Instructors

Dan 013

Dan Hestad

Dan is the President of Beadwindow, a New Hampshire based security consulting company. Formerly, Dan was the director of the Advanced Threat Analysis Center (ATAC) for Northrop Grumman Corporation. He has an extensive background and interest in vulnerability research, secure coding, protocol analysis and cryptography. He also has experience in red team and deception operations, Information Operations and Information Warfare. Much of Dan’s research remains classified. He has contributed to several high profile cyber investigations including Solar Sunrise and Titan Rain.

Prior to founding Beadwindow, Dan spent over 10 years running SIGINT operations for the United States Navy; collecting network based intelligence on such targets as narcotics traffickers, nuclear proliferation operations and counterterrorism targets. He spent 4 years at the NSA (National Security Agency) conducting vulnerability research and supporting national cyber intelligence operations. Dan also served as the Director of Security (CISO) at MFS Investment Management in Boston, MA.

Dan completed his graduate studies at the Naval Postgraduate School and did extensive research into computational trust models. He also studied and taught at the National Cryptologic School. Dan has spoken at such venues as OWASP, RSA, Gartner, and CSI. He is a regular contributor to the Center for Internet Security metrics research efforts. Dan carries the CISSP, PCI QSA, CEH, CEPT and CRE certifications.

DRice

Dave Rice

David Rice is an internationally recognized cybersecurity expert, Consulting Director for Policy Reform at the U.S. Cyber Consequences Unit, and author of the critically acclaimed book Geekonomics: The Real Cost of Insecure Software. Mr. Rice is a key figure shaping the discussion in cybersecurity and his work informs decision makers worldwide. As Director of The Monterey Group, a private consulting firm, Mr. Rice advises a variety of clients on a range of issues including: cybersecurity strategy development and execution, corporate cyber risk management, cybersecurity metrics, identity management, and secure software development practices.

Prior to private industry, Mr. Rice served as an analyst for the National Security Agency and Special Duty Cryptologic Officer for the United State Navy. The U.S. government recognized and awarded Mr. Rice for “significant contributions” to the Department of Defense and the National Security Agency for developing security configuration and design guidance for critical national infrastructure and global networks. The Department of Defense, praises “(his) expertise in vulnerability discovery and countermeasure design,” designating it “exceptional and world class.” The DoD commended Mr. Rice for “providing critical configuration and policy guidance on current and emerging technologies, aiding decision makers and protecting sensitive information systems worldwide”.

George R_3

George Ressopoulos

George Ressopoulos is an Information Assurance Engineer working for a large U.S. Defense Contractor in the Information Security Division.  He has over 8 years of computer and information security related experience.  His focus areas have been in Security Risk Assessment, Vulnerability Scanning & Analysis and Red & Blue Teaming efforts to include penetration testing and enhancing Enterprise defensive capabilities. He has pioneered the development of custom threat detection tools, Red/Blue team methodologies and is considered a subject matter expert in the realm of social engineering and physical to logical intrusion attacks.

He holds a Bachelors degree in Management Information Systems from the University of Central Florida and a Masters’ degree in Business & Organizational Security Management from Webster University.  He is also a Certified Expert Penetration Tester (IACRB).