Joseph Rach

一个开放社区，开源项目.

定制Linux, 加载了在构建时验证正确操作和配置的工具. A new tool called Aplomado Hunter™ blends heuristics, fuzzy logic, 机器学习, 指导行为观察，发现和报告基于网络的物联网设备和系统.

Features
•数小时的免费在线教育材料.
•一个开放的博客供社区分享.
•永远开放，永远免费.

在匹兹堡由CERT主办的医疗保健网络安全研讨会上介绍了嵌入式系统的开发. The CERT division is a leader in cybersecurity that partners with government, industry, 执法, 学术界致力于提高计算机系统和网络的安全性和弹性.

担任杜勒斯地区商会广播活动的小组讨论，并提出了黑客! 你的运气什么时候到头?

杜勒斯地区商会是商业领袖合作设计的创新门户, develop, 并分享想法，使杜勒斯地区成为商业和社区发展的中心.

手机打开了独一无二的, 为所有技术水平的攻击者提供潜在地访问系统的低成本机会. 不像互联网地址, a physical proximity of around five miles is required; however, 这也提供了一个优势. This makes it harder to detect an attack or even track one down after the fact.

Often security models of products generalize the mechanisms used for communications. This can cause designs to become reliant on assumed security features, 细胞也不能幸免.

Web应用程序渗透测试, 外部基于internet的渗透测试, 或者是内部信任的渗透测试. This is our strength and, not surprisingly, our 2nd-most popular offering.

We assess nearly anything connected at hardware, software, firmware, radio, and web cloud infrastructure levels using a strictly BlackBox or a more trusted, near-white-box方法.

支持几个数百万美元的开发项目，并为多个客户开发了安全系统开发生命周期. We are uniquely positioned to bring your systems development to the next level.

As a highly skilled and experienced security architect, I led the security efforts for a smart connected elevator product. In that role, I designed, developed, 实施安全策略, policies, and procedures for our product to ensure its safety and reliability.

责任
•进行风险评估，并为减轻潜在威胁和漏洞提供建议.
•开发并实施智能互联电梯产品的安全架构和设计模式.
•与跨职能团队紧密合作, 包括工程, 产品管理, 质量保证, to ensure security was embedded into all the stages of the development lifecycle.
•进行安全测试，验证产品安全措施的有效性.
•了解最新的安全威胁和趋势，并评估其对智能互联电梯产品的影响.
为其他团队成员提供有关安全最佳实践的指导和培训，并确保他们遵守安全政策和程序.
• Managed security incidents and responded to them in a timely and effective manner.
• Participated in security audits and compliance reviews.

作为智能互联运输制冷产品的安全工程师和评估员, I designed, implemented, 并评估了连接智能网络的运输制冷机组的安全措施. 我与开发和运营团队合作，确保产品安全并符合行业标准.

责任
•开发和实施连接到智能网络的运输制冷产品的安全措施.
•对运输制冷产品进行安全评估，以识别漏洞和潜在威胁.
•与跨职能团队合作, 包括开发人员, engineers, 项目经理, to ensure that security was integrated into the development and operations processes.
• Provided guidance and expertise on secure coding practices, 威胁建模, 安全的设计原则.
•确保公司运输制冷产品符合相关行业标准和法规, including NIST, ISO, IEC, and others.
• Maintained up-to-date knowledge of security technologies, trends, and practices.

As the security architect and penetration tester, 我设计并实施安全措施，保护产品和客户的数据. 我与我们的开发团队密切合作，以确保产品的设计是安全的，并使用安全的编码实践进行开发. 此外，我执行了渗透测试，以识别和处理产品中的漏洞.

责任
•开发和维护我们的工业机器远程监控和GPS跟踪产品的安全架构.
•与开发团队合作，确保我们的产品通过设计和实施安全编码实践是安全的.
•定期进行渗透测试，以识别和解决我们产品中的任何漏洞.
•实施安全措施以保护客户数据，并确保其符合行业标准.
•掌握最新的安全威胁和趋势，并相应地调整我们的安全措施.
•与客户和合作伙伴合作，确保我们的产品与他们的安全措施无缝集成.
• Provided guidance and training to the development team on security best practices.