Alexey Smirnov is a PhD student in the department of Computer Science at Stony Brook University. His is broadly interested in computer security, operating systems, and networks. He has been working on various systems research projects in the past such as Repairable Database Systems and DIRA. Alexey expects to complete his PhD within the next two or three years.

Alex Stamos is a founding partner of iSEC Partners, LLC, a strategic digital security organization, with several years experience in security and information technology. Alex is an experienced security engineer and consultant specializing in application security and securing large infrastructures, and has taught many classes in network and application security.

Before he helped form iSEC Partners, Alex spent two years as a Managing Security Architect with @stake. Alex performed as a technical leader on many complex and difficult assignments, including a thorough penetration test and architectural review of a 6 million line enterprise management system, a secure re-design of a multi-thousand host ASP network, and a thorough analysis and code review of a major commercial web server. He was also one of @stake's West Coast trainers, educating select technical audiences in advanced network and application attacks.

Before @stake, Alex had operational security responsibility over 50 Fortune-500 web applications. He has also worked at a DoE National Laboratory.He holds a BSEE from the University of California, Berkeley, where he participated in research projects related to distributed secure storage and automatic C code auditing.

I am a doctoral student in the sociology department at the University of Nevada, Las Vegas. The vast majority of my friends are "techies," and as a social scientist, I'm a bit of an outcast. I mitigate some of that by focusing my research attention on the effects of technology on and within society. While getting my master's degree in Criminal Justice at Grand Valley State University, I began to look at some of the laws protecting information and technology, and their social consequences. For my dissertation, I'd like to turn my attention specifically on hackers, hactivism, and global social movements. In my spare time I'm a big time gaming geek which I balance with my addiction to drag racing and canyon carving on my sport bike.

Andre Gold is currently Director of Information Security at Continental Airlines, one of the world's largest and most successful commercial and freight transportation providers. Before assuming his current role, Mr. Gold served as Technical Director of Internet Services, responsible for Continental's continental.com property, which contributes over a billion dollars a year in revenue for Continental. Prior to Continental Airlines, Inc. Mr. Gold worked as a consultant in the IT industry. Mr. Gold has a BBA in Computer Information Systems from the University of Houston-Downtown and received his commission in the Army from Wentworth Military Academy. In addition to his position at Continental, Mr. Gold servers on the Microsoft Chief Security Officer Council, the Skyteam Data Privacy and Security Subcommittee, as well as eEye Digital Security's Executive Advisory Council.

Annalee Newitz is EFF's Policy Analyst. She writes policy recommendations and white papers, including recent papers on the dangers of EULAs, the problems with anti-spam regimes, and how to blog anonymously. Her special areas of interest are free speech, anonymity, network regulation, and expanding the public domain. The recipient of a Knight Science Journalism Fellowship in 2002, she writes a syndicated weekly column called Techsploitation and is a contributing editor at Wired magazine.

Anthony currently works for Logic Library Inc as a software engineer developing static binary analysis software. He has been active in computer and network security since early highschool. His main interests lie in kernel development, binary reverse engineering, and embedded systems.

Ben Kurtz is a principal researcher and developer of threat generation and analysis technologies at Imperfect Networks. Earlier, he earned his Masters of Computer Science by applying language theory to the visual analysis of probe data under the DARPA DASADA program, but has since discovered that it's much easier to break something than to fix it. In other incarnations, he has worked on critical systems for power plants, passenger jets, and insurance companies. If you knew him better, this would make you nervous.

Phen has been doing social engineering since the late 1980's. Starting off by running a BBS and convincing the local ISP to give her free Internet usage to " working " at West Point Military Academy. She has used her skills to get into places such as the World Bank, Lockheed & Martin, AT&T, along with the Bank of England & other corporate and financial institutions. Although not a member, Her current affiliations are with The Ninja Strike Force on behalf of Cult of the Dead Cow, which whom she has been working on projects with for the past 4 years. She enjoy's red lipstick, black skirts and strong tequila.

The Shmoo Group is a non-profit think-tank comprised of security professionals from around the world who donate their free time and energy to information security research and development. They get a kick out of sharing their ideas, code, and stickers at DefCon. Whether it's mercenary hacking for CTF teams, lock-picking, war-flying, or excessive drinking, TSG has become a friendly DefCon staple in recent years past. Visit www.shmoo.com for more info.

Cerebus has worked for 10 years for one of the world's largest Marketing Database companies. He has designed Identity detection schemes for some of the top credit agencies in the US.

Christian Grothoff is a Ph.D. Student in Computer Sciences at UCLA. His research areas are programming languages and security with focus on privacy enhancing technologies. He started and maintains the GNUnet, the GNU project for secure peer-to-peer networking with focus on anonymous file-sharing. Together with Krista Bennett he started the Lost in Translation (LiT) project, which explores new ideas in text steganography.

Chuck Willis received his M.S. in Computer Science from the University of Illinois at Urbana-Champaign in 1998. After graduation, he spent five years conducting computer forensics and network intrusion investigations as a U.S. Army Counterintelligence Special Agent. Following a brief foray into security software engineering, Chuck is now conducting Penetration Testing and Vulnerability Assessments as a security contractor. Chuck has previously spoken at the Black Hat Briefings USA and the IT Underground security conference in Europe. Chuck has contributed to several open source security software projects and is a member of the Open Web Application Security Project, a Certified Information Systems Security Professional, and a Certified Forensic Computer Examiner. Chuck's past presentations are available on his Web site at http://www.securityfoundry.com/

Daniel Burroughs is currently an Assistant Professor in the College of Engineering at the University of Central Florida. His current research involves the development of the Florida Department of Law Enforcement Data Sharing Consortium and the development of a undergraduate security engineering program at UCF. His past work at the Institute for Security Technology Studies at Dartmouth College focused on using target tracking techniques to correlate data from multiple IDS and other sensors spread over large scale networks.

Dan Kaminsky, also known as Effugas, is a Senior Security Consultant for Avaya's Enterprise Security Practice, where he works on large-scale security infrastructure. Dan's experience includes two years at Cisco Systems designing security infrastructure for large-scale network monitoring systems.

He is best known for his work on the ultra-fast port scanner scanrand, part of the "Paketto Keiretsu", a collection of tools that use new and unusual strategies for manipulating TCP/IP networks. He authored the Spoofing and Tunneling chapters for "Hack Proofing Your Network: Second Edition", was a co-author of "Stealing The Network: How To Own The Box", and has delivered presentations at several major industry conferences, including Linuxworld, DefCon, and past Black Hat Briefings.

Dan was responsible for the Dynamic Forwarding patch to OpenSSH, integrating the majority of VPN-style functionality into the widely deployed cryptographic toolkit. Finally, he founded the cross-disciplinary DoxPara Research in 1997, seeking to integrate psychological and technological theory to create more effective systems for non-ideal but very real environments in the field. Dan is based in Silicon Valley.

David joined Bessemer Venture Partners in 1992. David has since made 43 early-stage investments for Bessemer, including 19 that have gone public, and 16 that have been acquired by public companies. David initially focused on communications technology companies like Ciena, P-Com, and PSI-Net, and then internet services such as Keynote, Flycast, Hotjobs and Blue Nile. In 1995 he cofounded Verisign as a Bessemer-funded spinout of RSA, serving as VeriSign's initial Chairman and CFO. His other data security investments have included Counterpane, Cyota, Determina, eEye, Elemental Security, Finjan, ON Technology (acquired by Symantec), Postini, Qualys, Tripwire, Tumbleweed, Valicert and Worldtalk (both of which Tumbleweed acquired). David also teaches computer science at the Keys Middle School in Palo Alto. He received both his A.B. in math and computer science and his M.B.A. degrees from Harvard University.

David Hulton is one of the founding members of Pico Computing, Inc., a manufacturer of compact embedded FPGA computers and dedicated to developing revolutionary open source applications for FPGA systems. He is also one of the founding members of Dachb0den Research Labs, a non-profit security research think-tank, is currently the Chairman of ToorCon Information Security Conference and has helped start many of the security and unix oriented meetings in San Diego, CA.

David Mortman, Chief Information Security Officer for Siebel Systems, Inc., and his team are responsible for Siebel Systems' worldwide IT security infrastructure, both internal and external. He also works closely with Siebel's product groups and the company's physical security team. Previously, Mr. Mortman was Manager of IT Security at Network Associates, where, in addition to managing data security, he deployed and tested all of NAI's security products before they were released to customers. Before that, Mortman was a Security Engineer for Swiss Bank. A CISSP, member of USENIX/SAGE and ISSA, and speaker at RSA 2002 and 2005 security conferences, Mr. Mortman has also been a panelist at InfoSecurity 2003 and Blackhat 2004. He holds a BS in Chemistry from the University of Chicago.

Both Dean and Brandon are undergraduates in computer science at Portland State University. Both have very strong interests in the fields of wireless communications, network security, and cryptanalysis. They are also active members of pdx2600.

Deral Heiland serves as a Network Security Analyst for a fortune 500 company. Mr. Heiland manages application and network vulnerability testing, Intrusion Detection Systems, controls firewall security and anti-virus efforts. With over a decade of work in the Information Technology field, Mr. Heiland has obtained several certifications including: CISSP, SSCP, CCNA, CWLSS, and CNE5. Prior positions held include: Network Administrator, Senior Network Analyst, Database Manager, and Financial Systems Manager.

While paying the bills as a network engineer, Deviant Ollam's first and strongest love has always been teaching. Employed periodically at schools in the greater Philadelphia area, he is presently a student at the New Jersey Institute of Technology in the hopes of tacking some actual letters to his name and doing the professor gig full time. A fanatical supporter of First Amendment rights who believes that the best way to increase security is to publicly disclose vulnerabilities, Deviant has given lockpick demonstrations at other con events and various schools.

Elizabeth Stark is the main law student of freeculture.org. She went to Brown University and is currently attending Harvard Law School, where she is involved with the Berkman Center for Internet and Society on such issues as the digital media project, internet filtering reports, and drafting an Internet and technology law casebook. She is also an editor of the Harvard Journal of Law Technology, soon to be a Teaching Assistant in Cyberlaw, and conducts research for Professor Jonathan Zittrain. Elizabeth has worked and studied in such places as Berlin, London, Paris, and Singapore, is highly interested in the impact of technology on digital culture, and is (semi-) obsessed with electronic music. She is spending the summer as a legal intern at the EFF, where she gets to think about such issues 24/7.

Fabio Ghioni is advisor to several Multinational Corporations as well as Governments. He is the leading expert in the field of information security, competitive intelligence and intrusion management in an asymmetric environment. As consultant to several different Government institutions he has been the key to the solution of several terrorism cases in the past. He has serviced leading international corporations involved in the military, telecommunications, banking and technology industries. His key fields of research range from mobile and wireless competitive security to the classification of information and forensics technologies applied to identity management and ambient intelligence.

Fred Benenson graduated in May with honors from New York University's with a major in Philosophy and a minor in Computer Science. He founded the official NYU chapter of the national student organization freeculture.org. He has worked professionally as a graphic designer, web programmer, and IT technician and owns at least one DeCSS shirt. When he's not involving himself in the future of intellectual property rights (or lack thereof), he likes to take pictures for his photoblog http://fasinphotoblog.com, solve the cube, and listen to copious amounts of electronic music. He is working as a Free Culture intern this summer at Creative Commons.

Fyodor authored the popular Nmap Security Scanner, which was named security tool of the year by Linux Journal, Info World, and the Codetalker Digest. It was also featured in the hit movie "Matrix Reloaded" as well as by the BBC, CNet, Wired, Slashdot, Securityfocus, and others. He also maintains the Insecure.Org and Seclists.Org security resource sites and has authored seminal papers detailing techniques for stealth port scanning, remote operating system detection via TCP/IP stack fingerprinting, version detection, and the IPID Idle Scan. He is a member of the Honeynet project and a co-author of the books Know Your Enemy: Honeynets and Stealing the Network: How to Own a Continent.

Greg Conti is an Assistant Professor of Computer Science at the United States Military Academy. He holds a Masters Degree in Computer Science from Johns Hopkins University and a Bachelor of Science in Computer Science from the United States Military Academy. His areas of expertise include network security, information visualization and information warfare. Greg has worked at a variety of military intelligence assignments specializing in Signals Intelligence. Currently he is on a Department of Defense Fellowship and is working on his PhD in Computer Science at Georgia Tech. His work can be found at www.cc.gatech.edu/~conti and www.rumint.org.

hellNbak has been around the IT Security industry for 13 years and is the resident trouble maker of NMRC. In his spare time he is the founder and moderator of VulnWatch (www.vulnwatch.org) and a data mangler for OSVDB (www.osvdb.org).

Hernan Gips worked as security consultant for 6 years in a top security consulting company in Buenos Aires, Argentina. Doing both Pentesting and Code Auditing for local and international companies. He worked as developer and architect in many different technologies including C, C++, Java and .NET.

Gips has been a speaker at many local conferences and two international conferences last year, G-Con at Mexico City and the other in Colombia.

Gips has been participating in some projects like msyslog.

Ian Clarke is the architect and coordinator of The Freenet Project, and the Chief Executive Officer of Cematics Ltd, a company he founded to realise commercial applications for the Freenet technology. Ian is the co-founder and formerly the Chief Technology Officer of Uprizer Inc., which was successful in raising $4 million in A-round venture capital from investors including Intel Capital. In October 2003, Ian was selected as one of the top 100 innovators under the age of 35 by the Massachusetts Institute of Technology's Technology Review magazine . Ian holds a degree in Artificial Intelligence and Computer Science from Edinburgh University, Scotland. He has also worked as a consultant for a number of companies including 3Com, and Logica UK's Space Division. He is originally from County Meath, Ireland, and currently resides in Edinburgh, Scotland.

Jack C. Louis is a Senior Security Researcher for Dyad Labs. He has a background in core networking technologies, systems programming, and electronics. Jack is the lead programmer behind Unicornscan, a distributed data information engine for the the OSACE project. Jack is also the lead author of cruiser, a web application testing tool in the OSACE suite. Jack has given lectures on building secure software, offensive programming, and building miscellaneous electronic components to solve a wide variety of problems at hand. Jack is also an ISECOM OPST & OPSA Certified Instructor.

Jamie Butler is the Director of Engineering at HBGary, Inc. specializing in rootkits and other subversive technologies. He is the co-author and a teacher of "Aspects of Offensive Rootkit Technologies" and co-author of the upcoming book "Rootkits: Subverting the Windows Kernel" due out late July. Prior to accepting the position at HBGary, he was a senior developer on the Windows Host Sensor at Enterasys Networks, Inc. and a computer scientist at the NSA. He holds a MS in CS from UMBC and has published articles in the IEEE IA Workshop proceedings, Phrack, USENIX login, and Information Management and Computer Security. Over the past few years his focus has been on Windows servers concentrating in host based intrusion detection and prevention, buffer overflows, and reverse engineering. Jamie is also a contributor at rootkit.com.

Jason Scott has been full-bore collecting history of BBSes and computer culture for 20 years, with the last four being split equally between his BBS history site textfiles.com and his documentary on Dial-up Bulletin Boards, "BBS: The Documentary". With over 200 interviews and 250 hours of footage, this project overtook his life for a very long time and in a very large way. His hobbies include gardening and enjoying civil liberties.

Jay Beale is a information security specialist, well known for his work on mitigation technology, specifically in the form of operating system and application hardening. He's written two of the most popular tools in this space: Bastille Linux, a lockdown tool that introduced a vital security-training component, and the Center for Internet Security's Unix Scoring Tool. Both are used worldwide throughout private industry and government. Through Bastille and his work with the Center, Jay has provided leadership in the Linux system hardening space, participating in efforts to set, audit, and implement standards for Linux/Unix security within industry and government. He also focuses his energies on the OVAL project, where he works with government and industry to standardize and improve the field of vulnerability assessment. Jay is also a member of the Honeynet Project, working on tool development.

Jay has served as an invited speaker at a variety of conferences worldwide as well as government symposia. He's written for Information Security Magazine, SecurityFocus, and the now-defunct SecurityPortal.com. He has worked on four books in the Information Security space. Three of these make up his Open Source Security Series, while one is a technical work of fiction entitled <http://www.oreilly.com/catalog/1931836051/index.html>"Stealing the Network: How to Own a Continent."

Jay makes his living as a security consultant with the firm Intelguardians, which he co-founded with industry leaders Ed Skoudis, Eric Cole, Mike Poor, Bob Hillery and Jim Alderson, where his work in penetration testing allows him to focus on attack as well as defense. Prior to consulting, Jay served as the Security Team Director for MandrakeSoft, helping set company strategy, design security products, and pushing security into the third largest retail Linux distribution.

Jennifer Stisa Granick joined Stanford Law School in January 2001, as Lecturer in Law and Executive Direcstor of the Center for Internet and Society (CIS). She teaches, speaks and writes on the full spectrum of Internet law issues including computer crime and security, national security, constitutional rights, and electronic surveillance, areas in which her expertise is recognized nationally.

Granick came to Stanford after almost a decade practicing criminal defense law in California. Her experience includes stints at the Office of the State Public Defender and at a number of criminal defense boutiques, before founding the Law Offices of Jennifer S. Granick, where she focused on hacker defense and other computer law representations at the trial and appellate level in state and federal court. At Stanford, she currently teaches the Cyberlaw Clinic, one of the nation's few public interest law and technology litigation clinics.

Granick continues to consult on computer crime cases and serves on the Board of Directors of the Honeynet Project, which collects data on computer intrusions for the purposes of developing defensive tools and practices and the Hacker Foundation, a research and service organization promoting the creative use of technological resources.

She was selected by Information Security magazine in 2003 as one of 20 "Women of Vision" in the computer security field. She earned her law degree from University of California, Hastings College of the Law and her undergraduate degree from the New College of the University of South Florida.

Jesse Krembs is the Head Defcon Speaker goon, and has been involved with Defcon since 1998. He is co-founder of the Hacker Foundation and its current president. He travels widely doing radio survey work & wireless installation for Fortune 500 companies. He restores classic motorcycles and naps in his spare time.

Jim "FalconRed" Rennie is currently a law student in New York City. Previously, he spent several years as a Software Engineer at two Seattle-area companies. While in Seattle, he met up with the infamous GhettoHackers, which probably shortened his life expectancy by several years. Jim has been attending DefCon long enough to know who not to piss off.

Jives has been doing computer security at a major research university for over 5 years. After initially specializing in host security he has moved into network security. In this area he has written several evidence gathering scripts. Recently he has made a hobby out of using the network to answer questions about the host.

Johnny Long is a "clean-living" family guy who just so happens to like hacking stuff. Over the past two years, Johnny's most visible focus has been on this Google hacking "thing" which has served as yet another diversion to a serious (and bill-paying) job as a professional hacker and security researcher for Computer Sciences Corporation. In his spare time, Johnny enjoys making random pirate noises ("Yarrrrr!"), spending time with his wife and kids, convincing others that acting like a kid is part of his job as a parent, feigning artistic ability with programs like Bryce and Photoshop, pushing all the pretty shiny buttons on them new-fangled Mac computers, and making much-too-serious security types either look at him funny or start laughing uncontrollably. Johnny has written or contributed to several books, including "Google Hacking for Penetration Testers" from Syngress Publishing, which has secured rave reviews and has lots of pictures.

Jonathan Levin has been involved with Information Security since the mid '90's. He has consulted for over 8 years (mostly in Israel), and trained numerous IT and security related courses, in academic as well as technical fora.

Johnny is an independent security consultant and trainer, and has worked closely with many companies, e.g. Checkpoint, NDS and M-Systems. He has first encountered the Winsock SPI back in '98 (and got to know all too intimately by writing device driver hooks over it...), but is surprised to see that, even after almost 7 years, it has gotten little attention, despite its potent features.

Julian Grizzard is a Ph.D. candidate in the School of Electrical and Computer Engineering at the Georgia Institute of Technology. He received his B.S. in Computer Engineering from Clemson University and his M.S. in Electrical and Computer Engineering from the Georgia Institute of Technology. He has been studying rootkits for several years, written numerous related papers, and given many academic and research presentations. He is a member of the Honeynet Research Alliance and his research interests include kernel hacking, networking, and security.

Justin Somaini is Director of Information Security at VeriSign Inc. where he is responsible for managing all aspects of network and information security for VeriSign. With over 10 years of Information Security and Corporate Audit experience, Justin has leveraged his knowledge of audit and large organizations to remediate global infrastructure problems and create a full risk identification and remediation Information Security group. Previously, Justin was the Director of Information Security Services for Charles Schwab Inc., where he was responsible for all aspects of Information Security Operations. Before that he was a Manager with PricewaterhouseCoopers LLP where he spent several years developing their attack and penetration leadership and audit practice.

Kenneth Geers (M.A., University of Washington, 1997) is an accomplished computer security expert and Russian linguist. His career includes many years working as a translator, programmer, website developer and analyst. The oddest job he has had was working on the John F. Kennedy Assassination Review Board (don't ask). He also waited tables in Luxembourg, harvested flowers in the Middle East, climbed Mount Kilimanjaro, was bitten by a deadly spider in Zanzibar and made Trappist beer at 3 AM in the Rochefort monastery. He loves to read computer logfiles while playing chess and listening to the St. Louis Cardinals. He loves Russia, his wife Jeanne, and daughters Isabelle, Sophie, and Juliet. Kenneth drinks beer and feeds the empty cans to camels.

Ken Pfeil is CSO at Capital IQ, a web-based information service company headquartered in New York City. His experience spans over two decades with companies such as Microsoft, Dell, Avaya, Identix, and Merrill Lynch. Ken is coauthor of the books "Hack Proofing Your Network - 2nd Edition" and "Stealing the Network - How to Own the Box," and a contributing author of "Security Planning and Disaster Recovery" and "Network Security - The Complete Reference."

Kevin Bankston, an attorney specializing in free speech and privacy law, is the Electronic Frontier Foundation's Equal Justice Works/Bruce J. Ennis Fellow for 2003-05. His fellowship project focuses on the impact of post-9/11 anti-terrorism laws and surveillance initiatives on online privacy and free expression. Before joining EFF, Kevin was the Justice William J. Brennan First Amendment Fellow for the American Civil Liberties Union in New York City. At the ACLU, Kevin litigated Internet-related free speech cases, including First Amendment challenges to both the Digital Millennium Copyright Act (Edelman v. N2H2, Inc.) and a federal statute regulating Internet speech in public libraries (American Library Association v. U.S.).

Kevin McCarthy has worked as a system and network administrator 15 years. He is currently a network and security consultant. He teaches programming to elementary school children and encourages their natural tendencies to hack.

Kristofer Erickson is currently completing his PhD in Geography at the University of Washington in Seattle, where he teaches an undergraduate seminar on Law and Cyberspace. He is motivated by a desire to bridge the gap between academic scholarship and politics, which is one of the reasons he is thrilled to be able to present at Defcon. Recent notable accomplishments include attending the September Project, a nationwide effort to promote community discussion of democracy and freedom in local public libraries, legitimately playing a round of Final Fight on the jumbotron screen during an undergraduate college class, and standing up for the blogosphere in a roomful of old-guard Marxist academics in Denver Colorado.

Kurt Opsahl is a Staff Attorney with the Electronic Frontier Foundation focusing on civil liberties, free speech and privacy law. Before joining EFF, Opsahl worked at Perkins Coie, where he represented technology clients with respect to intellectual property, privacy, defamation, and other online liability matters, including working on Kelly v. Arribasoft, MGM v. Grokster and CoStar v. LoopNet. For his work responding to government subpoenas, Opsahl is proud to have been called a "rabid dog" by the Department of Justice.

Leonard Gallion, is the Vice President of Information Services for a Dallas Texas company and has over 20 years of experience in the I.T. and Security fields. Primarily focusing on the non-destructive (stealthy) compromise of physical security, he has publicly presented on such topics as lockpicking, safecracking and high security lock bypass. In addition, he published an article in the Summer 2004 issue of 2600 magazine on his hobby, creating "Impromptu Lock Picks" from common office supplies.

Major Malfunction is a security professional by day, and a White Hat hacker by night. He is a good example of what happens to TheGoodGuys(TM) when you force them to travel, eat junk food, drink too much coffee, and stay in cheap hotels. If your hotel has a hole in it, Major Mal will find it... He has been involved in DEFCON, as a Goon, since DC5, and the computer industry since the early Eighties. He was co-founder of the world's first full time Internet pirate radio station, InterFACE, and wrote the first ever CD ripper, 'CDGRAB', disproving the industry lie that computers could not read music CDs. In his spare time, he likes to play with guns. Big guns. Little guns. As long as it goes BANG, it will be his friend, and he will love it, care for it, and feed it plenty of ammo. Let him fondle your weapon, and you'll have a friend for life...

Marc Weber Tobias is an Investigative Attorney and polygraph examiner in the United States. He has written five law enforcement textbooks dealing with criminal law, security, and communications. Marc Tobias was employed for several years by the Office of Attorney General, State of South Dakota, as the Chief of the Organized Crime Unit. As such, he directed felony investigations involving frauds as well as violent crimes.

Mr. Tobias is the author of the 1400 page textbook and multimedia collection "Locks, Safes, and Security: An International Police Reference". He consults on lock security and his law firm handles investigations for government and private clients.

Survival Research Laboratories (SRL) was founded by Mark Pauline in November 1978. Since its inception, SRL has operated as an organization of creative technicians dedicated to re-directing the techniques, tools, and tenets of industry, science, and the military away from their typical manifestations in practicality, product or warfare. Since 1979, SRL has staged over 45 mechanized presentations in the United States and Europe. Each performance consists of a unique set of ritualized interactions between machines, robots, and special effects devices, employed in developing themes of socio-political satire. Humans are present only as audience or operators. More information can be found at www.srl.org

Mark Pauline passion is legal, but only in the places he has never been. Follow him through his history of causing the law.

Matt Cottam has a Bachelor of Fine Arts and Bachelor of Industrial Design degrees from Rhode Island School of Design (RISD). Matt's thesis work at RISD was to conduct human-factors research for the Habitability Design Division of NASA. Since 1998 Matt has been the core instructor of the Structured Multimedia Module of the International Certificate Program in New Media at the Fraunhofer Center for Research in Computer Graphics. Since 1999 he has been a member of the faculty at RISD; he teaches critical human-centered design and human-computer interaction design for the departments of Industrial Design, Graphic Design, Photography, and The Digital Media Graduate Program. Matt has lectured, published and led workshops internationally on topics including information design, human-computer interaction design, collaboration strategies for engineers and designers, and humanitarian applications of design. Matt cofounded Tellart and specializes in human-computer interface design technology, methodology, and pedagogy.

Matt Fiddler leads a Threat Management Team for a large Fortune 500 Company. Mr. Fiddler's research into lock bypass techniques have resulted in several public disclosures of critical lock design flaws. Mr. Fiddler began his career as an Intelligence Analyst with the United States Marine Corps. Since joining the commercial sector in 1992, he has spent the last 13 years enhancing his extensive expertise in the area of Unix and Network Engineering, Security Consulting, and Intrusion Analysis.

Michael D. Glasser is a Security Consultant in the New York Tri-State Area. He is currently employed by one of the worlds largest security consulting firms. Though he consults primarily on physical security, other forms of security are often part of his scope of work.

Glasser has been in the security industry for more then 10 years. He started as a technician in the field installing electronic security, and broadened his technical knowledge to cover all electronic and conventional security methods. Glasser is Licensed by New York State and a Burglar and Fire Alarm Installer, Certified as a Locksmith, and has numerous electronic security certifications. He is an active member of many local, state and national associations. He teaches classes on electronic security in the New York Area.

Prior speaking engagements of this type have been at both the DefCon series of conferences and at the 2600 sponsored HOPE conferences.

Mystic is a strong believer that hacking at it's core has little to do with computers and more to do with how you chose to live your life. His interests go from electronic music to poetry to encryption to designing Texas Hold'em AIs. Once a resident of the San Francisco bay area, he traveled down south to find him self on the beaches of Santa Barbara and after two years is returning to finish school as a Psychology major at UC Santa Cruz.

Nick Farr spent the first decade of his career serving in non-profit management roles in academia, public radio, print journalism and computer recycling. While pursuing a new career in Public Accounting, he continues to serve in his role as Treasurer of the Hacker Foundation which he co-founded.

Nick is a security engineer at an innovative computer company in Cupertino, California. He holds a B.S. in Computer Science from the University of California, Santa Barbara and as far as I know, he is through with the school thing. He is currently unreachable in Antigua, so I suppose I could say anything here. I won't.

Nomad Mobile Research Centre (NMRC) is a hacker collective, and has been around since 1996. NMRC has released numerous papers, advisories, FAQs, and tools over the years, and believes that hackers have something good to give to society.Unfortunately most of the world doesn't believe in their definition of "good".

NMRC has distinguished itself in the realm of hackerdom in the following ways over other hacker groups: 1) They maintain friends of all hat colors; 2) They were the first hacker group to spell Centre with an "e" on the end; and 3) They live to hack and hack to live, unless of course they find free pr0n.

Ofir Arkin is the CTO and Co-founder of Insightix, which pioneers the next generation of IT infrastructure discovery, monitoring and auditing systems for enterprise networks. Ofir holds 10 years of experience in data security research and management. Prior to co-founding Insightix, Ofir served as a CISO of a leading Israeli international telephone carrier. In addition, Ofir has consulted and worked for multinational companies in the financial, pharmaceutical and telecommunication sectors.

Ofir conducts cutting edge research in the information security field and has published several research papers, advisories and articles in the fields of information warfare, VoIP security, and network discovery, and lectured in a number of computer security conferences about the research. Hi best known published papers are: "ICMP Usage in Scanning", "Security Risk Factors with IP Telephony based Networks", "Trace-Back", "Etherleak: Ethernet frame padding information leakage". He is a co-author of the remote active operating system fingerprinting tool Xprobe2.

Ofir is an active member with the Honeynet project and is co-author of the team's book, "Know Your Enemy" published by Addison-Wesley. Ofir is also the founder of Sys-Security Group (http://www.sys-security.com), a computer security research group.

Oskar Sandberg is a post graduate student at the Chalmers Technical University in Gothenburg, Sweden. He is working on a PhD about the mathematics of complex networks, especially with regard to the small world phenomenon. Besides this he has an active interest in distributed computer networks and network security, and has been an active contributor to The Freenet Project since 1999.

Pamela Fusco, CISSP, CISM, CHS-III, Chief Security Officer, Merck & Co., Inc.
Pamela Fusco is an Executive Global Information Security Professional, for Merck & CO., Inc. She has accumulated over 19 years of substantial experience within the Security Industry. Her extensive background and expertise expand globally encompassing all facets of security inclusive of logical, physical, personal, facilities, systems, networks, wireless, and forensic investigations. Presently she leads a talented team of Compliance, Systems and Information Security Engineers operating a world-wide 24X7X365 SIRT (security incident response team).

Patty L. Walsh has been a political junkie since she was a child. She currently attends UNLV as a Senior, and is majoring in Political Science with emphasis on International Relations; along with a minor in Communications. She has written for The Las Vegas Review-Journal, Las Vegas Mercury, Las Vegas Tribune, Las Vegas CityLife, The UNLV newspaper, and currently is a freelance journalist for Greenspun Media Group. She also is a Production Assistant and DJ for KUNV 91.5 FM in Las Vegas. Walsh intends to become an international correspondent, and has many qualms with the media (except for BBC and Reuters, most of the time). She speaks two different languages, and has attended DefCon since DC10, where she wrote about the media misconceptions of hackers as an intern for the Las Vegas Mercury.

Paul Graham is the author of On Lisp, Ansi Common Lisp, and Hackers & Painters; was co-founder of Viaweb (now Yahoo Store); developed a simple Bayesian spam filter that inspired many present filters; and is one of the partners in Y Combinator.

Paul Vixie has been contributing to Internet protocols and UNIX systems as a protocol designer and software architect since 1980. Early in his career, he developed and introduced sends, proxynet, rtty, cron and other lesser-known tools.

Today, Paul is considered the primary modern author and technical architect of BINDv8 the Berkeley Internet Name Domain Version 8, the open source reference implementation of the Domain Name System (DNS). He formed the Internet Software Consortium (ISC) in 1994, and now acts as Chairman of its Board of Directors. The ISC reflects Paul's commitment to developing and maintaining production quality open source reference implementations of core Internet protocols.

More recently, Paul cofounded MAPS LLC (Mail Abuse Prevention System), a California nonprofit company established in 1998 with the goal of hosting the RBL (Realtime Blackhole List) and stopping the Internet's email system from being abused by spammers. Vixie is currently the Chief Technology Officer of Metromedia Fiber Network Inc (MFNX.O).

Along with Frederick Avolio, Paul co-wrote "Sendmail: Theory and Practice" (Digital Press, 1995). He has authored or co-authored several RFCs, including a Best Current Practice document on "Classless IN-ADDR.ARPA Delegation" (BCP 20). He is also responsible for overseeing the operation of F.root-servers.net, one of the thirteen Internet root domain name servers.

Philip R. Zimmermann is the creator of Pretty Good Privacy. For that, he was the target of a three-year criminal investigation, because the government held that US export restrictions for cryptographic software were violated when PGP spread all around the world following its 1991 publication as freeware. Despite the lack of funding, the lack of any paid staff, the lack of a company to stand behind it, and despite government persecution, PGP nonetheless became the most widely used email encryption software in the world.

Raven splits her time between network engineering and security testing, and often tries to fuse the two, to varying degrees of success. She is equally fond of building networks for ISPs and breaking them nicely. In her Copious Spare Time, she contributes to network security books, mangles for OSVDB, kicks other people's crypto implementations, and enjoys ill-advised adventures.

Richard Thieme (www.thiemeworks.com) is an author and professional speaker focused on the deeper implications of technology, religion, and science for twenty-first century life. He has spoken for Def Con for ten years and Black Hat for eight as well as for other venues ranging from ShmooCon, ToorCon, and AUSCERT to the Pentagon, the FBI, and the US Department of the Treasury. His internet columns, "Islands in the Clickstream," are widely read and were collected and published by Syngress Publishing in June 2004. Since then he has published a dozen short stories including "The Geometry of Near," a hacker tale published online by Phrack and included in the anthology CyberTales: Live Wire. A short story collection, More Than a Dream: Stories of Flesh and the Spirit is coming soon and he is writing a novel, The Necessity for Invention, which includes the adventures of Don Coyote and Pancho Sanchez, two wily hackers.

Robert E. Lee serves as Dyad Labs's Chief Executive Officer. Robert's primary roles include technology and software development, security research, and education program initiatives. Robert functions as the primary contact interfacing with clients for Dyad Labs. Robert also serves as the Director of Projects & Resources for the Institute for Security and pen Methodologies. Robert is a key contributor to the Open Source Security Testing Methodology Manual, Unicornscan, and Cruiser (no URL yet) projects. Robert maintains his OSSTMM Professional Security Tester (OPST) & OSSTMM Professional Security Analyst (OPSA) certifications from the Institute for Security and Open Methodologies (ISECOM).

Robert "hackajar" Imhoff-Dousharm has worked in computer security for over 6 years. He has spent 2-1/2 years in the merchant credit card security field. Last year he has started his own credit card security consulting firm to focus more on securing businesses one client at a time. He also works in a SOC for a large client, insuring data integrity, availability and confidentiality. Robert has spoken at Defcon 11 & 12 in both social security and network security of credit cards in merchant environments.

Robert Morris received a B.A. in Mathematics from Harvard University in 1957 and a M.A. in Mathematics from Harvard in 1958. He was a member of the technical staff in the research department of Bell Laboratories from 1960 until 1986. On his retirement from Bell Laboratories in 1986 he began work at the National Security Agency. From 1986 to his (second) retirement in 1994, he was a senior adviser in the portion of NSA responsible for the protection of sensitive U.S. information.

Roberto Preatoni (aka Sys64738): 37, is the founder of the defacement/cybercrime archive Zone-H (http://www.zone-h.org)as well as its key columnist. He's also CEO of an International ITsec company (Domina Security) which is active in European and former soviet countries. He has been globetrotting, lecturing in several ITsec security conferences, including Defcon in the US. He has been interviewed by several print and online newspapers where he shares his experiences relating to cyberwar and cybercrimes. A man with different opinions than the usual.

RS investigates financial fraud within medical environments. Duties include participating in the execution of search warrants to recover computer base evidence. Because of the sensitivity of the medical data to be seized and liability issues involved, forensic images of suspect systems must be made quickly, on-site, in production medical environments, with minimal disruption to patient care.

San is a security researcher, who has been working in the Research Department of NSFocus Information Technology (Beijing) Co., Ltd for more than three years. He's also the key member of XFocus Team.

His focus is on researching and analysing application security, and he's also the main author of "Network Penetration Technology" (Chinese version book).

Scott Blake is Chief Information Security Officer for Liberty Mutual Insurance Group and is responsible for information security strategy and policy. Prior to joining Liberty, Scott was Vice President of Information Security for BindView Corporation where he founded the RAZOR security research team and directed security technology, market, and public affairs strategy. Scott has delivered many lectures on all aspects of information security and is frequently sought by the press for expert commentary. Since 1993, Scott has also worked as a security consultant, IT director, and network engineer. He holds an MA in Sociology from Brandeis University, a BA in Social Sciences from Simon's Rock College, and holds the CISM and CISSP security certifications.

Scott Dunlop is a father, software developer, security researcher and short order cook, in that order; other public projects by Scott include Cloud Wiki, IPAF Packet Analysis Framework, and the Sickle Communication Language.

Scott Stender is a founding partner of iSEC Partners, LLC, a strategic digital security organization. Scott brings with him several years of experience in large-scale software development and security consulting. Prior to iSEC, Scott worked as an application security analyst with @stake where he led and delivered on many of @stake's highest priority clients.

Before @stake, Scott worked for Microsoft, where he was responsible for security and reliability analysis for one of Microsoft's distributed enterprise applications. In this role, Scott drew on his technical expertise in platform internals, server infrastructure, and application security, combined with his understanding of effective software development processes to concurrently improve the reliability, performance, and security of a product running on millions of computers worldwide.

In his research, Scott focuses on secure software engineering methodology and security analysis of core technologies. Most recently, Scott was published in the January-February 2005 issue of IEEE Security & Privacy, where he co-authored a paper entitled "Software Penetration Testing". He holds a BS in Computer Engineering from the University of Notre Dame.

Roelof Temmingh is the Technical Director of SensePost where his primary function is that of external penetration specialist. Roelof is internationally recognized for his skills in the assessment of web servers. He has written various pieces of PERL code as proof of concept for known vulnerabilities, and coded the world-first anti-IDS web proxy "Pudding". He has spoken at many International Conferences and in the past year alone has been a keynote speaker at SummerCon (Holland) and a speaker at The Black Hat Briefings. Roelof drinks tea and smokes Camels.

Haroon Meer is currently SensePost's Director of Development (and coffee drinking). He specializes in the research and development of new tools and techniques for network penetration and has released several tools, utilities and white-papers to the security community. He has been a guest speaker at many Security forums including the Black Hat Briefings. Haroon doesnt drink tea or smoke camels.

Charl van der Walt is a founder member of SensePost. He studied Computer Science at UNISA, Mathematics at the University of Heidelberg in Germany and has a Diploma in Information Security from the Rand Afrikaans University. He is an accredited BS7799 Lead Auditor with the British Institute of Standards in London. Charl has a number of years experience in Information Security and has been involved in a number of prestigious security projects in Africa, Asia and Europe. He is a regular speaker at seminars and conferences nationwide and is regularly published on internationally recognized forums like SecurityFocus. Charl has a dog called Fish.

Seth Schoen created the position of EFF Staff Technologist, helping other technologists understand the civil liberties implications of their work, EFF staff better understand the underlying technology related to EFF's legal work, and the public understand what the technology products they use really do. Schoen comes to EFF from Linuxcare, where he worked for two years as a senior consultant. While at Linuxcare, Schoen helped create the Linuxcare Bootable Business Card CD-ROM.

Sherri Sparks is a PhD student at the University of Central Florida. She received her undergraduate degree in Computer Engineering and subsequently switched to Computer Science after developing an interest in reverse code engineering and computer security. She also holds a graduate certificate in Computer Forensics. Currently, her research interests include offensive / defensive malicious code technologies and related issues in digital forensic applications.

StankDawg is a senior programmer/analyst who has worked for Fortune 500 companies and large universities. He is a staff writer for 2600 Magazine, blacklisted411, and numerous websites. He has given presentations at HOPE, Interz0ne, and other local venues and has also appeared on television. He is founder of "The Digital Dawg Pound" (the DDP) which is a group of white-hat/gray-hat hackers who produce their own magazine, radio shows, TV show, and numerous other projects at http://www.binrev.com/

Steve Dunker is a Professor of Criminal Justice at Northeastern State University. He is a former Major Case Squad Detective who worked as a planner and supervisor of an anti-crime and decoy unit. He is a licensed attorney in the State of Missouri.

Strom Carlson is the organizer of DC213 and has been playing with telephones for years now; he has an intense interest in the structure and history of the telephone network and will start yammering away for hours about it if you're not careful. He collects all things related to telephony (including recordings), and although he is rapidly running out of space in which to store his many cubic meters of telephone equipment, he will eagerly and compulsively snap up anything made or published by Western Electric if given the chance. He encourages all phone phreaks and interested parties to play extensively with the phone network and learn everything they can; he also encourages you to listen to everything on http://www.phonetrips.com/ and to poke around http://www.stromcarlson.com/

Black Ratchet is just another phone phreak from Boston. He enjoys computers, radios, and, of course, anything remotely related to the Public Switched Telephone network. He has been playing with telephones since he was eleven, and after a somewhat lengthy sabbatical in college, had a relapse and returned to his old ways in late 2003. He is the organizer and webmaster of Yet Another Payphone List at http://www.yapl.org and is an active member of the Digital Dawg Pound at http://www.binrev.com. He can be found at http://www.blackratchet.org, and on http://forums.binrev.com.

Tom Holt is completing his Ph. D. in Criminology and Criminal Justice at the University of Missouri-Saint Louis. He is also an Assistant Professor in the Department of Criminal Justice at the University of North Carolina-Charlotte specializing in crime and technology. Much of his graduate career has been spent examining computer crime and cybercrime, especially hackers and hacking. His dissertation research examines the elements that compose the hacker subculture, as well as its' social organization through multiple data sources. Tom has collected various materials to that end, including interviews with active hackers. His primary goal is to understand various social aspects of hacking and the computer underground from the hacker's perspective.

Tom has made multiple presentations on these issues in a variety of settings and has a strong interest in moving academic research on computer crime forward in new ways. This includes developing quality statistics on computer crimes to better document these phenomena. He is working with other academic disciplines such as computer science and MIS to gain a more thorough understanding of all manner of computer crime and critical infrastructure protection. Tom also enjoys a good cup of coffee, o.k. cigars, and cheap beer.

Tony Howlett is President of Network Security Services, Inc. He was previously founder and CTO of InfoHighway Communications Corp., a leading ISP and CLEC. He is a frequent speaker and writer on security, the Internet and technology. His articles have appears in SysAdmin, Security Administrator, Windows Web Solutions, Windows IT Pro, Texas Computing and Computer Currents magazines. He is also author of "Open Source Security Tools" published by Addison Westley in 2004. Type "Tony Howlett" into Google to get additional references.

Dr. Tzi-cker Chiueh is a Professor in the Computer Science Department of Stony Brook University, and the Chief Scientist of Rether Networks Inc. He received his B.S. in EE from National Taiwan University, M.S. in CS from Stanford University, and Ph.D. in CS from University of California at Berkeley in 1984, 1988, and 1992, respectively. He received an NSF CAREER award in 1995, and has published over 130 technical papers in refereed conferences and journals in the areas of operating systems, networking, and computer security. He has developed several innovative security systems/products in the past several years, including SEES (Secure Mobile Code Execution Service), PAID (Program Semantics-Aware Intrusion Detection), DOFS (Display-Only File Server), and CASH.

Wendy Seltzer is Special Projects Coordinator with the Electronic Frontier Foundation, specializing in intellectual property and free speech issues. As a Fellow with Harvard's Berkman Center for Internet & Society, Wendy founded and leads the Chilling Effects Clearinghouse, helping Internet users to understand their rights in response to cease-and-desist threats. Prior to joining EFF, Wendy taught Internet Law as an Adjunct Professor at St. John's University School of Law and practiced intellectual property and technology litigation with Kramer Levin Naftalis & Frankel in New York.

Wes Brown is a senior security consultant, security researcher, having started working in the field almost a decade ago. He specializes in penetration testing, and tools writing, but is greatly interested in conducting security research as well. He has written numerous in-house tools for Internet Security System's X-Force Consulting team, of whom he is a member of.

Wes is a systems engineer at a software-defined radio company in San Diego, California. He holds a B.S. in Electrical Engineering from Rensselaer Polytechnic Institute and is thinking of returning to school to formally study communication systems.

"The great Zamboni" has been in the security industry for over 6 years, most recently working at a Fortune 500 company. His work has covered many areas including penetration testing, assessing the security of systems and engineering computer security systems. Recently his job has focused on integrating physical and logical security systems. Outside of work Zamboni is a founding member of Miskatonic Research Labs, a non-profit security research group located in Northeastern Ohio. Some of his many interests include penetration testing techniques, wireless security, lock picking and the convergence of physical and computer security. He is also a core member of the Notacon planning committee.