Florent Autréau, Mataru Consulting
After studying Computer Science at INSA Lyon, Florent joined Hewlett-Packard, then Sun Microsystems, where he actively participated in software development. This notably included stealth firewall (SunScreen), secured networking protocol (Ipsec), securitisation of Operating System (Solaris), system and network management (TMN suite) and Highly Available telecommunication platform (Netra HA Suite), leading assistance for major customers to deploy these technical solutions. Florent acquired recognised methodologies and pragmatic know-how in analysis, design
development and deployment of security project.
In 2003, Florent co-funded Mataru (and Mataru Consulting later on) to share his
strong background in Network Security, Network and System Administration,
independently from manufacturers and software providers. As CTO, he is responsible
for security product architecture and implementation (Mataru Secure Engine and
Mataru Secure NOC). Additional work includes the design and development securely configured network appliances (USB Secure Management) for a large US network
manufacturer.
With more than 20 years of experience, Florent Autréau is a seasoned professional
and a recognized expert in IT Security. On a regular basis, Florent conducts risk analysis and security audit for IT infrastructure, products and solutions. He is also teaching “IT Security and Security Assesment” for the master “Security, Cryptography and Coding of Information System - INPG/University of Grenoble”
|
|
Boris Balacheff, HP Labs
Boris Balacheff is a HP Labs expert in the field of computer security, specializing in the area of trusted computing and trusted infrastructure technologies. He sits on the Board of Directors of the Trusted Computing Group (TCG) and co-chairs its Certification Program Committee. Boris also serves on HP’s corporate Security Office where he focuses on HP’s trusted infrastructure security strategy.
Boris Balacheff’s research has ranged from cryptographic algorithms and protocols to networking and computer security. He developed an expertise in smartcard technology and was the Technical Committee representative for HP on the PC/SC specification working group. He is one of the early contributors to the invention of Trusted Computing technology, and he co-authored the HPLabs’ book on this topic. He also served on the Technical Committee of the Trusted Computing Platform Alliance (TCPA) during the development of its early specifications. Boris Balacheff joined HP Labs in 1997 with a French “Diplome d’Ingenieur” degree in applied mathematics and computer science.
|
|
Hans Brandl, Infineon Technologies AG
Hans Brandl studied communication technology at the Technical University in Munich. He is with Infineon since 1998, coming from the Siemens AG defense group where he worked at the development and management of security devices and systems for governmental use. He continued his security related work at Infineon with projects at the smartcard group and is now with the Secure Platform Group engaged in technical marketing of trusted computing solutions. Related to this he is involved in standardisation work of the Trusted Computing Group (TCG) in several functions. Also he initiated and run several national and European research projects mainly about Trusted Computing basic research as well as advanced applications.
|
|
Lucas Davi, Ruhr-University, Bochum
Lucas Davi is a research assistant at the System Security Lab at Ruhr-University Bochum, Germany. He received his MSc in IT-Security from the same university. His current reserach focuses on return-oriented programming (ROP) for ARM and Intel based systems. He is working on new attack methods and countermeasures against ROP. His further research interests include operating system security and Trusted Computing.
|
|
Kurt Dietrich, Graz University of Technology
Kurt Dietrich studied Telematics (computer science) at the Graz University of Technology where he graduated to Dipl.-Ing. (MSc) in 2002. In the year 2000 he joined the Institute for Applied Information Processing (IAIK) where he started his career as staff member of the EC funded project AIDA. He is and has been conducting research in the areas of Public Key Infrastructures, Trusted Computing, mobile and embedded security, applied cryptography and anonymous credential systems. Moreover, he has ten years of experience in the area of secure software development for embedded devices and cryptographic algorithms and is responsible for maintenance and further development of IAIK's JCE MicroEdition cryptographic library.
He has participated in many national and EC funded research projects: AIDA, Open-TC, SECRICOM and he is the scientific coordinator of the TOPAS ans SEPIA project. Furthermore, he is a lecturer at Graz University of Technology and gives lectures in the area of secure software development and applied cryptography.
|
|
Loïc Duflot, ANSSI (French Network and Information Security Agency)
Loïc Duflot is a research engineer for the French Network and Information Security Agency (ANSSI) where he holds the position of deputy head of the Scientific and Technical division. He holds a PhD in Computer Science and engineering degrees. He is mostly interested in Trusted Computing and PC hardware-related security issues and he is looking at the security of interactions between software and hardware.
|
|
Jan-Erik Ekberg, Nokia Research Center
Jan-Erik Ekberg is a principal resarch engineer at Nokia Research Center Helsinki. He has been working with security protocols in communication networks for over 10 years - including technologies like GSM, IN, WLAN, BT and BT-LE. For the last 5 years his research interests have also included topics related to hardware-assisted platform security mechanisms - from legacy solutions in the mobile domain to TCG technologies like TPM and MTMs. He is a member of the Mobile WG in TCG.
|
|
Carlo Gebhardt, Information Security Group, Royal Holloway
Carlo Gebhardt is currently a final year PhD student with the Information Security Group at Royal Holloway University, London. He is particularly interested in the security aspects of virtualisation, the trusted computing paradigm, and consequently is writing his thesis on the subject of trusted virtualisation.
Carlo received his Diploma in Computer Engineering from the University of Applied Sciences, Ulm, Germany. He has been working in the area of operating system and network security for over 10 years, and has a particular interest in platform security. He has extensive background in IT security from previous work experience in industry.
|
|
David Grawrock, Intel
David Grawrock is a Senior Principal Engineer and Security Architect for the Intel Security Center of Excellence which is part of the Intel Architecture Group. David's role in the group is to help ensure the security of Intel products. David was the lead security architect for Trusted Execution Technology and helped bring that technology to market. Outside of Intel David was the Chair of the Trusted Computing Group TPM workgroup and vice chair on the technical committee. David has worked in the computer industry for 30 years holding positions with Symantec, Central Point Software, and Lotus. David is the holder of 41 patents with many more pending. David does have a life outside of Intel; he is a proud husband, father, and grandfather, retired dedicated soccer coach, fly fisherman, photographer, and long suffering family genealogist.
|
|
Andrew Martin, University of Oxford
Andrew Martin lectures to Software Professionals as part of Oxford University's Software Engineering Programme. He has a background in formal methods, but today devotes most of his time to issues of security in distributed systems. He has been particularly interested in the grid computing paradigm, the security questions that raises, and how the technologies of trusted computing can help to address the challenges in that area.
Andrew wrote a doctoral thesis on the subject 'Machine-Assisted Theorem Proving for Software Engineering', in the early 1990s. He then worked as a Research Fellow in the Software Verification Research Centre at the University of Queensland, Australia. Returning to the UK, he was briefly a lecturer at the University of Southampton, before returning to Oxford to take up his present post in 1999. Dr Martin is a fellow of Kellogg College, Oxford.
|
|
Jonathan McCune, Cylab, Carnegie Mellon University
Jonathan McCune is a Research Systems Scientist for CyLab at Carnegie Mellon University. He earned his Ph.D. degree in Electrical and Computer Engineering from Carnegie Mellon University, and received the A.G. Jordan thesis award. He received his B.Sc. degree in Computer Engineering from the University of Virginia (UVA). Jonathan's research interests include secure systems, trusted computing, virtualization, and spontaneous interaction between mobile devices.
|
|
Martin Pirker, Graz University of Technology
Martin Pirker obtained his master's degrees from Graz University of Technology. When Trusted Computing research was started at IAIK he joined as a full-time research assistant. As part of the Secure and Correct Systems working group at IAIK his research focuses on the security aspects of Trusted Computing and related technologies. His work produced one of the first PrivacyCA services worldwide. He is co-author of the Trusted Computing for Java effort. In his current work he ponders the consequences and opportunities of combining up-to-date Trusted Computing and virtualization technologies. Trusted Computing aware infrastructures remain an active topic.
|
|
Graeme Proudler, HP Labs
Graeme Proudler is a researcher at Hewlett Packard Laboratories and the Chair of the Trusted Computing Group’s Technical Committee. He was the technical lead of HP-Labs’ research group that contributed to Trusted Computing Platform Alliance specifications, a founder member of the TCPA Technical Committee, and original editor of the TCPA main specification.
Graeme reads Physics at Wadham College, Oxford. After graduation, he designed communication-security equipment. Since joining HP Laboratories, he has worked on information security, networking and mobile communications. His current interests are trust and information security in computer platforms and networks.
|
|
Ben Smyth, University of Birmingham
Ben Smyth is a PhD student at the University of Birmingham. He is interested in the formal analysis of cryptographic protocols with a particular focus on trusted computing. In 2006 he identified a flaw in the Direct Anonymous Attestation protocol, and its fix. He has worked extensively with the applied pi calculus, and co-authored a handbook chapter on the topic. In 2009 he spent five months at Ecole Normale Superieur, Paris, working on ProVerif.
|
|
Christian Stüble, Sirrix AG Security Technologies
Christian Stüble is CTO at Sirrix AG security technologies and responsible for the development of the TURAYA product family. His main research interests are secure operating systems, trustworthy computing, and property-based attestation.
|
|
Joanna Rutkowska, Invisible Things Lab
Joanna Rutkowska, founder of Invisible Things Lab, leads a team of researchers who focus on system-level security. This includes kernel, hypervisor, chipset and CPU security issues. Some of the achievements of the team include: bypassing Intel TXT, attacks on SMM, Intel AMT and BIOS, and demonstration of practical Xen hypervisor compromises. She is also known for writing Blue Pill -- the first virtualization-based rootkit with nested virtualization support, and also for her work on various kernel mode malware for Windows and Linux in the past. For the last several months she has been a full time architect/developer/tester of an open source Qubes OS. Qubes is based on Xen and Linux, and has an ambitious goal of revolutionizing desktop security.
|
|
Mark Ryan, University of Birmingham
Mark Ryan is Professor of Computer Security at the University of Birmingham. He obtained his bachelors and masters degrees from University of Cambridge, and his PhD from Imperial College London. His current research is in computer security, particularly the analysis of cryptographic protocols. He has recently worked on protocols for electronic voting, trusted computing, and anonymous service usage. Previously, he was active in applications of logic, and he co-authored the textbook 'Logic in Computer Science' which has sold about 20 000 copies.
|
|
Ahmad-Reza Sadeghi, Ruhr-University, Bochum
Ahmad-Reza Sadeghi is the head of System Security Group at Horst Goertz Institute for IT Security at Ruhr-University Bochum, Germany. He received his MSc in Mechanical as well as in Electrical Engineering. He received his PhD in Computer Science with focus on privacy protecting cryptographic systems from Saarland University in Saarbruecken, Germany. Prior to academia he has been working in Research and Development of IT and Telecommunications enterprises, amongst others with Ericson Telecommunications. He has strongly contributed to and put forward the international research on Trusted Platforms and is currently leading several European and national research and development projects on design and implementation of trustworthy Infrastructures as well as on design of various privacy preserving cryptographic systems. He is actively involved in IT security research and serves as program committee member as well as co-chair of various conferences and workshops in the area of cryptography and information security. His research interests include security architectures and models, Trusted Computing, privacy enhancing technologies, and cryptographic protocols in particular for RFID based systems.
|
|
Ronald Tögl, Graz University of Technology
Ronald Toegl is a Research Assistant at the Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Austria, holding BSc and MSc degrees in Telematics from the same University. Ronald has been working on the integration of Trusted Computing in Java for some years and is Specification Lead for JSR 321, the upcoming standard API for Java. His research interests range from Trusted Computing to formal methods in security APIs and protocols.
|
|
Allan Tomlinson, Information Security Group, Royal Holloway
Dr Allan Tomlinson is a senior lecturer with the Informationion Security Group at Royal Holloway, University of London. He was awarded a PhD in 1991 from the University Edinburgh. His thesis was on "VLSI architectures for cryptography". He then joined the Institute of Microelectronics at the National University of Singapore, working on secure NICAM broadcasting and video compression. In 1994 he moved to General Instrument in California to work on the Digicipher II pay-tv system. Before joining the Information Security Group at Royal Holloway in 2003, he was Principal Engineer at Barco Communications Systems where he was responsible for the development of the "Krypton" DVB Video Scrambler.
His current research interests are in secure distributed systems security, mobile network security, and trusted computing. In particular, issues of trust and privacy in these areas. He is the PI for the Mobile VCE Instant Knowledge programme (DT/F007310/1) investigating privacy in mobile social networks. He has over 30 publications in these areas and has served on over 10 technical programme committees..
|
|
Paul Waller, CESG
Paul Waller is the technical lead for Trusted Computing work in CESG, the UK Government's National Technical Authority for Information Assurance. He has worked in the organisation for 9 years, after studying Mathematics at Oxford University. As well as Trusted Computing, Paul has worked on security evaluations in CESG, in particular IP encryption at various different security levels.
|
|
Ian White, CESG
Ian White is a senior technical leader for CESG. He has worked for the organisation for 10 years. Prior to working at working at CESG Ian completed a Computer Science degree at Edinburgh University.
|
|
