Our contributors
Julian Evans
Julian Evans is an internet security entrepreneur and Managing Director of education and awareness company ID Theft Protect (IDTP). IDTP leads the way in providing identity protection solutions to consumers and also works with large corporate companies on business strategy within the sector on a worldwide basis. Julian is a leading global information security and identity fraud expert who is referenced by many leading industry publications.
Armando Romeo
Armando is the founder and lead author of eLearnSecurity. In his 15 years of experience in the field, Armando has been involved both in the research and in the solution development field for top level firms. He is a consultant and trainer and specializes in the Web Application Security field. Since the inception of the Hackers Center web portal at the age of 16, all the way to his current position as CEO of eLearnSecurity, his philosophy has always been: Learn. Practice. Share.
Gary S. Miliefsky
Gary S. Miliefsky is a regular contributor to Hakin9 Magazine. He is the founder and Chief Technology Officer (CTO) of NetClarity, Inc, where he can be found at http://www.netclarity.net. He is a 20+ year information security veteran and computer scientist. He is a member of ISC2.org, CISSP® and Advisory Board of the Center for the Study of Counter-Terrorism and Cyber Crime at Norwich University. Miliefsky is a Founding Member of the US Department of Homeland Security (http://www.DHS.gov), serves on the advisory board of MITRE on the CVE Program (http://CVE.mitre.org) and is a founding Board member of the National Information Security Group (http://www.NAISG.org).
Matthew Jonkman
Matt is the founder of emergingthreats.net, the only open and community based intrusion detection ruleset, and is also president of the Open Information Security Foundation (OISF). The OISF is building Suricata, an next generation ids funded by the US department of homeland security.
Michael Munt
Rebecca Wynn
Rebecca Wynn, MBA, CISSP, LPT, CIWSA, NSA/CNSS NSTISSI 4011-4016 is a Senior Information Security Analyst with NCI Information Systems, Inc. She has been on the Editorial Advisory Board for Hakin9 magazine since 2008.
Rajdeep Chakraborty
Microsoft® MVP – Consumer Security (2009, 2010)
http://www.malwareinfo.org
http://in.linkedin.com/in/rajdeepchakraborty
http://mvp.support.microsoft.com/profile=62F27767-F7D0-448F-84C7-F28501B6ECCB
Nilesh Kumar
Nilesh Kumar is working as an Engineer-Security Analyst with Honeywell Technology Solutions Lab, Bangalore, India. He is mainly focused on Application Security ranging from Code Review to Black Box Testing. Apart from that he shows interest in Network Security and Reverse Engineering. Blog: nileshkumar83.blogspot.com
Mervyn Heng
Mervyn Heng, CISSP, is a Security analyst from the sunny shores of Singapore. Information Security is one of his myriad hobbies and his passion motivates him to write articles as his
contribution to the community. When he is not busy trying to save the world, he is learning to play the guitar and building his toy collection. If you have any comments or queries, please contact him at commandrine@gmail.com.
Mauro Meneghin
Italian Mechanical Engineer, age 31, actually working as high school teacher. Hobby: software programming and hacking from 10 years.
Michael R. Heinzl
Michael R. Heinzl is engaged with it-security and related areas for some years, especially with penetration testing and reverse code engineering. Contact is possible through http://awesec.com or through the Austrian security website https://defense.at
Salvatore Fiorillo
Salvatore is a security consultant and researcher focused on weaknesses in the logic of physical and digital systems. He holds a Master of Computer Security accomplished in Western Australia and the ISO 27001 certification, and have trained hundreds of security officer either of public and private organizations. As consultant he works only for few, interesting and selected customers. sfiorillo@theosecurity.com
Israel Torres
Hacker at large with interests in the hacking realm.
hakin9@israeltorres.org
hakin9 crypto challenge
http://hakin9.israeltorres.org/
Daniel Lohin
Daniel Lohin currently works as a Information Security consultant at Booz Allen Hamilton. Daniel Lohin is focused on incident detection as well as response. He is currently finishing up his Master’s in Information Security at George Mason University. When he is not studying, working or breaking his computer he is bike riding with his girlfriend, Meagan.
Wardell Motley Jr.
Wardell Motley is a Systems Administrator for a Large clothing Manufactures in Dallas Texas. He is a member of the ISSA and in his spare time works as freelance IT security researcher.
Ali Hussein
The author has been working as a network security officer for different large companies for more than five years. His day today activity is related to firewall auditing, IDS/IPS, and policy
enforcement. He is currently a Ph.D. student, holding an MS.c. degree in Computer Information Systems, and a BS.c. degree in Computer Science. Throughout his working career he managed to gain a couple of well known technical certificates such as: CNI, CLP10, CLA10, CLDA, IBM Certified Specialist – System p Administration, Novell Linux Specialist, and RHCE.
Antonio Fanelli
Electronics engineer since 1998 and is extremely keen about information technology and security. He currently works as a project manager for an Internet software house in Bari, Italy. E-mail: log2ins@gmail.com.
Aditya K Sood
Aditya K Sood is a Sr. Security Researcher at Vulnerability Research Labs (VRL), COSEINC. He been working in the security filed for the past 7 years. He is also running an independent security research arena, SecNiche Security. He is an active speaker at security conferences and already has spoken at EuSecWest, ExCaliburCon, Xcon, Troopers, Owasp, Xkungfoo, CERT-IN etc. He has written a number of whitepapers for Hakin9, Usenix, Elsevier and BCS.
He has released a number of advisories to forefront companies. Besides his normal job routine he loves to do a lot of web based research and designing of cutting edge attack vectors.
Didier Stevens
Didier Stevens is an IT Security professional specializing in application security and malware. Didier works for Contraste Europe NV. All his software tools are open source.
Tim Kulp
Tim Kulp (CISSP, CEH) is an Information Security professional in Baltimore, MD. He specializes in secure software development and penetration testing web applications. In recent years Tim's focus has been working with development teams on updating applications to utilize secure coding practices and studying the security impact of Social Media.
Abhijeet Hatekar
Abhijeet Hatekar works as a Security Analyst II in Microsoft India R&D Pvt. Ltd. He is an author of open source VoIP security tools including OAT, VideoJak and XTest. Abhijeet enjoys Reversing Malwares, writing security tools in his free time. Currently he is focusing on writing IDS signatures and can be reached at Abhijeet@chackraview.net
Francisco Alonso
Francisco Alonso. A.k.a. Reverse Skills. Security researcher from Spain, 26 years old
http://twitter.com/revskills
reverseskills@gmail.com
Mauro Gentile
Mayank Aggarwal
Mayank is a security researcher at Global Threat Center, SMobile Systems where his research focuses on exploiting security loopholes in smartphone’s, malware analysis and reverse engineering. He received his M.S in network security from The Ohio State University, USA
and is a certified ethical hacker (CEH). The author can be contacted at:maggarwal@smobilesystems.com
Tam Hanna
Tam Hanna has been in the mobile computing industry since the days of the Palm IIIc. He develops applications for handhelds/smartphones and runs for news sites about mobile computing:
http://tamspalm.tamoggemon.com
http://tamspc.tamoggemon.com
http://tamss60.tamoggemon.com
http://tamswms.tamoggemon.com
If you have any questions email Tam at: tamhan@tamoggemon.com
Florian Eichelberger
flo@dynamix.at
Ric Messier
Ric began in the IT industry and developed a lifelong interest in security in the early 80s. He worked for a global Tier 1 ISP for a half dozen years and spent several years doing security assessments for a global leader in telecommunications solutions.
Matt Davis
Matt Davis aka enferex, has played a software engineer by day, and hacker of software when the lights go down. He has been part of the 757Labs nerd-posse in the Hampton-Roads Virginia area since 2003 when he helped to start a local geek-gathering.
Jeremiah Brott
Jeremiah currently holds a lead role with Access2Networks Toronto as an Information Security Consultant. In addition to holding numerous certifications, Jeremiah is also the professor for
Malicious Code – Design & Defense along with Ethical Hacking at Sheridan Institute for the Applied Information Sciences System Security degree program.
Hacker’s do it with all sorts of characters…
www.IHackedThisBox.com
Antonio Merola
Antonio Merola is a security expert. He started his career 10 years ago; he used to work as consultant serving several company as Systems Administrator (Microsoft Certified Systems Engineer). Since 2001 he has been involved in many aspects of perimeter security such as
firewall, vpn, intrusion detection etc. as employee for Telecom Italia. Additional, as a freelancer, he serves several companies as consultant and instructor on a wide variety of security topics.Antonio, holds several certifications and is working towards to complete his University Degree in Informatics Engineer from Università degli Studi di Napoli. He is a speaker on international security events and as author he published articles in several Italian magazines and has been collaborating with hakin9. His recent interests include honeypots, wireless security solutions and forensic analisys. Contact the author at a.merola@securityindepth.org
Thomas Wilhelm
Thomas Wilhelm has been in involved in Information Security since 1990, where he served in the Army for eight years as a Signals Intelligence Analyst / Russian Linguist / Cryptanalyst. A speaker at security conferences across the U.S., including DefCon, HOPE, and CSI, he has been employed by Fortune 100 companies to conduct Risk Assessments, participate and lead in external and internal Penetration Testing efforts, and manage Information Systems Security
projects. He currently designs and conducts Hacker training courses and certification boot camps through Heorot.net.
Thomas is also a Doctoral student who holds Masters degrees in both Computer Science and Management. Additionally, he also dedicates some of his time as an Associate Professor at Colorado Technical University, and has contributed to multiple publications, including both magazines and books. His latest contribution was multiple chapters in the Syngress publication
titled “Professional Penetration Testing,” released in August, 2009, which was his fourth book contribution to Syngress.
Richard C. Batka
Richard C. Batka has held various management and engineering positions with Microsoft, PriceWaterhouseCoopers, Symantec, Thomson Reuters, and JPMorgan Chase. He is devoted to the complex issues of enterprise strategy, application development, security, infrastructure, data management and regulatory compliance. A graduate of New York University (w/ honors) he holds numerous industry certifications. Mr. Batka can be reached at rbusa1@gmail.com.
Harlan Carvey
Harlan Carvey is an incident responder and forensic analyst based out of the Metro DC area. He is the author of Windows Forensic Analysis, published in May 2007 by Syngress/Elsevier.
Marco Lisci
Marco Lisci is a System Engineer and IT Consultant interested in creativity applied to computer systems. He works on information systems, network infrastructure and security. After a long period as Web Chief in creative agencies founded BadShark Communications, a web, video and audio, seo, advertising and security company. Stay tuned on badshark.org.
Rishi Narang
Rishi Narang is a Vulnerability R&D consultant working with Third Brigade Inc., a security software company specializing in host intrusion defense. Narang’s profile includes research on recent & zero day vulnerabilities, reverse engineering and IDS/IPS Signature Development. He holds a Bachelor’s degree in Information Technology, and has authored articles on recent advances in Information Security & Research. He has been a speaker in OWASP & private security trainings and can be reached through his personal blog Greyhat Insight (www.greyhat.in). The information and opinions expressed in this article are the personal opinions of Rishi Narang provided for informational purposes only.














