoria University of Wellington and graduated with a Masters of Engineering in Software Engineering, as well as a Bachelor of Science with Honours in
Computer Science.
During his studies, he worked at Catalyst IT as an open source web developer. At Catalyst he worked on an open source PHP e-portfolio system called Mahara. This year, he has been working as a key player at Aura RedEye Security on a managed vulnerability scanning service.

 

John Clelland - Founder of Information Governance Limited

John is an experienced company director, owner and partner with 25 years’ experience in architecting specialist IT systems.  In 2004 John was one of the original founders of Information Governance Limited and led the development of Proteus Enterprise™.  In 2010 John conceived the iGRC project, pushing further the boundaries of information security and business continuity management.

Linkedin: https://www.linkedin.com/pub/john-clelland/2/583/179

 

João Gouveia - AnubisNetworks

João Gouveia (CTO) & Co-founder of AnubisNetworks has specialized in the IT security field for over 13 years* Deep knowledge over the broad spectrum of the IT landscape security* Focused on understanding current and future threats and align technology strategy to come up with solutions for emerging problems.* Recognized by Microsoft and others for work related to vulnerability assessment and responsible disclosure of security flaws* Over 8 years of experience designing and deploying email security platforms.

 

 

Michael H Popham - Managing Partner, Syndicus Information Security LLP

Mike is a Fellow of the Royal Society for the encouragement of Arts, Manufactures & Commerce. An MBA, he studied at the Kingston Business School to bridge the gap between a 20-year career in the Royal Air Force as a communications electronics engineer and a career in industry. After 10 years in the ranks, he was commissioned into the RAF’s communications-electronics branch and served until 1993, retiring as Squadron Leader. Mike holds a full technological certificate in telecommunications from the City and Guilds of London Institute.

Mike conceived and project managed iGRC® - an enhanced version of the Proteus® Enterprise engine, designed to bring the already mature GRC engine into the real time security operations space. The programme involved researching and building an innovative integrated governance, risk and compliance (iGRC) information infrastructure protection system. This was completed in December 2011. This information security management system is now a dynamic, real-time risk management system able to apply detailed risk and compliance treatments to critical points in information ecosystems.

Linkedin: https://www.linkedin.com/in/mikepopham

Patrick Mcilwee - F.B.C.I, Bsc (Hons) M.B.A, M.T.I.S, A.E.P.S

Fellow of the BCI - Business Continuity Institute - has over 20 years experience in the fields of disaster management and business continuity and has been involved in operational responses to 4572 incidents both within the UK and overseas.

Patrick’s wide ranging experience, including detailed knowledge of BS25999, has enabled him to offer advice and support across the range of Multi-Nationals to SMEs in a wide variety of sectors including; Airports Authorities, Local Government, Health Services, Industrial Organizations, Local Authorities, Retail Outlets, Transport & Logistics Organizations, Utilities Companies, Voluntary Organizations, Banks and Banking Regulators.

A prominent member of the BCI’s Global Membership Council, Patrick has used his in depth knowledge to help develop certification standards and skills benchmarking. He has also volunteered his experience to co-ordinate a BCI response to the recent tragic event in Japan following the March 2011 earthquake. Additionally Patrick acts as an international guest speaker for the BCI and the BCM - Business Continuity Management - community.

Patrick is a business continuity consultant and trainer sharing his knowledge with those new to the business continuity discipline as well as more experienced practitioners who are seeking more in-depth learning around dealing with crises and emergency management.

Linkedin: uk.linkedin.com/pub/patrick-mcilwee-fbci-ficpem/32/557/579

Simon Bennetts - Lead OWASP Zed Attack Project and member of the Mozila Security Team

Simon Bennetts is the OWASP Zed Attack Proxy project lead and a member of the Mozilla security team. He contributes to a range of open source projects and is an experienced international speaker.

For more information see https://www.owasp.org/index.php/User:Simon_Bennetts

Linkedin: https://www.linkedin.com/pub/simon-bennetts/13/57a/3b