[ { "id": "adam-laurie", "type": "person", "typeLabel": "Person", "title": "Adam Laurie", "slug": "adam-laurie", "era": "2003-Present", "tags": [ "RFID/NFC security", "Bluetooth security", "bluesnarfing", "hardware hacking", "open-source security tools", "DEF CON", "Chaos Communication Congress", "British hacker" ], "summary": "British security researcher known by the alias \"Major Malfunction,\" who co-discovered and publicized the Bluetooth \"bluesnarfing\" vulnerability in 2003 and later created the open-source RFIDIOt and RFIDler RFID/NFC security research tools.", "url": "people/adam-laurie.html" }, { "id": "adrian-lamo", "type": "person", "typeLabel": "Person", "title": "Adrian Lamo: The 'Homeless Hacker'", "slug": "adrian-lamo", "era": "2000s-2010s", "tags": [ "gray hat", "whistleblower", "media", "ethics" ], "summary": "The complex and controversial story of Adrian Lamo, a gray-hat hacker known for his high-profile intrusions and his role in reporting Chelsea Manning.", "url": "people/adrian-lamo.html" }, { "id": "alex-rice", "type": "person", "typeLabel": "Person", "title": "Alex Rice", "slug": "alex-rice", "era": "2012-Present", "tags": [ "cybersecurity", "bug-bounty", "vulnerability-disclosure", "hackerone", "cto", "entrepreneur", "product-security" ], "summary": "Alex Rice is a co-founder and the Chief Technology Officer (and Chief Information Security Officer) of HackerOne, the vulnerability coordination and bug bounty platform he helped launch in 2012 after leading product security at Facebook.", "url": "people/alex-rice.html" }, { "id": "alex-stamos", "type": "person", "typeLabel": "Person", "title": "Alex Stamos", "slug": "alex-stamos", "era": "2000s-Present", "tags": [ "trust and safety", "election security", "disinformation", "Facebook", "Yahoo", "Stanford Internet Observatory" ], "summary": "Alex Stamos is an American cybersecurity researcher and executive who, as Facebook's Chief Security Officer, led the investigation into Russian interference in the 2016 U.S. election, and later founded the Stanford Internet Observatory to study online disinformation and platform abuse.", "url": "people/alex-stamos.html" }, { "id": "andres-riancho", "type": "person", "typeLabel": "Person", "title": "Andres Riancho", "slug": "andres-riancho", "era": "2007-Present", "tags": [ "security researcher", "open source", "web application security", "w3af", "Argentina", "penetration testing", "cloud security", "AWS security" ], "summary": "Andres Riancho is an Argentine application-security researcher and open-source developer, based in Buenos Aires, best known for creating w3af (Web Application Attack and Audit Framework), a widely used open-source web vulnerability scanner and exploitation tool.", "url": "people/andres-riancho.html" }, { "id": "barnaby-jack", "type": "person", "typeLabel": "Person", "title": "Barnaby Jack", "slug": "barnaby-jack", "era": "1977-2013", "tags": [ "ATM hacking", "jackpotting", "medical device security", "embedded systems", "IOActive", "Black Hat" ], "summary": "Barnaby Jack was a New Zealand-born security researcher best known for publicly demonstrating that ATMs could be forced to dispense cash on command ('jackpotting') and for pioneering research into vulnerabilities in wireless insulin pumps and implantable cardiac devices, work that helped establish medical device security as a distinct field before his sudden death in 2013.", "url": "people/barnaby-jack.html" }, { "id": "brian-krebs", "type": "person", "typeLabel": "Person", "title": "Brian Krebs", "slug": "brian-krebs", "era": "2000s-Present", "tags": [ "cybercrime journalism", "data breach reporting", "DDoS", "Mirai botnet", "investigative journalism" ], "summary": "Brian Krebs is an American investigative journalist who became one of the most influential chroniclers of cybercrime, breaking major stories such as the 2013 Target data breach and, through his deep sourcing in underground carding and cybercrime forums, turning his independent blog KrebsOnSecurity into a top-tier source on the cybercriminal underground.", "url": "people/brian-krebs.html" }, { "id": "bruce-schneier", "type": "person", "typeLabel": "Person", "title": "Bruce Schneier", "slug": "bruce-schneier", "era": "1990s-Present", "tags": [ "cryptography", "block ciphers", "security writer", "privacy", "Blowfish", "Twofish", "surveillance policy" ], "summary": "Bruce Schneier is an American cryptographer, computer security professional, and writer whose Blowfish and Twofish ciphers, best-selling books, and long-running Crypto-Gram newsletter and Schneier on Security blog have made him one of the most widely cited public communicators on cryptography and security policy since the 1990s.", "url": "people/bruce-schneier.html" }, { "id": "casey-ellis", "type": "person", "typeLabel": "Person", "title": "Casey Ellis", "slug": "casey-ellis", "era": "2010s-Present", "tags": [ "bug bounty", "Bugcrowd", "crowdsourced security", "vulnerability disclosure", "disclose.io" ], "summary": "Casey Ellis is an Australian security researcher and entrepreneur who founded Bugcrowd in 2012, one of the first companies to commercialize crowdsourced bug bounty and vulnerability disclosure programs, helping mainstream the practice across the cybersecurity industry.", "url": "people/casey-ellis.html" }, { "id": "cesar-cerrudo", "type": "person", "typeLabel": "Person", "title": "Cesar Cerrudo", "slug": "cesar-cerrudo", "era": "2000s-Present", "tags": [ "Argentina", "IOActive", "smart cities", "IoT security", "SQL Server", "critical infrastructure", "Ekoparty" ], "summary": "Cesar Cerrudo is an Argentine security researcher known for early vulnerability research in Microsoft SQL Server and Windows, and for later work as CTO of IOActive Labs exposing widespread security weaknesses in traffic-control systems and other smart-city infrastructure.", "url": "people/cesar-cerrudo.html" }, { "id": "charlie-miller", "type": "person", "typeLabel": "Person", "title": "Charlie Miller", "slug": "charlie-miller", "era": "2000s-Present", "tags": [ "iPhone hacking", "Pwn2Own", "automotive security", "mobile security", "Jeep hack", "NSA alumnus" ], "summary": "Charlie Miller is an American security researcher and former NSA analyst best known for being the first to remotely exploit the iPhone (2007), for four Pwn2Own competition wins, and for the 2015 remote hack of a Jeep Cherokee with Chris Valasek that triggered a 1.4-million-vehicle recall by Fiat Chrysler.", "url": "people/charlie-miller.html" }, { "id": "chris-eagle", "type": "person", "typeLabel": "Person", "title": "Chris Eagle", "slug": "chris-eagle", "era": "1980s-Present", "tags": [ "reverse-engineering", "IDA-Pro", "Ghidra", "cybersecurity-education", "CTF", "Naval-Postgraduate-School", "DARPA", "malware-analysis", "author" ], "summary": "Chris Eagle is a computer security researcher and long-time Computer Science faculty member at the Naval Postgraduate School, best known as the author of The IDA Pro Book, co-author of The Ghidra Book, creator of widely used IDA Pro reverse-engineering plugins, a member of DARPA's Cyber Grand Challenge Competition Framework Team, and a longtime DEF CON CTF organizer under the DDTEK banner.", "url": "people/chris-eagle.html" }, { "id": "chris-valasek", "type": "person", "typeLabel": "Person", "title": "Chris Valasek", "slug": "chris-valasek", "era": "2000s-Present", "tags": [ "automotive security", "vehicle hacking", "IOActive", "CAN bus", "Windows exploitation", "Jeep hack" ], "summary": "Chris Valasek is an American security researcher who, with longtime collaborator Charlie Miller, remotely hacked a moving Jeep Cherokee in 2015, a demonstration that triggered a 1.4-million-vehicle recall and helped establish automotive cybersecurity as a mainstream discipline.", "url": "people/chris-valasek.html" }, { "id": "chris-wysopal", "type": "person", "typeLabel": "Person", "title": "Chris Wysopal", "slug": "chris-wysopal", "era": "1990s-Present", "tags": [ "L0pht", "Senate testimony", "stake", "Veracode", "responsible disclosure", "application security" ], "summary": "Chris Wysopal, known by the handle 'Weld Pond' during his time with the hacker think tank L0pht Heavy Industries, was one of seven L0pht members who warned the U.S. Senate in 1998 that they could take down the internet in 30 minutes; he went on to co-found the security consultancy @stake and later the application-security testing company Veracode.", "url": "people/chris-wysopal.html" }, { "id": "cuckoos-egg-clifford-stoll", "type": "person", "typeLabel": "Person", "title": "Clifford Stoll and 'The Cuckoo's Egg'", "slug": "cuckoos-egg-clifford-stoll", "era": "1980s", "tags": [ "book", "espionage", "history", "investigation" ], "summary": "The true story of how astronomer Clifford Stoll, tasked with finding a 75-cent accounting error, ended up tracking a KGB-sponsored hacker through the early internet.", "url": "people/cuckoos-egg-clifford-stoll.html" }, { "id": "dafydd-stuttard", "type": "person", "typeLabel": "Person", "title": "Dafydd Stuttard", "slug": "dafydd-stuttard", "era": "2003-Present", "tags": [ "web application security", "Burp Suite", "PortSwigger", "author", "penetration testing", "British" ], "summary": "Dafydd Stuttard is a British security researcher who built Burp Suite between 2003 and 2006, founded the company PortSwigger to develop it, and co-authored the standard reference text \"The Web Application Hacker's Handbook.\"", "url": "people/dafydd-stuttard.html" }, { "id": "dan-kaminsky", "type": "person", "typeLabel": "Person", "title": "Dan Kaminsky", "slug": "dan-kaminsky", "era": "1979-2021", "tags": [ "DNS security", "cache poisoning", "Black Hat", "DEF CON", "vulnerability research", "coordinated disclosure" ], "summary": "Dan Kaminsky was an American security researcher best known for discovering a fundamental 2008 flaw in the Domain Name System that enabled widespread cache poisoning, and for organizing an unprecedented coordinated, multi-vendor patch before public disclosure.", "url": "people/dan-kaminsky.html" }, { "id": "dave-aitel", "type": "person", "typeLabel": "Person", "title": "Dave Aitel", "slug": "dave-aitel", "era": "1990s-Present", "tags": [ "exploit development", "Immunity Inc", "CANVAS", "SPIKE", "fuzzing", "INFILTRATE" ], "summary": "Dave Aitel is an American computer security researcher and former NSA research scientist who founded Immunity, Inc. in 2002, building the commercial CANVAS exploitation framework and SPIKE fuzzing toolset, and who later became an influential voice in cybersecurity policy commentary.", "url": "people/dave-aitel.html" }, { "id": "david-litchfield", "type": "person", "typeLabel": "Person", "title": "David Litchfield", "slug": "david-litchfield", "era": "1975-Present", "tags": [ "security research", "vulnerability research", "database security", "Oracle", "Microsoft SQL Server", "NGSSoftware", "British hacker", "infosec", "buffer overflow", "exploit development" ], "summary": "David Litchfield is a British security researcher and co-founder of Next Generation Security Software (NGSSoftware), known for extensive Oracle Database and Microsoft SQL Server vulnerability research and for co-authoring \"The Shellcoder's Handbook\" and \"The Database Hacker's Handbook.\"", "url": "people/david-litchfield.html" }, { "id": "dino-dai-zovi", "type": "person", "typeLabel": "Person", "title": "Dino Dai Zovi", "slug": "dino-dai-zovi", "era": "2000s-Present", "tags": [ "Pwn2Own", "macOS security", "exploit development", "Trail of Bits", "Pwnie Awards" ], "summary": "Dino Dai Zovi is an American security researcher best known for exploiting a zero-day QuickTime/Safari vulnerability that produced the first-ever Pwn2Own win at CanSecWest 2007, for co-authoring 'The Mac Hacker's Handbook' and 'iOS Hacker's Handbook', and for co-founding the security firms Trail of Bits and Capsule8.", "url": "people/dino-dai-zovi.html" }, { "id": "edward-snowden", "type": "person", "typeLabel": "Person", "title": "Edward Snowden", "slug": "edward-snowden", "era": "2000s-Present", "tags": [ "NSA", "whistleblower", "mass surveillance", "PRISM", "CIA", "Espionage Act", "digital rights" ], "summary": "Edward Snowden is a former CIA and NSA contractor who in June 2013 disclosed thousands of classified U.S. government documents revealing global mass-surveillance programs, triggering an international debate on privacy, security, and government transparency and leading to U.S. Espionage Act charges against him.", "url": "people/edward-snowden.html" }, { "id": "elias-levy", "type": "person", "typeLabel": "Person", "title": "Elias Levy", "slug": "elias-levy", "era": "1990s-2000s", "tags": [ "buffer overflow", "Phrack", "Bugtraq", "full disclosure", "SecurityFocus" ], "summary": "Elias Levy, using the handle 'Aleph One,' wrote the 1996 Phrack article 'Smashing The Stack For Fun And Profit,' the tutorial widely credited with popularizing stack-based buffer overflow exploitation, and for over five years moderated the Bugtraq mailing list at the center of the 1990s-2000s full-disclosure movement.", "url": "people/elias-levy.html" }, { "id": "eric-corley", "type": "person", "typeLabel": "Person", "title": "Eric Corley", "slug": "eric-corley", "era": "1980s-Present", "tags": [ "hacker culture", "phreaking", "digital rights", "DMCA", "2600", "HOPE conference" ], "summary": "Eric Corley, known publicly by the pen name Emmanuel Goldstein, is an American publisher and broadcaster whose radio program, biennial HOPE hacker conference, and role as lead defendant in the DeCSS anti-circumvention lawsuit made him one of the most visible individual figures in American hacker culture from the 1980s onward.", "url": "people/eric-corley.html" }, { "id": "felix-fx-lindner", "type": "person", "typeLabel": "Person", "title": "Felix \"FX\" Lindner", "slug": "felix-fx-lindner", "era": "1990s-2026", "tags": [ "Phenoelit", "Cisco IOS", "router exploitation", "Recurity Labs", "Germany", "CCC" ], "summary": "Felix \"FX\" Lindner was a German security researcher and founder of the Phenoelit hacking group, best known as a pioneer of Cisco IOS and embedded-router exploitation research, and later founder of the Berlin-based security firm Recurity Labs.", "url": "people/felix-fx-lindner.html" }, { "id": "frank-rieger", "type": "person", "typeLabel": "Person", "title": "Frank Rieger", "slug": "frank-rieger", "era": "1990s-Present", "tags": [ "hacker", "Chaos Computer Club", "CCC", "biometrics", "fingerprint spoofing", "privacy activism", "surveillance", "GSMK", "Cryptophone", "Germany", "Stuxnet", "tech publicist" ], "summary": "Frank Rieger is a German hacker, entrepreneur, and longtime spokesperson for the Chaos Computer Club (CCC), best known for publicizing the CCC's 2013 defeat of Apple's Touch ID fingerprint sensor and for co-founding GSMK, maker of the secure CryptoPhone.", "url": "people/frank-rieger.html" }, { "id": "george-geohot-hotz", "type": "person", "typeLabel": "Person", "title": "George 'geohot' Hotz: The iPhone Jailbreaker", "slug": "george-geohot-hotz", "era": "2000s-Present", "tags": [ "geohot", "jailbreak", "iPhone", "PlayStation", "reverse engineering" ], "summary": "The story of George Hotz, the prodigious hacker who first carrier-unlocked the iPhone and later took on Sony's PlayStation 3.", "url": "people/george-geohot-hotz.html" }, { "id": "gordon-lyon", "type": "person", "typeLabel": "Person", "title": "Gordon Lyon", "slug": "gordon-lyon", "era": "1990s-Present", "tags": [ "Nmap", "Fyodor", "network security", "open source", "port scanning" ], "summary": "Gordon Lyon, known by the handle 'Fyodor,' wrote and released the Nmap Security Scanner in 1997 and has remained its lead developer for nearly three decades, while also founding Insecure.Org, SecLists.Org, and SecTools.Org — long-running pieces of infrastructure that the security research community still relies on.", "url": "people/gordon-lyon.html" }, { "id": "halvar-flake", "type": "person", "typeLabel": "Person", "title": "Halvar Flake", "slug": "halvar-flake", "era": "1990s-Present", "tags": [ "reverse engineering", "binary diffing", "vulnerability research", "zynamics", "BinDiff", "Rowhammer", "Project Zero" ], "summary": "Halvar Flake, the handle of German mathematician Thomas Dullien, pioneered graph-based binary diffing and reverse-engineering tooling through his company zynamics (acquired by Google in 2011), and later helped surface the Rowhammer hardware exploit and co-founded the profiling startup Optimyze (acquired by Elastic in 2021).", "url": "people/halvar-flake.html" }, { "id": "hd-moore", "type": "person", "typeLabel": "Person", "title": "H. D. Moore", "slug": "hd-moore", "era": "2000s-Present", "tags": [ "Metasploit", "penetration testing", "vulnerability research", "Rapid7", "runZero", "network scanning", "exploit development" ], "summary": "H. D. Moore is a security researcher and entrepreneur best known for founding the Metasploit Project in 2003, which grew into the world's most widely used open-source penetration testing framework; he later led security research at Rapid7 and founded the network-discovery company that became runZero.", "url": "people/hd-moore.html" }, { "id": "james-forshaw", "type": "person", "typeLabel": "Person", "title": "James Forshaw", "slug": "james-forshaw", "era": "2010s-Present", "tags": [ "Google Project Zero", "Windows internals", "vulnerability research", "Pwn2Own", "bug bounty", "author" ], "summary": "James Forshaw is a British computer security researcher on Google's Project Zero team renowned for deep Windows internals vulnerability research, a record-setting Microsoft bug bounty, competitive exploit wins at Pwn2Own, and authorship of widely used security textbooks on network protocols and Windows security.", "url": "people/james-forshaw.html" }, { "id": "james-kettle", "type": "person", "typeLabel": "Person", "title": "James Kettle", "slug": "james-kettle", "era": "2010s-Present", "tags": [ "web security", "PortSwigger", "Burp Suite", "HTTP request smuggling", "web cache poisoning", "race conditions" ], "summary": "James Kettle, known online as 'albinowax', is a British web security researcher and Director of Research at PortSwigger (maker of Burp Suite), best known for reviving and popularizing HTTP request smuggling through his 2019 'HTTP Desync Attacks' research, alongside influential work on web cache poisoning and web race conditions.", "url": "people/james-kettle.html" }, { "id": "jan-krissler", "type": "person", "typeLabel": "Person", "title": "Jan Krissler", "slug": "jan-krissler", "era": "2000s-Present", "tags": [ "Chaos Computer Club", "biometrics", "fingerprint spoofing", "Touch ID", "iris recognition", "Germany" ], "summary": "Jan Krissler, known by the handle 'Starbug', is a German security researcher and long-time Chaos Computer Club member whose public demonstrations against fingerprint and iris authentication systems — including defeating Apple's Touch ID days after its 2013 launch and reconstructing a German cabinet minister's fingerprint from photographs in 2014 — became landmark illustrations of the fragility of biometric security.", "url": "people/jan-krissler.html" }, { "id": "jeff-moss", "type": "person", "typeLabel": "Person", "title": "Jeff Moss", "slug": "jeff-moss", "era": "1990s-Present", "tags": [ "Dark Tangent", "DEF CON", "Black Hat", "ICANN", "cybersecurity policy" ], "summary": "Jeff Moss, known by the handle 'The Dark Tangent,' founded the DEF CON and Black Hat Briefings security conferences and later moved into institutional roles including ICANN Chief Security Officer and U.S. Department of Homeland Security Advisory Council member, becoming one of the clearest examples of a hacker-scene figure crossing into mainstream security and internet-governance institutions.", "url": "people/jeff-moss.html" }, { "id": "jennifer-granick", "type": "person", "typeLabel": "Person", "title": "Jennifer Granick", "slug": "jennifer-granick", "era": "1990s-Present", "tags": [ "digital rights", "computer crime law", "EFF", "ACLU", "Stanford Law", "surveillance law" ], "summary": "Jennifer Granick is an American attorney who began her career defending accused computer hackers in the 1990s and went on to become one of the United States' leading legal voices on digital civil liberties, directing Stanford Law School's Center for Internet and Society and holding senior counsel roles at the Electronic Frontier Foundation and the ACLU.", "url": "people/jennifer-granick.html" }, { "id": "jeremiah-grossman", "type": "person", "typeLabel": "Person", "title": "Jeremiah Grossman", "slug": "jeremiah-grossman", "era": "1990s-Present", "tags": [ "web application security", "cross-site scripting", "WhiteHat Security", "WASC", "clickjacking" ], "summary": "Jeremiah Grossman is an American computer security researcher who founded WhiteHat Security in 2001 after working as Yahoo!'s information security officer, becoming one of the earliest professional voices in cross-site scripting and web application security research and helping to institutionalize the field through the Web Application Security Consortium and the annual 'Top 10 Web Hacking Techniques' list.", "url": "people/jeremiah-grossman.html" }, { "id": "joanna-rutkowska", "type": "person", "typeLabel": "Person", "title": "Joanna Rutkowska", "slug": "joanna-rutkowska", "era": "2000s-Present", "tags": [ "rootkits", "virtualization security", "hypervisor security", "Qubes OS", "Blue Pill", "Invisible Things Lab", "evil maid attack", "Poland" ], "summary": "Joanna Rutkowska is a Polish computer security researcher best known for the 2006 \"Blue Pill\" hardware-virtualization rootkit concept, for founding Invisible Things Lab, and for creating the security-by-isolation desktop operating system Qubes OS.", "url": "people/joanna-rutkowska.html" }, { "id": "john-draper", "type": "person", "typeLabel": "Person", "title": "John Draper", "slug": "john-draper", "era": "1970s-Present", "tags": [ "phreaking", "blue box", "2600 Hz", "Captain Crunch", "Apple", "EasyWriter" ], "summary": "John Draper, known as 'Captain Crunch,' is a foundational figure of phone phreaking whose discovery that a cereal-box toy whistle reproduced AT&T's 2600 Hz control tone helped launch blue-box phreaking and, indirectly, informed the founding partnership between Steve Wozniak and Steve Jobs.", "url": "people/john-draper.html" }, { "id": "julian-assange", "type": "person", "typeLabel": "Person", "title": "Julian Assange", "slug": "julian-assange", "era": "1980s-Present", "tags": [ "Mendax", "International Subversives", "hacker", "WikiLeaks", "Espionage Act", "extradition", "press freedom" ], "summary": "A teenage Australian hacker turned publisher, Julian Assange went from breaching military and telecom networks under the handle 'Mendax' to founding WikiLeaks and becoming the central, polarizing figure in a decades-long legal battle over the boundaries of journalism, national security, and personal accountability.", "url": "people/julian-assange.html" }, { "id": "karsten-nohl", "type": "person", "typeLabel": "Person", "title": "Karsten Nohl", "slug": "karsten-nohl", "era": "2000s-Present", "tags": [ "cryptography", "GSM security", "RFID", "BadUSB", "mobile security", "Security Research Labs", "SS7" ], "summary": "Karsten Nohl is a German cryptographer and security researcher best known for cracking the GSM A5/1 cipher and the MIFARE Classic RFID card encryption, and for co-discovering the 2014 BadUSB firmware vulnerability; he leads Security Research Labs, a Berlin-based security research consultancy.", "url": "people/karsten-nohl.html" }, { "id": "katie-moussouris", "type": "person", "typeLabel": "Person", "title": "Katie Moussouris", "slug": "katie-moussouris", "era": "2000s-Present", "tags": [ "bug bounty", "vulnerability disclosure", "Microsoft", "Hack the Pentagon", "Luta Security", "HackerOne", "cybersecurity policy", "Wassenaar Arrangement" ], "summary": "Katie Moussouris is an American security researcher and policy advocate who created Microsoft's first bug bounty program, helped design the U.S. Department of Defense's \"Hack the Pentagon\" pilot, and founded the vulnerability-disclosure consultancy Luta Security.", "url": "people/katie-moussouris.html" }, { "id": "kevin-mahaffey", "type": "person", "typeLabel": "Person", "title": "Kevin Mahaffey", "slug": "kevin-mahaffey", "era": "2009-Present", "tags": [ "cybersecurity", "mobile security", "Lookout", "vulnerability research", "car hacking", "angel investor" ], "summary": "Kevin Mahaffey is a cybersecurity entrepreneur and researcher best known as co-founder and CTO of Lookout, the mobile security company, and for co-discovering critical remote-exploit vulnerabilities in the Tesla Model S alongside researcher Marc Rogers in 2015.", "url": "people/kevin-mahaffey.html" }, { "id": "kevin-mitnick-complete-history", "type": "person", "typeLabel": "Person", "title": "Kevin Mitnick: A Complete History", "slug": "kevin-mitnick-complete-history", "era": "1963-2023", "tags": [ "social engineering", "phreaking", "FBI", "DEC", "KnowBe4", "history" ], "summary": "From his Los Angeles childhood and early phone-phreaking to the 1990s manhunt, prison, and his later career as a renowned security consultant.", "url": "people/kevin-mitnick-complete-history.html" }, { "id": "kevin-poulsen", "type": "person", "typeLabel": "Person", "title": "Kevin Poulsen", "slug": "kevin-poulsen", "era": "1980s-Present", "tags": [ "phone phreaking", "Dark Dante", "KIIS-FM", "Wired", "SecureDrop" ], "summary": "Kevin Poulsen, known by the handle 'Dark Dante,' was a phone phreaker and hacker who rigged a 1990 radio-station phone contest to win a Porsche and later reinvented himself as an award-winning Wired News journalist who helped uncover Chelsea Manning as the source of the WikiLeaks military and diplomatic leaks.", "url": "people/kevin-poulsen.html" }, { "id": "kymberlee-price", "type": "person", "typeLabel": "Person", "title": "Kymberlee Price", "slug": "kymberlee-price", "era": "2005-Present", "tags": [ "security researcher", "vulnerability coordination", "bug bounty programs", "product security", "Microsoft", "MSRC", "Bugcrowd", "BlueHat", "New Relic", "Zatik Security" ], "summary": "Kymberlee Price is an American product security executive whose two-decade career at Microsoft, BlackBerry, Synack, Bugcrowd, and New Relic centers on building vulnerability coordination and bug bounty programs, including Microsoft's first security researcher outreach effort and the BlueHat conference she co-started in 2005.", "url": "people/kymberlee-price.html" }, { "id": "linus-torvalds", "type": "person", "typeLabel": "Person", "title": "Linus Torvalds", "slug": "linus-torvalds", "era": "1991-Present", "tags": [ "Linux", "kernel", "open source", "Git", "version control", "hacker culture" ], "summary": "Finnish-American software engineer who created the Linux kernel in 1991 and Git in 2005, becoming the central technical authority behind the dominant open-source operating system underlying most internet servers, Android devices, and much of the world's computing infrastructure.", "url": "people/linus-torvalds.html" }, { "id": "marc-maiffret", "type": "person", "typeLabel": "Person", "title": "Marc Maiffret", "slug": "marc-maiffret", "era": "1990s-Present", "tags": [ "eEye Digital Security", "Code Red worm", "vulnerability research", "Windows/IIS security", "BeyondTrust" ], "summary": "Marc Maiffret is an American security researcher who, as a teenage former hacker, co-founded eEye Digital Security in 1998 and went on to discover and publicly analyze the 2001 Code Red worm, becoming an early and influential figure in commercial Windows/IIS vulnerability research.", "url": "people/marc-maiffret.html" }, { "id": "marcus-hutchins-wannacry", "type": "person", "typeLabel": "Person", "title": "Marcus Hutchins: The Accidental Hero of WannaCry", "slug": "marcus-hutchins-wannacry", "era": "2010s", "tags": [ "malwaretech", "wannacry", "ransomware", "security research", "hero" ], "summary": "The story of Marcus Hutchins, a young malware researcher who discovered the 'kill switch' that helped halt the global WannaCry ransomware attack.", "url": "people/marcus-hutchins-wannacry.html" }, { "id": "marcus-ranum", "type": "person", "typeLabel": "Person", "title": "Marcus Ranum", "slug": "marcus-ranum", "era": "1980s-Present", "tags": [ "firewalls", "network security", "intrusion detection", "TIS Firewall Toolkit", "NFR Security" ], "summary": "Marcus J. Ranum is an American computer security researcher and engineer credited with designing some of the earliest commercial firewall systems and later founding a pioneering network intrusion-detection company, making him one of the formative figures in modern network perimeter security.", "url": "people/marcus-ranum.html" }, { "id": "marion-marschalek", "type": "person", "typeLabel": "Person", "title": "Marion Marschalek", "slug": "marion-marschalek", "era": "2011-Present", "tags": [ "malware-analysis", "reverse-engineering", "austria", "women-in-security", "blackhoodie", "cloud-security", "open-source-tools" ], "summary": "Marion Marschalek is an Austrian-born reverse engineer and malware analyst whose confirmed career spans Ikarus Security Software, Intel's STORM hardware-security team, and AWS GuardDuty, and who now runs her own reverse-engineering consultancy, Hack & Cheese, while remaining active in the BlackHoodie women-in-reverse-engineering community.", "url": "people/marion-marschalek.html" }, { "id": "michal-zalewski", "type": "person", "typeLabel": "Person", "title": "Michal Zalewski", "slug": "michal-zalewski", "era": "1990s-Present", "tags": [ "network security", "fuzzing", "browser security", "OS fingerprinting", "Google", "author" ], "summary": "Polish-born security researcher known online as 'lcamtuf', a prolific Bugtraq-era vulnerability researcher whose passive-fingerprinting tool p0f, web-security books, and coverage-guided fuzzer American Fuzzy Lop (afl) reshaped both browser-security research and modern bug-finding practice.", "url": "people/michal-zalewski.html" }, { "id": "mikko-hypponen", "type": "person", "typeLabel": "Person", "title": "Mikko Hyppönen", "slug": "mikko-hypponen", "era": "1990s-Present", "tags": [ "malware research", "F-Secure", "WithSecure", "Finland", "antivirus", "TED speaker" ], "summary": "Mikko Hyppönen is a Finnish computer security researcher who spent over three decades at F-Secure and its successor WithSecure, becoming one of the most publicly recognized voices in malware research and cybersecurity communication, known for tracking down early virus authors and for widely viewed talks on cybercrime.", "url": "people/mikko-hypponen.html" }, { "id": "moxie-marlinspike", "type": "person", "typeLabel": "Person", "title": "Moxie Marlinspike", "slug": "moxie-marlinspike", "era": "2000s-Present", "tags": [ "SSL/TLS security", "encrypted messaging", "Signal Protocol", "cryptography", "privacy tools" ], "summary": "Moxie Marlinspike is an American security researcher who exposed foundational weaknesses in SSL/TLS certificate trust with tools like sslsniff and SSLstrip, then went on to co-create the Signal Protocol, the end-to-end encryption system now used by Signal, WhatsApp, and other major messaging platforms.", "url": "people/moxie-marlinspike.html" }, { "id": "mudge-peiter-zatko", "type": "person", "typeLabel": "Person", "title": "Peiter \"Mudge\" Zatko", "slug": "mudge-peiter-zatko", "era": "1990s-Present", "tags": [ "L0pht", "buffer overflow", "L0phtCrack", "DARPA", "whistleblower", "Twitter", "cybersecurity policy" ], "summary": "Peiter \"Mudge\" Zatko is an American security researcher who rose to prominence as a leading member of the L0pht hacker collective in the 1990s, later ran cybersecurity programs at DARPA and held security leadership roles at Google, Stripe and Twitter, and in 2022 became internationally known as the whistleblower who accused Twitter of severe security and privacy failures before Congress, the SEC and the FTC.", "url": "people/mudge-peiter-zatko.html" }, { "id": "natalie-silvanovich", "type": "person", "typeLabel": "Person", "title": "Natalie Silvanovich", "slug": "natalie-silvanovich", "era": "2010s-Present", "tags": [ "Project Zero", "Google", "zero-click", "iMessage", "mobile security", "vulnerability research" ], "summary": "Natalie Silvanovich is a security researcher on Google's Project Zero team known for pioneering research into 'interaction-less' (zero-click) vulnerabilities in mobile messaging and video-calling applications, most notably a 2019 study of iMessage that uncovered multiple remotely exploitable bugs requiring no user interaction.", "url": "people/natalie-silvanovich.html" }, { "id": "nate-cardozo", "type": "person", "typeLabel": "Person", "title": "Nate Cardozo", "slug": "nate-cardozo", "era": "2012-2019 (EFF)", "tags": [ "EFF", "privacy law", "surveillance", "encryption", "digital civil liberties", "coders' rights", "cybersecurity policy" ], "summary": "Nate Cardozo is an American attorney who spent about six and a half years as a Senior Staff Attorney at the Electronic Frontier Foundation, where he worked on encryption policy, government surveillance oversight, and coders' rights, before moving into privacy roles at WhatsApp/Facebook and later Google.", "url": "people/nate-cardozo.html" }, { "id": "nicolas-waisman", "type": "person", "typeLabel": "Person", "title": "Nicolas Waisman", "slug": "nicolas-waisman", "era": "2004-Present", "tags": [ "exploit development", "Argentina", "Immunity Inc.", "heap exploitation", "Infiltrate conference", "ekoparty", "Black Hat", "GitHub Security Lab" ], "summary": "Nicolas \"Nico\" Waisman is an Argentine security researcher who spent over a decade at Immunity, Inc. — rising to Vice President of Latin America — where he built a reputation as a globally recognized heap-exploitation expert, later contributing to GitHub's Security Lab research team.", "url": "people/nicolas-waisman.html" }, { "id": "orange-tsai", "type": "person", "typeLabel": "Person", "title": "Orange Tsai", "slug": "orange-tsai", "era": "2010s-Present", "tags": [ "web security", "DEVCORE", "Taiwan", "Pwn2Own", "ProxyLogon", "vulnerability research" ], "summary": "Orange Tsai is a Taiwan-based web application security researcher and principal researcher at DEVCORE whose disclosures of Microsoft Exchange Server vulnerabilities in early 2021 became known as ProxyLogon, and whose repeated Pwn2Own 'Master of Pwn' titles and Pwnie Award wins have made him one of the most recognized application-security researchers in Asia.", "url": "people/orange-tsai.html" }, { "id": "peter-van-eeckhoutte", "type": "person", "typeLabel": "Person", "title": "Peter Van Eeckhoutte", "slug": "peter-van-eeckhoutte", "era": "2007-Present", "tags": [ "exploit development", "Corelan Team", "security training", "Belgium", "memory corruption", "reverse engineering" ], "summary": "Peter Van Eeckhoutte is a Belgian security researcher and trainer who founded the Corelan Security Team in 2009 and authored the widely used Corelan Exploit Writing Tutorials, becoming a leading figure in Windows exploit-development education.", "url": "people/peter-van-eeckhoutte.html" }, { "id": "rain-forest-puppy", "type": "person", "typeLabel": "Person", "title": "Rain Forest Puppy", "slug": "rain-forest-puppy", "era": "1998-2002", "tags": [ "security-research", "sql-injection", "vulnerability-disclosure", "phrack", "hacker-culture", "pseudonymous", "1990s", "2000s" ], "summary": "Rain Forest Puppy (rfp) was the pseudonym of a security researcher who published one of the earliest widely-read technical descriptions of SQL injection, built the Whisker web-vulnerability scanner, and proposed RFPolicy, an early formal framework for coordinating vulnerability disclosure with vendors.", "url": "people/rain-forest-puppy.html" }, { "id": "ralf-philipp-weinmann", "type": "person", "typeLabel": "Person", "title": "Ralf-Philipp Weinmann", "slug": "ralf-philipp-weinmann", "era": "2006-Present", "tags": [ "security-research", "cryptanalysis", "GSM", "baseband-security", "mobile-security", "Comsecuris", "Germany", "academia", "reverse-engineering" ], "summary": "Ralf-Philipp Weinmann is a German security researcher and cryptographer known for practical cryptanalysis of deployed ciphers (DECT, EMV/ISO 9796-2) and for pioneering research into cellular baseband firmware vulnerabilities; he co-authored the \"iOS Hacker's Handbook\" and co-founded the security firm Comsecuris.", "url": "people/ralf-philipp-weinmann.html" }, { "id": "renaud-deraison", "type": "person", "typeLabel": "Person", "title": "Renaud Deraison", "slug": "renaud-deraison", "era": "1998-Present", "tags": [ "Nessus", "Tenable", "vulnerability-management", "cybersecurity-entrepreneur", "France", "CVE", "SecurityScorecard", "Sekoia.io", "patents", "chief-technology-officer" ], "summary": "Renaud Deraison is a French-born security researcher who created the Nessus vulnerability scanner as a lycée student in 1998 and went on to co-found Tenable Network Security in 2002, serving as the company's chief technology officer through its 2018 Nasdaq IPO before moving into advisory and board roles across the cybersecurity industry.", "url": "people/renaud-deraison.html" }, { "id": "richard-stallman-gnu", "type": "person", "typeLabel": "Person", "title": "Richard Stallman, the GNU Project, and Free Software", "slug": "richard-stallman-gnu", "era": "1980s-Present", "tags": [ "free software", "GNU", "Richard Stallman", "philosophy" ], "summary": "The story of how hacker Richard Stallman launched the Free Software Movement and the GNU Project, creating the philosophical and legal foundations for open source.", "url": "people/richard-stallman-gnu.html" }, { "id": "robert-hansen", "type": "person", "typeLabel": "Person", "title": "Robert Hansen", "slug": "robert-hansen", "era": "2000s-Present", "tags": [ "XSS", "web application security", "clickjacking", "ha.ckers.org", "Slowloris" ], "summary": "Robert Hansen, known by the handle 'RSnake,' is a web application security researcher who built the influential ha.ckers.org security community and XSS Cheat Sheet, co-coined the term 'clickjacking' with Jeremiah Grossman in 2008, and created the Slowloris denial-of-service tool.", "url": "people/robert-hansen.html" }, { "id": "robert-tappan-morris", "type": "person", "typeLabel": "Person", "title": "Robert Tappan Morris", "slug": "robert-tappan-morris", "era": "1980s-Present", "tags": [ "Morris Worm", "CFAA", "Cornell", "MIT", "Viaweb", "Y Combinator", "computer science" ], "summary": "Robert Tappan Morris is an American computer scientist who, as a Cornell graduate student in 1988, released the first worm to spread widely across the early Internet and became the first person convicted under the Computer Fraud and Abuse Act; he later co-founded Viaweb and Y Combinator and is now a tenured MIT professor of computer science.", "url": "people/robert-tappan-morris.html" }, { "id": "roberto-preatoni", "type": "person", "typeLabel": "Person", "title": "Roberto Preatoni", "slug": "roberto-preatoni", "era": "2002-Present", "tags": [ "hacker", "security researcher", "penetration tester", "Zone-H", "website defacement", "Italy", "internet entrepreneur", "WabiSabiLabi", "Telecom Italia scandal" ], "summary": "Italian penetration tester and internet entrepreneur best known as the founder of Zone-H, the long-running website-defacement archive, and of WabiSabiLabi, an early online vulnerability marketplace; in November 2007 he was arrested in Milan as part of the wide-ranging Telecom Italia \"Tiger Team\" wiretapping and corporate-espionage investigation.", "url": "people/roberto-preatoni.html" }, { "id": "ross-anderson", "type": "person", "typeLabel": "Person", "title": "Ross Anderson", "slug": "ross-anderson", "era": "1980s-2024", "tags": [ "security engineering", "cryptography", "banking security", "chip and pin", "security economics", "Cambridge", "surveillance policy" ], "summary": "Ross Anderson was a British computer scientist and Professor of Security Engineering at the University of Cambridge whose research on cryptography, banking and ATM fraud, and the economics of information security helped establish security engineering as a recognized academic discipline, and whose 2001 textbook 'Security Engineering' became a standard reference in the field.", "url": "people/ross-anderson.html" }, { "id": "runa-sandvik", "type": "person", "typeLabel": "Person", "title": "Runa Sandvik", "slug": "runa-sandvik", "era": "2000s-Present", "tags": [ "Tor Project", "digital security", "journalism security", "newsroom security", "press freedom" ], "summary": "Runa Sandvik is a Norwegian-American computer security researcher who moved from Tor Project development and smart-weapon hacking research into building digital-security programs for newsrooms, most notably as director of information security at The New York Times.", "url": "people/runa-sandvik.html" }, { "id": "samy-kamkar", "type": "person", "typeLabel": "Person", "title": "Samy Kamkar", "slug": "samy-kamkar", "era": "2000s-Present", "tags": [ "XSS worm", "MySpace", "web security", "IoT hacking", "RF security", "DEF CON", "open-source hardware" ], "summary": "Samy Kamkar is an American privacy and security researcher best known for writing the 2005 'Samy' cross-site-scripting worm that infected over a million MySpace profiles in under 24 hours, resulting in a felony conviction, and for a subsequent career of high-profile open-hardware security research including SkyJack, KeySweeper, and wireless car/garage-door attacks.", "url": "people/samy-kamkar.html" }, { "id": "silvio-cesare", "type": "person", "typeLabel": "Person", "title": "Silvio Cesare", "slug": "silvio-cesare", "era": "1993-Present", "tags": [ "security-researcher", "malware-research", "virus-research", "phrack", "academia", "australia", "software-similarity" ], "summary": "Silvio Cesare is an Australian security researcher active since the early 1990s, known for Phrack articles on binary infection techniques, a Snort IDS-evasion discovery, and later academic work on malware classification at Deakin University; he now runs the Canberra security firm InfoSect.", "url": "people/silvio-cesare.html" }, { "id": "solar-designer", "type": "person", "typeLabel": "Person", "title": "Solar Designer", "slug": "solar-designer", "era": "1990s-Present", "tags": [ "password cracking", "open source security", "linux hardening", "openwall", "exploit development" ], "summary": "Solar Designer (Alexander Peslyak) created the John the Ripper password cracker in 1996 and founded the Openwall Project, becoming one of the most influential figures in open-source Linux security hardening and exploitation research.", "url": "people/solar-designer.html" }, { "id": "tavis-ormandy", "type": "person", "typeLabel": "Person", "title": "Tavis Ormandy", "slug": "tavis-ormandy", "era": "2000s-2025", "tags": [ "Google Project Zero", "vulnerability research", "disclosure ethics", "antivirus security", "sandbox escapes" ], "summary": "Tavis Ormandy is a British computer security researcher and a founding member of Google Project Zero, known both for a long record of high-impact vulnerability discoveries (Sophos, Cloudflare's Cloudbleed, AMD's Zenbleed) and for a 2010 disclosure dispute with Microsoft that became a touchstone in debates over responsible versus full disclosure.", "url": "people/tavis-ormandy.html" }, { "id": "the-grugq", "type": "person", "typeLabel": "Person", "title": "the Grugq", "slug": "the-grugq", "era": "2000s-Present", "tags": [ "anti-forensics", "OPSEC", "pseudonymous", "Black Hat", "cyber strategy" ], "summary": "The Grugq is a pseudonymous information-security researcher, reportedly of South African origin, best known for pioneering early anti-forensics research in the 2000s, later reported involvement as a broker of zero-day exploits, and an ongoing career as an influential public commentator on operational security (OPSEC) and cyber conflict.", "url": "people/the-grugq.html" }, { "id": "tsutomu-shimomura", "type": "person", "typeLabel": "Person", "title": "Tsutomu Shimomura", "slug": "tsutomu-shimomura", "era": "1980s-Present", "tags": [ "computational physics", "Kevin Mitnick case", "IP spoofing", "San Diego Supercomputer Center", "Takedown" ], "summary": "A computational physicist and security researcher at the San Diego Supercomputer Center, Shimomura became internationally known after a December 1994 attack on his own home systems led him to help the FBI track and arrest fugitive hacker Kevin Mitnick, a chase he later recounted in the book Takedown.", "url": "people/tsutomu-shimomura.html" }, { "id": "window-snyder", "type": "person", "typeLabel": "Person", "title": "Window Snyder", "slug": "window-snyder", "era": "1990s-Present", "tags": [ "security architecture", "threat modeling", "Microsoft", "Mozilla", "Apple", "CISO" ], "summary": "Window Snyder is a security engineer and executive who rose from the 1990s Boston hacker scene through @stake and Microsoft's Trustworthy Computing initiative to become one of the most senior women in security leadership, later holding chief security roles at Mozilla, Apple, Fastly, Intel, and Square/Block.", "url": "people/window-snyder.html" }, { "id": "zach-lanier", "type": "person", "typeLabel": "Person", "title": "Zach Lanier", "slug": "zach-lanier", "era": "2009-Present", "tags": [ "mobile security", "IoT security", "embedded systems", "Android security", "reverse engineering", "penetration testing", "Duo Security", "Accuvant LABS", "Cylance", "Android Hacker's Handbook" ], "summary": "Zach Lanier (handle @quine) is an application, mobile, and embedded-systems security researcher who co-authored the Android Hacker's Handbook and presented widely on Android permissions, IoT device flaws, and embedded-hardware reversing while working at Veracode, Intrepidus Group, Accuvant LABS, Duo Security, and Cylance.", "url": "people/zach-lanier.html" }, { "id": "anonymous-hacktivism", "type": "group", "typeLabel": "Group", "title": "Anonymous: From 4chan Pranksters to Global Hacktivists", "slug": "anonymous-hacktivism", "era": "2000s-Present", "tags": [ "anonymous", "hacktivism", "4chan", "Project Chanology" ], "summary": "The evolution of Anonymous from a leaderless, chaotic meme culture on the 4chan imageboard to a globally recognized hacktivist collective.", "url": "groups/anonymous-hacktivism.html" }, { "id": "chaos-computer-club-ccc", "type": "group", "typeLabel": "Group", "title": "The Chaos Computer Club (CCC)", "slug": "chaos-computer-club-ccc", "era": "1980s-Present", "tags": [ "ccc", "europe", "hacktivism", "privacy" ], "summary": "Europe's largest and one of the world's most influential associations of hackers, known for its public demonstrations of security flaws and its strong advocacy for government transparency and data privacy.", "url": "groups/chaos-computer-club-ccc.html" }, { "id": "cult-of-the-dead-cow-cdc", "type": "group", "typeLabel": "Group", "title": "The Cult of the Dead Cow (cDc) and Hacktivism", "slug": "cult-of-the-dead-cow-cdc", "era": "1980s-2000s", "tags": [ "cdc", "hacktivism", "bbs", "security tools" ], "summary": "The influential hacker group known for its high-profile pranks, coining the term 'hacktivism', and releasing controversial but powerful tools like Back Orifice.", "url": "groups/cult-of-the-dead-cow-cdc.html" }, { "id": "cypherpunks-mailing-list", "type": "group", "typeLabel": "Group", "title": "Cypherpunks", "slug": "cypherpunks-mailing-list", "era": "1992-Present", "tags": [ "cryptography", "privacy", "mailing-list", "PGP", "crypto-wars", "remailers", "bitcoin-precursor", "digital-rights" ], "summary": "The Cypherpunks were an informal collective and mailing list founded in 1992 by Eric Hughes, Timothy C. May, and John Gilmore to promote privacy through cryptography, whose members' code, essays, and debates shaped PGP adoption, the Crypto Wars, and the ideological groundwork for Bitcoin.", "url": "groups/cypherpunks-mailing-list.html" }, { "id": "devcore", "type": "group", "typeLabel": "Group", "title": "DEVCORE", "slug": "devcore", "era": "2012-Present", "tags": [ "taiwan", "company", "red-team", "penetration-testing", "microsoft-exchange", "proxylogon", "proxyshell", "pwn2own", "vulnerability-research", "white-hat" ], "summary": "DEVCORE (戴夫寇爾) is a Taipei-based offensive-security firm founded in 2012 as Taiwan's first company to offer red-team exercises, whose research bench — not just Orange Tsai — has produced hundreds of CVEs, the ProxyLogon/ProxyShell Exchange Server disclosures, and repeated Pwn2Own titles.", "url": "groups/devcore.html" }, { "id": "hitcon", "type": "group", "typeLabel": "Group", "title": "HITCON (Hacks In Taiwan Conference)", "slug": "hitcon", "era": "2005-Present", "tags": [ "conference", "taiwan", "cybersecurity", "hacking", "ctf", "asia-pacific", "organization", "community" ], "summary": "HITCON (Hacks In Taiwan Conference) is Taiwan's longest-running vendor-neutral hacker and security conference, held annually since 2005 by the island's hacker/security community. It has grown from a single-track gathering into a multi-track event covering research talks, CTF competitions, enterprise and CISO tracks, and cyber-range training.", "url": "groups/hitcon.html" }, { "id": "keen-security-lab", "type": "group", "typeLabel": "Group", "title": "Keen Security Lab", "slug": "keen-security-lab", "era": "2016-Present", "tags": [ "automotive-security", "connected-car", "china", "tencent", "vulnerability-research", "iot", "vehicle-hacking" ], "summary": "Tencent Keen Security Lab is a China-based vulnerability research team best known for a series of published remote and physical attacks against Tesla, BMW, Mercedes-Benz, and Lexus vehicles, disclosed responsibly to manufacturers between 2016 and 2021.", "url": "groups/keen-security-lab.html" }, { "id": "l0pht-senate-testimony", "type": "group", "typeLabel": "Group", "title": "L0pht Heavy Industries: Advising the Senate", "slug": "l0pht-senate-testimony", "era": "1990s", "tags": [ "l0pht", "security", "disclosure", "think tank" ], "summary": "The story of the Boston-based hacker collective that testified before the U.S. Senate, famously claiming they could shut down the internet in 30 minutes.", "url": "groups/l0pht-senate-testimony.html" }, { "id": "legion-of-doom-lod", "type": "group", "typeLabel": "Group", "title": "Legion of Doom (LOD): The Masters of the Digital Universe", "slug": "legion-of-doom-lod", "era": "1980s-1990s", "tags": [ "lod", "mod", "hacker group", "telecom" ], "summary": "The history of the Legion of Doom (LOD), one of the most technically proficient and influential hacker groups of the BBS era.", "url": "groups/legion-of-doom-lod.html" }, { "id": "lulzsec", "type": "group", "typeLabel": "Group", "title": "LulzSec", "slug": "lulzsec", "era": "2011", "tags": [ "LulzSec", "hacktivism", "Anonymous", "AntiSec", "data breach", "DDoS", "Sabu", "FBI informant", "Sony breach", "PBS breach", "gray hat", "2011" ], "summary": "LulzSec (Lulz Security) was a short-lived hacktivist collective active from May to June 2011, loosely linked to Anonymous, that carried out a rapid string of high-profile breaches and DDoS attacks against Sony, PBS, Fox, InfraGard, Arizona DPS, and others before publicly disbanding after 50 days.", "url": "groups/lulzsec.html" }, { "id": "masters-of-deception-mod", "type": "group", "typeLabel": "Group", "title": "Masters of Deception: The New York Hacker Wars", "slug": "masters-of-deception-mod", "era": "1980s-1990s", "tags": [ "mod", "lod", "phreaking", "new york" ], "summary": "The story of the Masters of Deception (MOD), a New York-based hacker group whose expertise in telephony and epic rivalry with the Legion of Doom (LOD) defined an era.", "url": "groups/masters-of-deception-mod.html" }, { "id": "phone-losers-of-america", "type": "group", "typeLabel": "Group", "title": "Phone Losers of America", "slug": "phone-losers-of-america", "era": "1994-Present", "tags": [ "phone phreaking", "prank calls", "hacking zine", "BBS culture", "podcast", "internet culture", "unauthorized computer access case" ], "summary": "Phone Losers of America (PLA) is a long-running phone phreaking and prank-call community founded in 1994 by Brad Carter (also known online as RBCP) and a collaborator known as Zak (el_jefe), which grew from a photocopied hacking zine into an internet radio show and podcast still active today.", "url": "groups/phone-losers-of-america.html" }, { "id": "project-zero", "type": "group", "typeLabel": "Group", "title": "Project Zero", "slug": "project-zero", "era": "2014-Present", "tags": [ "Google", "vulnerability research", "zero-day", "bug bounty", "responsible disclosure", "security team", "white hat", "organization" ], "summary": "Project Zero is a team of security researchers employed by Google, founded in 2014 to find and privately report zero-day vulnerabilities in any software, not just Google's own, under a public 90-day disclosure deadline.", "url": "groups/project-zero.html" }, { "id": "shadowcrew", "type": "group", "typeLabel": "Group", "title": "ShadowCrew", "slug": "shadowcrew", "era": "2002-2004", "tags": [ "carding", "identity theft", "credit card fraud", "cybercrime forum", "Operation Firewall", "U.S. Secret Service", "Albert Gonzalez", "law enforcement investigation" ], "summary": "ShadowCrew was an online carding and identity-fraud forum active from 2002 to 2004 whose members traded stolen credit card data, forged documents, and hacking tutorials; it was dismantled in October 2004 by the U.S. Secret Service's Operation Firewall, which led to 19 federal indictments and later revealed that a top member, Albert Gonzalez, had been a cooperating government informant.", "url": "groups/shadowcrew.html" }, { "id": "wikileaks-julian-assange", "type": "group", "typeLabel": "Group", "title": "WikiLeaks & Julian Assange: Radical Transparency", "slug": "wikileaks-julian-assange", "era": "2000s-Present", "tags": [ "wikileaks", "whistleblowing", "journalism", "Assange", "hacktivism" ], "summary": "The rise and impact of WikiLeaks, the controversial platform founded by Julian Assange that published vast caches of secret information, changing the face of journalism and activism.", "url": "groups/wikileaks-julian-assange.html" }, { "id": "aircrack-ng", "type": "tool", "typeLabel": "Tool", "title": "Aircrack-ng", "slug": "aircrack-ng", "era": "2004-Present", "tags": [ "wifi-security", "wep-cracking", "wpa-wpa2", "packet-injection", "open-source", "penetration-testing", "802.11", "linux-tools" ], "summary": "Aircrack-ng is a free, open-source command-line suite for assessing WiFi network security, covering monitoring, packet injection, capture-driver testing, and WEP/WPA-PSK key cracking; it descends from Christophe Devine's original Aircrack and has been maintained since 2006 by Thomas d'Otreppe de Bouvette and the Aircrack-ng team.", "url": "tools/aircrack-ng.html" }, { "id": "bloodhound", "type": "tool", "typeLabel": "Tool", "title": "BloodHound", "slug": "bloodhound", "era": "2016-Present", "tags": [ "Active Directory", "red team", "attack path mapping", "graph theory", "SpecterOps" ], "summary": "BloodHound is an open-source tool that maps Active Directory environments as a graph rather than a list, exposing hidden privilege-escalation paths that took defenders and pentesters weeks to find manually and revealing them in minutes, which made it a staple of both red-team operations and enterprise AD defense.", "url": "tools/bloodhound.html" }, { "id": "burp-suite", "type": "tool", "typeLabel": "Tool", "title": "Burp Suite", "slug": "burp-suite", "era": "2003-Present", "tags": [ "web security", "penetration testing", "intercepting proxy", "PortSwigger", "vulnerability scanner" ], "summary": "Burp Suite is an intercepting-proxy-based web application security testing toolkit created by Dafydd Stuttard (aka 'PortSwigger'), which became the de facto industry-standard platform for manual and automated web penetration testing.", "url": "tools/burp-suite.html" }, { "id": "cobalt-strike", "type": "tool", "typeLabel": "Tool", "title": "Cobalt Strike", "slug": "cobalt-strike", "era": "2012-Present", "tags": [ "red-team-tool", "adversary-simulation", "c2-framework", "raphael-mudge", "fortra", "helpsystems", "strategic-cyber-llc", "dual-use", "ransomware", "apt", "cybercrime", "penetration-testing", "armitage", "metasploit" ], "summary": "Cobalt Strike is a commercial adversary-simulation platform created by Raphael Mudge as a paid evolution of his open-source Armitage tool; now owned by Fortra, it is a mainstay of legitimate red-team engagements and, via cracked or misappropriated copies, one of the most widely abused post-exploitation frameworks among ransomware gangs and state-sponsored hacking groups.", "url": "tools/cobalt-strike.html" }, { "id": "frida", "type": "tool", "typeLabel": "Tool", "title": "Frida", "slug": "frida", "era": "2013-Present", "tags": [ "dynamic instrumentation", "reverse engineering", "mobile security", "open source" ], "summary": "Frida is an open-source, JavaScript-scriptable dynamic instrumentation toolkit created by Norwegian developer Ole André Vadla Ravnås, which lets researchers inject code into running processes on the fly to hook functions and inspect behavior without source code, becoming a foundational tool in mobile app reverse engineering and bug bounty hunting.", "url": "tools/frida.html" }, { "id": "ghidra", "type": "tool", "typeLabel": "Tool", "title": "Ghidra", "slug": "ghidra", "era": "1999 (internal origins) - 2019-Present (public tool)", "tags": [ "reverse engineering", "NSA", "open source", "decompiler", "disassembler", "Vault 7" ], "summary": "Ghidra is a free, open-source software reverse engineering framework created by the NSA's Research Directorate, used internally by the agency for years before its unprecedented public release in 2019; it broke the commercial monopoly on high-end disassembly and decompilation tooling by giving researchers worldwide a no-cost alternative to IDA Pro.", "url": "tools/ghidra.html" }, { "id": "hashcat", "type": "tool", "typeLabel": "Tool", "title": "Hashcat", "slug": "hashcat", "era": "2010s-Present", "tags": [ "password cracking", "GPU computing", "open source", "penetration testing" ], "summary": "Hashcat is the world's most widely used GPU-accelerated password recovery tool, created by Jens 'atom' Steube; by proving that consumer graphics cards could crack password hashes orders of magnitude faster than CPUs, it reshaped both offensive password auditing and defensive password-hashing practice.", "url": "tools/hashcat.html" }, { "id": "ida-pro", "type": "tool", "typeLabel": "Tool", "title": "IDA Pro", "slug": "ida-pro", "era": "1991-Present", "tags": [ "disassembler", "decompiler", "reverse engineering", "malware analysis", "Hex-Rays" ], "summary": "IDA Pro is the commercial disassembler and decompiler created by Ilfak Guilfanov that became the de facto industry standard for reverse engineering and malware analysis for nearly three decades, shaping how professional researchers read compiled binaries until free alternatives like Ghidra emerged.", "url": "tools/ida-pro.html" }, { "id": "john-the-ripper", "type": "tool", "typeLabel": "Tool", "title": "John the Ripper: The Timeless Password Cracker", "slug": "john-the-ripper", "era": "1990s-Present", "tags": [ "tool", "password cracking", "security", "open source" ], "summary": "The story of John the Ripper, the fast, flexible, and iconic open-source password cracking tool created by Alexander Peslyak ('Solar Designer').", "url": "tools/john-the-ripper.html" }, { "id": "kali-linux", "type": "tool", "typeLabel": "Tool", "title": "Kali Linux", "slug": "kali-linux", "era": "2013-Present", "tags": [ "linux-distribution", "penetration-testing", "security-auditing", "debian-based", "backtrack-successor", "offensive-security", "open-source", "digital-forensics", "rolling-release", "cybersecurity-toolset" ], "summary": "Kali Linux is a Debian-based, open-source Linux distribution built for penetration testing and security auditing, released in March 2013 as a ground-up rebuild of Offensive Security's earlier BackTrack Linux.", "url": "tools/kali-linux.html" }, { "id": "metasploit-framework", "type": "tool", "typeLabel": "Tool", "title": "The Metasploit Framework: Democratizing Penetration Testing", "slug": "metasploit-framework", "era": "2000s-Present", "tags": [ "tool", "exploit", "penetration testing", "security" ], "summary": "The evolution of the Metasploit Framework, from H. D. Moore's open-source project to a powerful platform that made exploit development and penetration testing accessible.", "url": "tools/metasploit-framework.html" }, { "id": "mimikatz", "type": "tool", "typeLabel": "Tool", "title": "Mimikatz", "slug": "mimikatz", "era": "2007-Present", "tags": [ "credential theft", "post-exploitation", "windows security", "active directory", "pass the hash", "open source" ], "summary": "Mimikatz is an open-source Windows post-exploitation tool created by French programmer Benjamin Delpy that extracts plaintext passwords, hashes, and Kerberos tickets from system memory, becoming one of the most widely used credential-theft utilities in both legitimate penetration testing and real-world cyberattacks, including major ransomware outbreaks.", "url": "tools/mimikatz.html" }, { "id": "nessus", "type": "tool", "typeLabel": "Tool", "title": "Nessus", "slug": "nessus", "era": "1998-Present", "tags": [ "vulnerability-scanner", "tool", "network-security", "open-source-origin", "commercial-software", "Tenable", "Renaud Deraison", "CVE", "compliance-scanning", "OpenVAS" ], "summary": "Nessus is a vulnerability scanner originally released in 1998 by Renaud Deraison as a free, open-source (GPL) security tool; it was folded into Tenable Network Security upon that company's founding in 2002 and switched to proprietary licensing in 2005, becoming one of the most widely deployed commercial vulnerability assessment products.", "url": "tools/nessus.html" }, { "id": "nmap-network-mapper", "type": "tool", "typeLabel": "Tool", "title": "Nmap: The Network Mapper", "slug": "nmap-network-mapper", "era": "1990s-Present", "tags": [ "tool", "security scanning", "open source", "port scanner" ], "summary": "The story of Nmap, the essential open-source utility for network discovery and security auditing, created by Gordon 'Fyodor' Lyon.", "url": "tools/nmap-network-mapper.html" }, { "id": "radare2", "type": "tool", "typeLabel": "Tool", "title": "radare2", "slug": "radare2", "era": "2006-Present", "tags": [ "reverse engineering", "disassembler", "open source", "CTF", "binary analysis" ], "summary": "radare2 is a free, open-source, command-line-first reverse-engineering framework created by Sergi 'pancake' Alvarez, valued for turning binary disassembly, debugging, and forensic analysis into a fully scriptable, cross-platform toolchain that anyone can inspect, extend, and run without a commercial license.", "url": "tools/radare2.html" }, { "id": "snort", "type": "tool", "typeLabel": "Tool", "title": "Snort", "slug": "snort", "era": "1998-Present", "tags": [ "IDS", "IPS", "network-security", "open-source", "Cisco", "Sourcefire", "Martin Roesch", "GPLv2", "signature-detection" ], "summary": "Snort is a free, open-source network intrusion detection and prevention system created by Martin Roesch in 1998, later commercialized through his company Sourcefire and acquired by Cisco Systems in 2013 for $2.7 billion; it remains one of the most widely deployed IDS/IPS engines in the world.", "url": "tools/snort.html" }, { "id": "sqlmap", "type": "tool", "typeLabel": "Tool", "title": "sqlmap", "slug": "sqlmap", "era": "2006-Present", "tags": [ "sql-injection", "penetration-testing", "open-source", "database-security", "security-tool", "gplv2", "kali-linux" ], "summary": "sqlmap is an open-source command-line tool that automates the detection and exploitation of SQL injection vulnerabilities and the takeover of underlying database servers, originally created by Daniele Bellucci in 2006 and developed since by Bernardo Damele and Miroslav Stampar.", "url": "tools/sqlmap.html" }, { "id": "volatility", "type": "tool", "typeLabel": "Tool", "title": "Volatility Framework", "slug": "volatility", "era": "2007-Present", "tags": [ "memory forensics", "incident response", "malware analysis", "open source", "DFIR", "digital forensics", "Python", "RAM analysis", "Aaron Walters", "Volatility Foundation" ], "summary": "The Volatility Framework is an open-source Python toolset for extracting forensic artifacts from volatile memory (RAM) dumps, used worldwide in incident response and malware analysis since its 2007 debut.", "url": "tools/volatility.html" }, { "id": "wireshark-network-analyzer", "type": "tool", "typeLabel": "Tool", "title": "Wireshark: Sniffing the Wires", "slug": "wireshark-network-analyzer", "era": "1990s-Present", "tags": [ "tool", "networking", "protocol analyzer", "open source" ], "summary": "How a project started by Gerald Combs, originally named Ethereal, became the world's foremost network protocol analyzer.", "url": "tools/wireshark-network-analyzer.html" }, { "id": "yara", "type": "tool", "typeLabel": "Tool", "title": "YARA", "slug": "yara", "era": "2013-Present", "tags": [ "malware-analysis", "open-source", "pattern-matching", "virustotal", "threat-detection", "signature-based-detection", "yara-x", "google", "reverse-engineering", "cybersecurity-tooling" ], "summary": "YARA is an open-source, rule-based pattern-matching engine designed by Victor Manuel Alvarez at VirusTotal to help malware researchers identify and classify malware samples using textual and binary patterns.", "url": "tools/yara.html" }, { "id": "eternalblue", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "EternalBlue (CVE-2017-0144)", "slug": "eternalblue", "era": "2017", "tags": [ "nsa", "smb", "shadow-brokers", "wannacry", "notpetya", "ransomware", "windows", "zero-day", "ms17-010", "exploit" ], "summary": "EternalBlue (CVE-2017-0144) was a critical Windows SMBv1 remote-code-execution exploit reportedly developed by the NSA, publicly leaked by a group calling itself the Shadow Brokers in April 2017, and subsequently weaponized in the WannaCry and NotPetya attacks.", "url": "vulnerabilities/eternalblue.html" }, { "id": "heartbleed", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "Heartbleed (CVE-2014-0160)", "slug": "heartbleed", "era": "2014", "tags": [ "openssl", "heartbleed", "cve-2014-0160", "tls-ssl", "vulnerability", "memory-disclosure", "google-security", "codenomicon", "2014" ], "summary": "A critical bug in OpenSSL's TLS heartbeat extension let remote attackers silently read up to 64KB of a server's process memory, exposing private keys and credentials across roughly 17% of the internet's secure servers before it was patched in April 2014.", "url": "vulnerabilities/heartbleed.html" }, { "id": "krack", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "KRACK (Key Reinstallation Attack)", "slug": "krack", "era": "2017", "tags": [ "WPA2", "Wi-Fi", "wireless security", "protocol vulnerability", "nonce reuse", "network security", "Mathy Vanhoef" ], "summary": "KRACK is a set of vulnerabilities in the WPA2 Wi-Fi protocol's four-way handshake, disclosed in October 2017 by researcher Mathy Vanhoef, that let an attacker within radio range force reinstallation of an already-in-use encryption key to decrypt, replay, or inject traffic.", "url": "vulnerabilities/krack.html" }, { "id": "log4shell", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "Log4Shell (CVE-2021-44228)", "slug": "log4shell", "era": "2021", "tags": [ "log4j", "rce", "java", "jndi", "supply-chain", "critical-infrastructure", "open-source", "2021" ], "summary": "Log4Shell was a critical remote-code-execution flaw in Apache Log4j 2, a Java logging library embedded in an enormous share of enterprise and cloud software, that let an attacker achieve full server compromise simply by getting a single crafted string logged.", "url": "vulnerabilities/log4shell.html" }, { "id": "shellshock", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "Shellshock (CVE-2014-6271)", "slug": "shellshock", "era": "2014", "tags": [ "bash", "shellshock", "remote-code-execution", "unix", "linux", "cgi", "environment-variables", "vulnerability", "critical-infrastructure" ], "summary": "Shellshock was a family of critical vulnerabilities in the GNU Bash shell, first disclosed on September 24, 2014, that allowed remote attackers to execute arbitrary code by embedding malicious commands in environment variables processed by Bash.", "url": "vulnerabilities/shellshock.html" }, { "id": "spectre-meltdown", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "Spectre and Meltdown", "slug": "spectre-meltdown", "era": "2018", "tags": [ "CVE-2017-5753", "CVE-2017-5715", "CVE-2017-5754", "speculative execution", "side-channel attack", "Google Project Zero", "Graz University of Technology", "Cyberus Technology", "KPTI", "retpoline", "hardware vulnerability", "2018" ], "summary": "Spectre and Meltdown were two classes of speculative-execution side-channel vulnerabilities affecting virtually all modern CPUs, disclosed on January 3, 2018 after independent discovery by multiple research teams including Google Project Zero, Graz University of Technology, and Cyberus Technology.", "url": "vulnerabilities/spectre-meltdown.html" }, { "id": "stagefright", "type": "vulnerability", "typeLabel": "Vulnerability / Discovery", "title": "Stagefright", "slug": "stagefright", "era": "2015", "tags": [ "android", "libstagefright", "remote-code-execution", "mobile-security", "mms", "integer-overflow", "zimperium", "cve-2015" ], "summary": "Stagefright was a family of critical remote-code-execution vulnerabilities in Android's libstagefright media library, discovered by Joshua Drake of Zimperium in 2015, that could be triggered by a single malicious MMS message on an estimated 950 million devices.", "url": "vulnerabilities/stagefright.html" }, { "id": "equifax-breach", "type": "attack", "typeLabel": "Attack / Breach", "title": "Equifax Data Breach", "slug": "equifax-breach", "era": "2017", "tags": [ "data-breach", "apache-struts", "cve-2017-5638", "credit-reporting", "critical-infrastructure", "doj-indictment", "china", "privacy" ], "summary": "In 2017, attackers exploited an unpatched Apache Struts vulnerability (CVE-2017-5638) to breach credit-reporting giant Equifax, exposing the personal data of roughly 147 million people and triggering record regulatory fines and a rare DOJ indictment of foreign state hackers.", "url": "attacks/equifax-breach.html" }, { "id": "morris-worm", "type": "attack", "typeLabel": "Attack / Breach", "title": "The Morris Worm: The Internet's First Wake-Up Call", "slug": "morris-worm", "era": "1980s-1990s", "tags": [ "worm", "security", "internet history", "Cornell" ], "summary": "In 1988, a Cornell graduate student unleashed the first major internet worm, accidentally crippling a significant portion of the early internet and leading to the first felony conviction under the Computer Fraud and Abuse Act.", "url": "attacks/morris-worm.html" }, { "id": "notpetya", "type": "attack", "typeLabel": "Attack / Breach", "title": "NotPetya", "slug": "notpetya", "era": "2017", "tags": [ "wiper", "supply-chain-attack", "ransomware-disguise", "ukraine", "russia", "gru", "sandworm", "eternalblue", "destructive-malware", "state-sponsored" ], "summary": "In June 2017, destructive wiper malware disguised as ransomware spread worldwide after attackers compromised the update mechanism of the Ukrainian accounting software M.E.Doc, using EternalBlue and stolen credentials for rapid lateral movement; it caused billions of dollars in damage at firms including Maersk, Merck, and FedEx, and was later attributed by the US, UK, and Australian governments to Russia's GRU military intelligence.", "url": "attacks/notpetya.html" }, { "id": "solarwinds-sunburst", "type": "attack", "typeLabel": "Attack / Breach", "title": "SolarWinds / Sunburst Supply-Chain Attack", "slug": "solarwinds-sunburst", "era": "2020", "tags": [ "supply-chain-attack", "nation-state", "apt29", "cozy-bear", "backdoor", "government-breach", "russia", "fireeye", "mandiant", "sunburst" ], "summary": "Attackers compromised SolarWinds' software build process and inserted the SUNBURST backdoor into Orion network-monitoring updates, a compromise uncovered in December 2020 after FireEye disclosed its own breach, exposing numerous U.S. federal agencies and private companies to Russian government-linked intrusion.", "url": "attacks/solarwinds-sunburst.html" }, { "id": "stuxnet-digital-weapon", "type": "attack", "typeLabel": "Attack / Breach", "title": "Stuxnet: The World's First Digital Weapon", "slug": "stuxnet-digital-weapon", "era": "2010s", "tags": [ "malware", "cyberwarfare", "nation-state", "Stuxnet", "zero-day" ], "summary": "The story of Stuxnet, a sophisticated computer worm that physically destroyed centrifuges in an Iranian nuclear facility, heralding a new era of digital warfare.", "url": "attacks/stuxnet-digital-weapon.html" }, { "id": "defcon-hacker-conference", "type": "event", "typeLabel": "Event", "title": "DEF CON: The World's Most Famous Hacker Con", "slug": "defcon-hacker-conference", "era": "1990s-Present", "tags": [ "defcon", "conference", "culture", "Las Vegas" ], "summary": "From a small gathering organized by Jeff Moss ('The Dark Tangent') to the world's largest and most iconic annual hacker convention in Las Vegas.", "url": "events/defcon-hacker-conference.html" }, { "id": "ekoparty", "type": "event", "typeLabel": "Event", "title": "Ekoparty", "slug": "ekoparty", "era": "2001-Present (disputed founding date; see notes)", "tags": [ "hacking conference", "information security", "Argentina", "Latin America", "CTF", "lockpicking", "wardriving", "community" ], "summary": "Ekoparty is an annual computer security conference held in Buenos Aires, Argentina, widely regarded as one of the most important hacking and information-security gatherings in Latin America, featuring talks, workshops, CTFs, lockpicking, and wardriving.", "url": "events/ekoparty.html" }, { "id": "mit-tmrc-hacker-ethic", "type": "event", "typeLabel": "Event", "title": "The Hacker Ethic: MIT's Tech Model Railroad Club", "slug": "mit-tmrc-hacker-ethic", "era": "1950s-1960s", "tags": [ "MIT", "hacker ethic", "history", "TMRC" ], "summary": "How the term 'hack' and the foundational principles of the hacker ethic emerged from a student club at MIT dedicated to model trains.", "url": "events/mit-tmrc-hacker-ethic.html" }, { "id": "2600-hacker-quarterly", "type": "publication", "typeLabel": "Publication", "title": "2600: The Hacker Quarterly", "slug": "2600-hacker-quarterly", "era": "1980s-Present", "tags": [ "2600", "magazine", "phreaking", "culture", "community" ], "summary": "The history of 2600, the iconic green-covered magazine that has served as a vital source of information and community for the hacker underground for decades.", "url": "publications/2600-hacker-quarterly.html" }, { "id": "bugtraq", "type": "publication", "typeLabel": "Publication", "title": "Bugtraq", "slug": "bugtraq", "era": "1993-2021, revived 2026", "tags": [ "mailing-list", "full-disclosure", "vulnerability-disclosure", "security-research", "hacker-culture", "publication", "securityfocus", "symantec", "1990s" ], "summary": "Bugtraq was the seminal full-disclosure security mailing list, founded in 1993 by Scott Chasin and moderated for years by Elias Levy (Aleph One), that became the de facto public venue for publishing and debating software vulnerabilities before passing through SecurityFocus and Symantec ownership, going dark around 2020-2021, and being reported as independently relaunched in 2026.", "url": "publications/bugtraq.html" }, { "id": "die-datenschleuder", "type": "publication", "typeLabel": "Publication", "title": "Die Datenschleuder", "slug": "die-datenschleuder", "era": "1984-Present", "tags": [ "hacker culture", "chaos computer club", "print magazine", "germany", "hacker journalism", "phreaking", "privacy", "cryptography", "hacktivism", "surveillance" ], "summary": "Die Datenschleuder (\"the data slingshot\") is the irregular German-language print magazine of the Chaos Computer Club, published continuously since 1984 and covering the technical and political dimensions of hacking, privacy, and surveillance.", "url": "publications/die-datenschleuder.html" }, { "id": "full-disclosure-mailing-list", "type": "publication", "typeLabel": "Publication", "title": "Full Disclosure (mailing list)", "slug": "full-disclosure-mailing-list", "era": "2002-2014", "tags": [ "full disclosure movement", "mailing list", "vulnerability disclosure", "bugtraq", "exploit publication", "security community", "John Cartwright", "seclists.org" ], "summary": "Full Disclosure was a public, lightly-moderated security mailing list founded in July 2002 by Len Rose and John Cartwright as an alternative to Bugtraq after Bugtraq's moderation tightened under SecurityFocus/Symantec ownership; Cartwright shut it down in March 2014 citing legal pressure, and it was relaunched days later by Fyodor as a community-run successor.", "url": "publications/full-disclosure-mailing-list.html" }, { "id": "hacker-manifesto-the-mentor", "type": "publication", "typeLabel": "Publication", "title": "The Hacker Manifesto: 'The Conscience of a Hacker'", "slug": "hacker-manifesto-the-mentor", "era": "1980s", "tags": [ "manifesto", "philosophy", "The Mentor", "phrack" ], "summary": "An exploration of the seminal 1986 essay written by Loyd 'The Mentor' Blankenship, which became the philosophical soul of the hacker movement.", "url": "publications/hacker-manifesto-the-mentor.html" }, { "id": "hacking-art-of-exploitation", "type": "publication", "typeLabel": "Publication", "title": "Hacking: The Art of Exploitation", "slug": "hacking-art-of-exploitation", "era": "2003-Present", "tags": [ "book", "exploit development", "education", "buffer overflow", "shellcode" ], "summary": "Hacking: The Art of Exploitation by Jon Erickson is a widely used security education text that teaches exploit development from first principles through C programming and assembly rather than as a catalog of ready-made tools, shipped with a bootable Linux LiveCD for hands-on practice.", "url": "publications/hacking-art-of-exploitation.html" }, { "id": "packet-storm-security", "type": "publication", "typeLabel": "Publication", "title": "Packet Storm Security", "slug": "packet-storm-security", "era": "1998-Present", "tags": [ "exploit-archive", "security-advisories", "full-disclosure", "infosec-tools", "hacker-history", "bug-bounty", "dot-com-era", "vulnerability-database" ], "summary": "Packet Storm Security is a long-running public archive of exploits, security advisories, whitepapers, and hacking tools launched in 1998, which has survived multiple ownership changes, a non-profit relaunch, and a 2020s rebrand to packetstorm.news.", "url": "publications/packet-storm-security.html" }, { "id": "phrack-magazine", "type": "publication", "typeLabel": "Publication", "title": "Phrack Magazine: The Hacker's Ezine", "slug": "phrack-magazine", "era": "1980s-Present", "tags": [ "phrack", "ezine", "hacker group", "technical", "history" ], "summary": "The legacy of Phrack, one of the longest-running and most influential hacker ezines, known for its deep technical articles and philosophical essays.", "url": "publications/phrack-magazine.html" }, { "id": "uninformed", "type": "publication", "typeLabel": "Publication", "title": "Uninformed", "slug": "uninformed", "era": "2005-2008", "tags": [ "exploitation", "reverse-engineering", "vulnerability-research", "windows-internals", "kernel-exploitation", "rootkits", "ezine" ], "summary": "Uninformed (uninformed.org) was a technical journal published from 2005 to 2008 covering exploitation techniques, reverse engineering, and low-level Windows security research, producing 10 volumes and 47 articles before going dormant.", "url": "publications/uninformed.html" }, { "id": "bbs-and-warez-scene", "type": "field", "typeLabel": "Field", "title": "The BBS & Warez Scene", "slug": "bbs-and-warez-scene", "era": "1980s-1990s", "tags": [ "bbs", "demoscene", "warez" ], "summary": "Modems, message boards, ANSI art, and the communities that formed the modern hacker internet.", "url": "fields/bbs-and-warez-scene.html" }, { "id": "hackers-in-film", "type": "field", "typeLabel": "Field", "title": "Hackers in Popular Culture: Film & Documentaries", "slug": "hackers-in-film", "era": "1980s-Present", "tags": [ "film", "culture", "media", "documentary" ], "summary": "How movies and documentaries like WarGames, Hackers, and The Social Network have shaped the public's perception of hacker culture — for better and for worse.", "url": "fields/hackers-in-film.html" }, { "id": "hacktivism-to-bug-bounties", "type": "field", "typeLabel": "Field", "title": "From Hacktivism to Bug Bounties", "slug": "hacktivism-to-bug-bounties", "era": "2000s-Present", "tags": [ "hacktivism", "bug bounty", "security" ], "summary": "Public-interest intrusions, disclosure debates, and the rise of coordinated vulnerability programs.", "url": "fields/hacktivism-to-bug-bounties.html" }, { "id": "phreaking", "type": "field", "typeLabel": "Field", "title": "Early Phone Phreaking", "slug": "phreaking", "era": "1960s-1980s", "tags": [ "phreaking", "telecom", "history" ], "summary": "The roots of hacker culture in the era of analog telephony and tone signaling.", "url": "fields/phreaking.html" }, { "id": "responsible-disclosure", "type": "field", "typeLabel": "Field", "title": "The Philosophy of Responsible Disclosure", "slug": "responsible-disclosure", "era": "1990s-Present", "tags": [ "ethics", "disclosure", "bug bounty", "vulnerability", "philosophy" ], "summary": "An exploration of Responsible Disclosure, the ethical framework guiding how security researchers report vulnerabilities to vendors.", "url": "fields/responsible-disclosure.html" }, { "id": "dan-guido", "type": "person", "typeLabel": "Person", "title": "Dan Guido", "slug": "dan-guido", "era": "2012-Present", "tags": [ "security-research", "trail-of-bits", "empire-hacking", "exploit-intelligence", "mobile-security", "blockchain-security", "defi-security", "ceo" ], "summary": "Dan Guido is a security researcher and CEO of Trail of Bits, the New York cybersecurity firm he co-founded in 2012, known for data-driven exploit/mobile-threat research, co-founding the Empire Hacking meetup, and steering the firm into blockchain and DeFi security auditing.", "url": "people/dan-guido.html" }, { "id": "diffie-hellman", "type": "person", "typeLabel": "Person", "title": "Whitfield Diffie and Martin Hellman", "slug": "diffie-hellman", "era": "1976-Present", "tags": [ "cryptography", "public-key cryptography", "key exchange", "Turing Award", "crypto wars", "NSA", "Stanford", "computer science pioneers" ], "summary": "Whitfield Diffie and Martin Hellman co-authored the 1976 paper \"New Directions in Cryptography,\" introducing public-key cryptography and the Diffie-Hellman key exchange, and jointly received the 2015 ACM A.M. Turing Award for this work.", "url": "people/diffie-hellman.html" }, { "id": "ken-thompson", "type": "person", "typeLabel": "Person", "title": "Ken Thompson", "slug": "ken-thompson", "era": "1969-Present", "tags": [ "Unix", "Bell Labs", "C programming language", "Go programming language", "Turing Award", "compiler security", "computer chess", "operating systems" ], "summary": "Ken Thompson is an American computer scientist who co-created the Unix operating system with Dennis Ritchie at Bell Labs, later co-designed the Go programming language at Google, and authored the seminal 1984 Turing Award lecture \"Reflections on Trusting Trust,\" which exposed how a compiler could be backdoored to insert undetectable trojans into software.", "url": "people/ken-thompson.html" }, { "id": "loic-duflot", "type": "person", "typeLabel": "Person", "title": "Loïc Duflot", "slug": "loic-duflot", "era": "2006-2011 (documented research period)", "tags": [ "System Management Mode", "x86 security", "SMM rootkit", "virtualization escape", "DCSSI", "ANSSI", "France", "CanSecWest", "hardware security", "firmware security" ], "summary": "French security researcher employed by France's DCSSI (later ANSSI) who, from 2006 onward, showed that x86 System Management Mode, ACPI, and PC chipset/firmware features could be abused to bypass operating-system and hypervisor security guarantees, first presenting this work publicly at CanSecWest 2006.", "url": "people/loic-duflot.html" }, { "id": "philip-zimmermann", "type": "person", "typeLabel": "Person", "title": "Philip Zimmermann", "slug": "philip-zimmermann", "era": "1991-Present", "tags": [ "encryption", "PGP", "cryptography", "privacy", "cypherpunks", "export controls", "First Amendment", "computer security" ], "summary": "Philip R. Zimmermann is the American computer scientist who created Pretty Good Privacy (PGP) in 1991, the first widely used public-key email encryption program, and who was the target of a three-year US federal criminal investigation for allegedly exporting munitions without a license after PGP spread internationally.", "url": "people/philip-zimmermann.html" }, { "id": "rsa-rivest-shamir-adleman", "type": "person", "typeLabel": "Person", "title": "Ron Rivest, Adi Shamir, and Leonard Adleman", "slug": "rsa-rivest-shamir-adleman", "era": "1977-Present", "tags": [ "cryptography", "public-key cryptography", "RSA", "Turing Award", "MIT", "computer science", "mathematics" ], "summary": "MIT researchers Ron Rivest, Adi Shamir, and Leonard Adleman publicly described the RSA public-key cryptosystem in 1977-1978, a foundational algorithm for secure communication and digital signatures that earned them the 2002 ACM Turing Award.", "url": "people/rsa-rivest-shamir-adleman.html" }, { "id": "steve-wozniak", "type": "person", "typeLabel": "Person", "title": "Steve Wozniak", "slug": "steve-wozniak", "era": "1970s-Present", "tags": [ "phone phreaking", "blue box", "hardware hacking", "Apple co-founder", "Homebrew Computer Club", "hacker culture" ], "summary": "Steve Wozniak is an electronics engineer who, before co-founding Apple Computer with Steve Jobs, built and sold illegal \"blue box\" devices for phone phreaking in the early 1970s -- an episode both men later credited as a formative step toward Apple's creation.", "url": "people/steve-wozniak.html" }, { "id": "anand-prakash", "type": "person", "typeLabel": "Person", "title": "Anand Prakash", "slug": "anand-prakash", "era": "2010s-Present", "tags": [ "bug bounty", "web security", "account takeover", "cloud security", "CNAPP", "AppSecure", "PingSafe", "India" ], "summary": "Anand Prakash is an Indian bug-bounty researcher and entrepreneur who became one of Facebook's, Twitter's, and Uber's top-ranked vulnerability hunters, then founded the security consultancy AppSecure and co-founded the cloud-security startup PingSafe, acquired by SentinelOne in 2024.", "url": "people/anand-prakash.html" }, { "id": "john-mcafee", "type": "person", "typeLabel": "Person", "title": "John McAfee", "slug": "john-mcafee", "era": "1945-2021", "tags": [ "antivirus", "McAfee Associates", "malware research", "shareware", "United Kingdom", "Libertarian Party" ], "summary": "John McAfee was a British-American computer programmer and businessman who founded McAfee Associates in 1987 and created VirusScan, one of the first commercially marketed antivirus products, before leaving the company in the 1990s and later becoming a controversial public figure through a 2012 fugitive episode connected to a murder investigation in Belize, two Libertarian Party presidential campaigns, and a U.S. tax-evasion prosecution that ended with his death in Spanish custody in 2021.", "url": "people/john-mcafee.html" }, { "id": "katsunari-yoshioka", "type": "person", "typeLabel": "Person", "title": "Katsunari Yoshioka", "slug": "katsunari-yoshioka", "era": "2000s-Present", "tags": [ "IoT security", "honeypots", "malware analysis", "Mirai", "network security", "Japan", "academic research", "botnets" ], "summary": "Katsunari Yoshioka is a professor at Yokohama National University who co-created IoTPOT, an influential honeypot and sandbox system for capturing and analyzing Telnet-based IoT malware that documented the surge of insecure-device botnets preceding and paralleling the emergence of Mirai.", "url": "people/katsunari-yoshioka.html" }, { "id": "phineas-fisher", "type": "person", "typeLabel": "Person", "title": "Phineas Fisher", "slug": "phineas-fisher", "era": "2014-2020", "tags": [ "hacktivism", "anti-surveillance", "surveillance-industry", "spyware", "leaks", "pseudonymous", "2010s" ], "summary": "Phineas Fisher is the pseudonym of an unidentified hacktivist who breached the government-spyware makers Gamma Group/Gamma International (2014) and Hacking Team (2015), publishing hundreds of gigabytes of internal source code, emails, and client lists as an explicit protest against the commercial surveillance industry, and who later claimed a 2016 breach of Turkey's ruling AKP party. Fisher's real identity remains unconfirmed.", "url": "people/phineas-fisher.html" }, { "id": "shalev-hulio", "type": "person", "typeLabel": "Person", "title": "Shalev Hulio", "slug": "shalev-hulio", "era": "2010s-Present", "tags": [ "spyware", "mobile security", "NSO Group", "Pegasus", "surveillance", "Israel", "dual-use technology", "zero-click exploits" ], "summary": "Shalev Hulio is an Israeli entrepreneur and former Israel Defense Forces search-and-rescue officer who co-founded NSO Group in 2010 and led development and commercialization of its Pegasus mobile spyware platform, resigning as CEO in 2022 after international reporting and a US blacklisting over its use against journalists, activists, and officials; he later founded the cybersecurity company Dream Security.", "url": "people/shalev-hulio.html" }, { "id": "simon-choi", "type": "person", "typeLabel": "Person", "title": "Simon Choi", "slug": "simon-choi", "era": "2008-Present", "tags": [ "APT tracking", "nation-state hacking", "North Korea", "Lazarus Group", "Andariel", "malware analysis", "threat intelligence", "South Korea" ], "summary": "Simon Choi is a South Korean malware researcher who founded the volunteer research group IssueMakersLab in 2008 to track North Korean state-linked hacking, worked as a senior researcher at the antivirus firm Hauri, and founded the Cyber Warfare Intelligence Center.", "url": "people/simon-choi.html" }, { "id": "taylor-monahan", "type": "person", "typeLabel": "Person", "title": "Taylor Monahan", "slug": "taylor-monahan", "era": "2010s-Present", "tags": [ "blockchain security", "cryptocurrency", "wallet security", "phishing", "Ethereum", "MyEtherWallet", "MetaMask", "threat intelligence" ], "summary": "Taylor Monahan, known online as \"tayvano,\" co-founded MyEtherWallet in 2015, founded and led MyCrypto from 2018 to 2022, and became one of the most visible investigators of Ethereum wallet hacks and crypto-drain campaigns after joining MetaMask, where she later led security research.", "url": "people/taylor-monahan.html" }, { "id": "troy-hunt", "type": "person", "typeLabel": "Person", "title": "Troy Hunt", "slug": "troy-hunt", "era": "2013-Present", "tags": [ "Have I Been Pwned", "data breach research", "Australia", "Microsoft MVP", "security education", "Pluralsight", "Gold Coast" ], "summary": "Troy Hunt is an Australian web security consultant and educator who created Have I Been Pwned (HIBP) in December 2013, a free breach-notification search service that has grown to index billions of compromised accounts and become a standard reference point for the public, industry, and governments checking exposure in data breaches.", "url": "people/troy-hunt.html" }, { "id": "costin-raiu", "type": "person", "typeLabel": "Person", "title": "Costin Raiu", "slug": "costin-raiu", "era": "1990s-Present", "tags": [ "threat intelligence", "APT research", "malware analysis", "Kaspersky", "GReAT", "Stuxnet", "Duqu", "Equation Group", "Carbanak", "Lazarus", "Romania" ], "summary": "Costin Raiu is a Romanian malware researcher who led Kaspersky's Global Research and Analysis Team (GReAT) from 2010 to 2023, directing landmark investigations into Stuxnet, Duqu, the Equation Group, Moonlight Maze, Carbanak, and Lazarus/BlueNoroff.", "url": "people/costin-raiu.html" }, { "id": "dmitri-alperovitch", "type": "person", "typeLabel": "Person", "title": "Dmitri Alperovitch", "slug": "dmitri-alperovitch", "era": "2000s-Present", "tags": [ "threat intelligence", "APT attribution", "nation-state hacking", "Operation Aurora", "Shady RAT", "DNC breach", "CrowdStrike", "cybersecurity policy" ], "summary": "Dmitri Alperovitch is a threat-intelligence researcher and entrepreneur who co-founded CrowdStrike, led investigations into Operation Aurora, Night Dragon, and Shady RAT, and headed the team that attributed the 2016 Democratic National Committee breach to Russian intelligence services.", "url": "people/dmitri-alperovitch.html" }, { "id": "gil-shwed", "type": "person", "typeLabel": "Person", "title": "Gil Shwed", "slug": "gil-shwed", "era": "1990s-Present", "tags": [ "firewall", "stateful inspection", "network security", "Check Point", "Unit 8200", "Israel", "cybersecurity industry" ], "summary": "Gil Shwed is an Israeli entrepreneur who invented and patented stateful inspection, co-founded Check Point Software Technologies in 1993 with Shlomo Kramer and Marius Nacht, and led the company as CEO for three decades before becoming its executive chairman.", "url": "people/gil-shwed.html" }, { "id": "aaron-portnoy", "type": "person", "typeLabel": "Person", "title": "Aaron Portnoy", "slug": "aaron-portnoy", "era": "2000s-Present", "tags": [ "vulnerability research", "bug bounty", "zero-day", "reverse engineering", "exploit development", "pwn2own", "vulnerability market" ], "summary": "Aaron Portnoy is an American security researcher who led TippingPoint's Zero Day Initiative (ZDI) bug-bounty program and directed the first several Pwn2Own hacking competitions, before co-founding the commercial zero-day research firm Exodus Intelligence in 2012.", "url": "people/aaron-portnoy.html" }, { "id": "aaron-swartz", "type": "person", "typeLabel": "Person", "title": "Aaron Swartz", "slug": "aaron-swartz", "era": "2000s-2010s", "tags": [ "programmer", "activist", "rss", "reddit", "open-access", "cfaa", "creative-commons", "internet-freedom" ], "summary": "Aaron Swartz (1986-2013) was an American computer programmer and internet activist who helped develop RSS and co-founded Reddit, later becoming a leading advocate for open access to information before dying by suicide while facing federal prosecution under the Computer Fraud and Abuse Act.", "url": "people/aaron-swartz.html" }, { "id": "albert-gonzalez", "type": "person", "typeLabel": "Person", "title": "Albert Gonzalez", "slug": "albert-gonzalez", "era": "2000s-2010s", "tags": [ "carding", "credit card fraud", "sql injection", "shadowcrew", "secret service informant", "data breach", "identity theft" ], "summary": "Albert Gonzalez is an American computer hacker and former Secret Service informant who masterminded a series of credit and debit card theft rings, including the breaches of TJX Companies and Heartland Payment Systems, that together compromised more than 170 million card accounts. He was sentenced in March 2010 to a total of 20 years in federal prison.", "url": "people/albert-gonzalez.html" }, { "id": "alex-ionescu", "type": "person", "typeLabel": "Person", "title": "Alex Ionescu", "slug": "alex-ionescu", "era": "2000s-Present", "tags": [ "windows internals", "kernel research", "reactos", "reverse engineering", "meltdown", "spectre", "crowdstrike", "author" ], "summary": "Alex Ionescu is a Romanian-Canadian security researcher and low-level systems programmer best known as a co-author of the Windows Internals book series, as the former lead kernel developer of the ReactOS project, and for his early public research into the Meltdown/Spectre CPU vulnerabilities.", "url": "people/alex-ionescu.html" }, { "id": "amichai-shulman", "type": "person", "typeLabel": "Person", "title": "Amichai Shulman", "slug": "amichai-shulman", "era": "2000s-Present", "tags": [ "application security", "database security", "sql injection", "web application firewall", "imperva", "israel", "security research" ], "summary": "Amichai Shulman is an Israeli computer security researcher and entrepreneur, best known as co-founder and longtime chief technology officer of Imperva, a data and application security company he helped found in 2002.", "url": "people/amichai-shulman.html" }, { "id": "andy-greenberg", "type": "person", "typeLabel": "Person", "title": "Andy Greenberg", "slug": "andy-greenberg", "era": "2000s-Present", "tags": [ "journalist", "wired", "cybersecurity", "sandworm", "notpetya", "cyberwar", "author", "cryptocurrency" ], "summary": "Andy Greenberg is a senior writer at Wired magazine covering cybersecurity, privacy, and hacker culture, and the author of Sandworm, an investigation into Russian state-linked hacking group Sandworm and the 2017 NotPetya cyberattack.", "url": "people/andy-greenberg.html" }, { "id": "barrett-lyon", "type": "person", "typeLabel": "Person", "title": "Barrett Lyon", "slug": "barrett-lyon", "era": "2000s-Present", "tags": [ "ddos mitigation", "prolexic", "network security", "internet infrastructure", "cybercrime investigation", "content delivery networks", "entrepreneur" ], "summary": "Barrett Lyon is an American Internet entrepreneur and security researcher best known for founding Prolexic Technologies, one of the first companies to offer large-scale commercial DDoS mitigation services, and for helping law enforcement identify a Russian extortion gang that used denial-of-service attacks against online businesses.", "url": "people/barrett-lyon.html" }, { "id": "ben-hawkes", "type": "person", "typeLabel": "Person", "title": "Ben Hawkes", "slug": "ben-hawkes", "era": "2000s-Present", "tags": [ "project zero", "google", "vulnerability research", "new zealand", "memory corruption", "ios security", "exploit mitigation" ], "summary": "Ben Hawkes is a New Zealand computer security researcher who was a founding member of Google's Project Zero team in 2014 and later served as its manager until his resignation in May 2022.", "url": "people/ben-hawkes.html" }, { "id": "ben-laurie", "type": "person", "typeLabel": "Person", "title": "Ben Laurie", "slug": "ben-laurie", "era": "1990s-Present", "tags": [ "cryptography", "ssl-tls", "open-source", "openssl", "apache", "certificate-transparency", "google", "internet-security" ], "summary": "Ben Laurie is an English software engineer and cryptographer known for writing Apache-SSL, one of the earliest SSL implementations for the Apache HTTP Server, and for later co-creating Certificate Transparency at Google.", "url": "people/ben-laurie.html" }, { "id": "brian-martin-jericho", "type": "person", "typeLabel": "Person", "title": "Brian Martin", "slug": "brian-martin-jericho", "era": "1990s-Present", "tags": [ "attrition.org", "vulnerability disclosure", "data breach tracking", "osvdb", "cve", "security research", "hacktivism history" ], "summary": "Brian Martin, widely known by the handle \"Jericho,\" is a security researcher and former hacker best known as the longtime operator of attrition.org and as a co-founder of the Open Source Vulnerability Database (OSVDB) and DatalossDB.", "url": "people/brian-martin-jericho.html" }, { "id": "bruce-potter", "type": "person", "typeLabel": "Person", "title": "Bruce Potter", "slug": "bruce-potter", "era": "1990s-Present", "tags": [ "shmoo group", "shmoocon", "ciso", "wireless security", "conference founder", "author" ], "summary": "Bruce Potter is an American computer security researcher who founded The Shmoo Group, a collective of security, cryptography, and privacy professionals, and co-founded the ShmooCon hacker convention held annually in Washington, D.C. from 2005 to 2025.", "url": "people/bruce-potter.html" }, { "id": "chelsea-manning", "type": "person", "typeLabel": "Person", "title": "Chelsea Manning", "slug": "chelsea-manning", "era": "2000s-Present", "tags": [ "whistleblower", "wikileaks", "military-intelligence", "espionage-act", "activist", "transgender-rights", "government-secrecy" ], "summary": "Chelsea Manning is a former United States Army intelligence analyst who, in 2010, disclosed hundreds of thousands of classified military and diplomatic documents to WikiLeaks, resulting in a court-martial conviction and a 35-year prison sentence that was later commuted by President Barack Obama.", "url": "people/chelsea-manning.html" }, { "id": "chris-evans-project-zero", "type": "person", "typeLabel": "Person", "title": "Chris Evans", "slug": "chris-evans-project-zero", "era": "2000s-Present", "tags": [ "project zero", "google", "chrome security", "vulnerability research", "bug bounty", "vsftpd", "hackerone" ], "summary": "Chris Evans is a British computer security researcher who created the vsftpd FTP server, led Google's Chrome security team and its Chromium Vulnerability Reward Program, and in 2014 founded Google Project Zero, a team dedicated to finding zero-day vulnerabilities across all software.", "url": "people/chris-evans-project-zero.html" }, { "id": "chris-hadnagy", "type": "person", "typeLabel": "Person", "title": "Christopher James Hadnagy", "slug": "chris-hadnagy", "era": "2000s-Present", "tags": [ "social engineering", "phishing", "def con", "security training", "author", "penetration testing", "human hacking" ], "summary": "Christopher Hadnagy is an American information security consultant known for popularizing social engineering as a formal discipline within cybersecurity, founding the DEF CON Social Engineering Capture the Flag contest, and authoring several widely referenced books on the subject.", "url": "people/chris-hadnagy.html" }, { "id": "cris-thomas-space-rogue", "type": "person", "typeLabel": "Person", "title": "Cris Thomas", "slug": "cris-thomas-space-rogue", "era": "1990s-Present", "tags": [ "l0pht", "space-rogue", "senate-testimony", "vulnerability-disclosure", "atstake", "hacker-news-network", "white-hat", "infosec-history" ], "summary": "Cris Thomas, known by the handle Space Rogue, is an American security researcher and a founding member of the hacker think tank L0pht Heavy Industries, best known for testifying before the US Senate in 1998 and for later work at @stake, Trustwave, Tenable, and IBM X-Force Red.", "url": "people/cris-thomas-space-rogue.html" }, { "id": "dan-farmer", "type": "person", "typeLabel": "Person", "title": "Dan Farmer", "slug": "dan-farmer", "era": "1990s-2000s", "tags": [ "network security", "vulnerability scanners", "SATAN", "computer forensics", "unix security", "coroner's toolkit", "COPS" ], "summary": "Dan Farmer is an American computer security researcher and programmer known for co-creating the COPS and SATAN vulnerability scanners and, with Wietse Venema, The Coroner's Toolkit for post-incident digital forensics on Unix systems.", "url": "people/dan-farmer.html" }, { "id": "daniel-j-bernstein", "type": "person", "typeLabel": "Person", "title": "Daniel J. Bernstein", "slug": "daniel-j-bernstein", "era": "1990s-Present", "tags": [ "cryptography", "software security", "export controls", "first amendment", "qmail", "djbdns", "elliptic curve cryptography", "post-quantum cryptography" ], "summary": "Daniel J. Bernstein is an American mathematician, cryptologist, and computer scientist known for creating security-focused software such as qmail and djbdns, and for foundational cryptographic designs including Curve25519, Salsa20/ChaCha20, and Poly1305. He was the plaintiff in Bernstein v. United States, a landmark First Amendment case that established source code as protected speech and helped dismantle U.S. cryptography export controls.", "url": "people/daniel-j-bernstein.html" }, { "id": "david-l-smith-melissa", "type": "person", "typeLabel": "Person", "title": "David L. Smith", "slug": "david-l-smith-melissa", "era": "1990s", "tags": [ "malware", "email worm", "macro virus", "cybercrime", "1990s", "computer fraud", "microsoft word" ], "summary": "David L. Smith is a former New Jersey computer programmer who admitted to creating and releasing the Melissa virus in March 1999, a fast-spreading Microsoft Word macro virus that overwhelmed email systems worldwide and caused an estimated $80 million in damage.", "url": "people/david-l-smith-melissa.html" }, { "id": "eugene-kaspersky", "type": "person", "typeLabel": "Person", "title": "Eugene Kaspersky", "slug": "eugene-kaspersky", "era": "1990s-Present", "tags": [ "antivirus", "kaspersky lab", "malware research", "russia", "cybersecurity industry", "stuxnet", "geopolitics" ], "summary": "Eugene Kaspersky is a Russian cybersecurity entrepreneur who co-founded Kaspersky Lab in 1997 and has served as its CEO since 2007, building it from a small antivirus shop into one of the world's largest cybersecurity vendors.", "url": "people/eugene-kaspersky.html" }, { "id": "gary-mckinnon", "type": "person", "typeLabel": "Person", "title": "Gary McKinnon", "slug": "gary-mckinnon", "era": "2000s-2010s", "tags": [ "hacking", "military", "nasa", "extradition", "ufo", "uk", "cybercrime", "asperger's" ], "summary": "Gary McKinnon is a Scottish computer systems administrator who, using the online alias \"Solo,\" gained unauthorized access to 97 United States military and NASA computers between February 2001 and March 2002, and who subsequently fought a decade-long legal battle against extradition to the United States.", "url": "people/gary-mckinnon.html" }, { "id": "gerardo-richarte", "type": "person", "typeLabel": "Person", "title": "Gerardo Richarte", "slug": "gerardo-richarte", "era": "1990s-Present", "tags": [ "exploit development", "reverse engineering", "core security", "argentina", "shellcoding", "penetration testing", "satellogic" ], "summary": "Gerardo \"Gera\" Richarte is an Argentine security researcher and exploit developer who co-founded Core Security Technologies in 1996 and later co-founded the satellite company Satellogic, becoming one of the best-known figures in Argentina's cybersecurity scene.", "url": "people/gerardo-richarte.html" }, { "id": "graham-cluley", "type": "person", "typeLabel": "Person", "title": "Graham Cluley", "slug": "graham-cluley", "era": "1990s-Present", "tags": [ "security researcher", "blogger", "podcaster", "antivirus", "sophos", "public speaker", "malware analysis" ], "summary": "Graham Cluley is a British computer security researcher, blogger, and public speaker who spent over a decade as a senior technology consultant at Sophos and now runs the independent security blog grahamcluley.com and co-hosts the award-winning Smashing Security podcast.", "url": "people/graham-cluley.html" }, { "id": "greg-hoglund", "type": "person", "typeLabel": "Person", "title": "Greg Hoglund", "slug": "greg-hoglund", "era": "1990s-Present", "tags": [ "rootkits", "malware research", "windows kernel", "hbgary", "software exploitation", "anonymous hack", "reverse engineering" ], "summary": "Greg Hoglund (born Michael Gregory Hoglund) is an American computer security researcher and entrepreneur known for pioneering Windows rootkit research, co-authoring \"Rootkits: Subverting the Windows Kernel,\" and founding the security firm HBGary.", "url": "people/greg-hoglund.html" }, { "id": "guang-gong", "type": "person", "typeLabel": "Person", "title": "Guang Gong", "slug": "guang-gong", "era": "2010s-Present", "tags": [ "android security", "exploit development", "qihoo 360", "bug bounty", "china", "mobile security", "chrome exploitation", "black hat speaker" ], "summary": "Guang Gong is a Chinese security researcher and the lead of the Alpha Team (Alpha Lab) at Qihoo 360's Internet Security Center, known for record-setting Android and Chrome exploit chains submitted to Google's vulnerability reward programs.", "url": "people/guang-gong.html" }, { "id": "hector-monsegur", "type": "person", "typeLabel": "Person", "title": "Hector Monsegur", "slug": "hector-monsegur", "era": "2010s-Present", "tags": [ "lulzsec", "anonymous", "fbi informant", "hacktivism", "sabu", "computer crime", "antisec" ], "summary": "Hector Xavier Monsegur, known online as \"Sabu,\" was a founding member of the hacking group LulzSec who became a cooperating FBI informant after his June 2011 arrest, an arrangement that led to the identification and prosecution of several other LulzSec and Anonymous-affiliated hackers.", "url": "people/hector-monsegur.html" }, { "id": "ian-beer", "type": "person", "typeLabel": "Person", "title": "Ian Beer", "slug": "ian-beer", "era": "2010s-Present", "tags": [ "ios security", "project zero", "vulnerability research", "kernel exploitation", "apple", "zero-click exploits", "mobile security" ], "summary": "Ian Beer is a British security researcher on Google's Project Zero team, widely regarded as one of the most accomplished iOS vulnerability researchers, known for discovering and publicly detailing dozens of critical remote and zero-click exploits against Apple's operating systems.", "url": "people/ian-beer.html" }, { "id": "ivan-arce", "type": "person", "typeLabel": "Person", "title": "Ivan Arce", "slug": "ivan-arce", "era": "1990s-Present", "tags": [ "core security", "argentina", "penetration testing", "exploit development", "latin america", "core impact", "quarkslab" ], "summary": "Ivan Arce is an Argentine security researcher who co-founded Core Security Technologies in Buenos Aires in 1996 and served as its Chief Technology Officer, later becoming Chief Research Officer and CTO at the French security firm Quarkslab.", "url": "people/ivan-arce.html" }, { "id": "jake-davis-topiary", "type": "person", "typeLabel": "Person", "title": "Jake Davis", "slug": "jake-davis-topiary", "era": "2010s-Present", "tags": [ "lulzsec", "anonymous", "hacktivism", "ddos", "uk", "security-research", "bug-bounty" ], "summary": "Jake Davis, known online as Topiary, is a British hacktivist who served as the public spokesman and Twitter operator for the hacking group LulzSec before his arrest in the Shetland Islands in July 2011.", "url": "people/jake-davis-topiary.html" }, { "id": "jayson-e-street", "type": "person", "typeLabel": "Person", "title": "Jayson E. Street", "slug": "jayson-e-street", "era": "2000s-Present", "tags": [ "physical penetration testing", "social engineering", "security awareness", "red team", "bank security", "author", "public speaker" ], "summary": "Jayson E. Street is an American security consultant and self-described \"hacker, helper, and human\" known for physical penetration testing of banks, government buildings, and other secured facilities, and for advocating an education-focused approach to red team engagements.", "url": "people/jayson-e-street.html" }, { "id": "jeremy-hammond", "type": "person", "typeLabel": "Person", "title": "Jeremy Hammond", "slug": "jeremy-hammond", "era": "2000s-Present", "tags": [ "hacktivist", "anonymous", "antisec", "lulzsec", "stratfor", "cfaa", "wikileaks", "anarchist" ], "summary": "Jeremy Hammond is an American computer hacker and anarchist activist from Chicago who founded the security site HackThisSite and later, working with Anonymous-affiliated hackers under the AntiSec banner, breached the private intelligence firm Stratfor in 2011, leaking millions of internal emails to WikiLeaks; he was sentenced in 2013 to the maximum 10 years in federal prison under the Computer Fraud and Abuse Act.", "url": "people/jeremy-hammond.html" }, { "id": "joe-grand-kingpin", "type": "person", "typeLabel": "Person", "title": "Joe Grand", "slug": "joe-grand-kingpin", "era": "1990s-Present", "tags": [ "hardware hacking", "l0pht", "congressional testimony", "reverse engineering", "cryptocurrency recovery", "television host", "electrical engineering" ], "summary": "Joe Grand, known by the handle Kingpin, is an American electrical engineer and hardware hacker who was a member of the Boston-based hacker collective L0pht Heavy Industries and later became a professional hardware security consultant, author, and television host.", "url": "people/joe-grand-kingpin.html" }, { "id": "johnny-long", "type": "person", "typeLabel": "Person", "title": "Johnny Long", "slug": "johnny-long", "era": "2000s-Present", "tags": [ "google hacking", "ghdb", "penetration testing", "osint", "author", "def con", "hackers for charity", "nonprofit" ], "summary": "Johnny Long is an American security researcher and author who popularized \"Google hacking\" and created the Google Hacking Database (GHDB), later founding the nonprofit Hackers for Charity.", "url": "people/johnny-long.html" }, { "id": "kim-zetter", "type": "person", "typeLabel": "Person", "title": "Kim Zetter", "slug": "kim-zetter", "era": "2000s-Present", "tags": [ "journalist", "cybersecurity", "stuxnet", "wired", "investigative-reporting", "nsa-surveillance", "election-security", "author" ], "summary": "Kim Zetter is an American investigative journalist who has covered cybersecurity, hacking, and national security since 1999, best known as a longtime Wired senior reporter and as the author of \"Countdown to Zero Day,\" a definitive account of the Stuxnet cyberweapon.", "url": "people/kim-zetter.html" }, { "id": "lauri-love", "type": "person", "typeLabel": "Person", "title": "Lauri Love", "slug": "lauri-love", "era": "2010s-Present", "tags": [ "hacktivism", "extradition", "anonymous", "government-hacking", "encryption-rights", "uk-law", "activism" ], "summary": "Lauri Love is a British-Finnish computer activist who was accused by United States authorities of hacking into US government computer systems, including the Army, NASA, the Federal Reserve, and the Missile Defense Agency, during 2012-2013, and who won a landmark 2018 UK High Court appeal blocking his extradition to the US.", "url": "people/lauri-love.html" }, { "id": "liang-chen-keen", "type": "person", "typeLabel": "Person", "title": "Liang Chen", "slug": "liang-chen-keen", "era": "2010s-Present", "tags": [ "pwn2own", "browser exploitation", "sandbox escape", "keen lab", "tencent", "ios jailbreak", "china", "vulnerability research" ], "summary": "Liang Chen is a Chinese security researcher and co-founder of Tencent Keen Security Lab (formerly Keen Team), known for leading its browser and mobile exploitation research and for repeated wins at Pwn2Own and Mobile Pwn2Own competitions.", "url": "people/liang-chen-keen.html" }, { "id": "marco-grassi", "type": "person", "typeLabel": "Person", "title": "Marco Grassi", "slug": "marco-grassi", "era": "2010s-Present", "tags": [ "ios", "macos", "android", "baseband", "pwn2own", "keen-lab", "mobile-security", "vulnerability-research" ], "summary": "Marco Grassi is a security researcher known for mobile and desktop operating-system vulnerability research, including work at NowSecure and Tencent Keen Security Lab (Keen Team), and for repeated wins at the Pwn2Own hacking competition.", "url": "people/marco-grassi.html" }, { "id": "mark-dowd", "type": "person", "typeLabel": "Person", "title": "Mark Dowd", "slug": "mark-dowd", "era": "2000s-Present", "tags": [ "vulnerability research", "exploit development", "ios security", "browser security", "azimuth security", "software security assessment", "australia" ], "summary": "Mark Dowd is an Australian application-security researcher and exploit developer, formerly a senior researcher at IBM's Internet Security Systems (ISS) X-Force, and co-founder of the boutique vulnerability-research firm Azimuth Security.", "url": "people/mark-dowd.html" }, { "id": "mark-loveless-simple-nomad", "type": "person", "typeLabel": "Person", "title": "Mark Loveless", "slug": "mark-loveless-simple-nomad", "era": "1990s-Present", "tags": [ "hacker", "security researcher", "nmrc", "bindview", "defcon", "black hat", "duo security", "conference speaker" ], "summary": "Mark Loveless, widely known by the handle \"Simple Nomad,\" is an American security researcher and longtime hacker-conference speaker who founded the Nomad Mobile Research Centre (NMRC) and later led vulnerability research for BindView's Razor team.", "url": "people/mark-loveless-simple-nomad.html" }, { "id": "mark-russinovich", "type": "person", "typeLabel": "Person", "title": "Mark Russinovich", "slug": "mark-russinovich", "era": "1990s-Present", "tags": [ "sysinternals", "windows-internals", "rootkits", "sony-bmg", "microsoft-azure", "security-research", "author" ], "summary": "Mark Russinovich is a Spanish-born American software engineer, security researcher, and author who co-created the Sysinternals suite of Windows utilities and, in 2005, publicly exposed the Sony BMG copy-protection rootkit. He is currently the Chief Technology Officer of Microsoft Azure.", "url": "people/mark-russinovich.html" }, { "id": "markus-kuhn", "type": "person", "typeLabel": "Person", "title": "Markus Kuhn", "slug": "markus-kuhn", "era": "1990s-Present", "tags": [ "tempest", "compromising-emanations", "side-channel", "cryptography", "unicode-utf8", "hardware-security", "academic-research", "smartcard-security" ], "summary": "Markus Kuhn is a German-born computer scientist and Associate Professor at the University of Cambridge Department of Computer Science and Technology, known for foundational research on compromising emanations (TEMPEST-style electromagnetic eavesdropping), hardware tamper resistance, and multimedia/digital watermarking security.", "url": "people/markus-kuhn.html" }, { "id": "matt-blaze", "type": "person", "typeLabel": "Person", "title": "Matt Blaze", "slug": "matt-blaze", "era": "1990s-Present", "tags": [ "cryptography", "clipper chip", "key escrow", "wiretapping", "surveillance", "voting security", "lock picking", "academic security research" ], "summary": "Matt Blaze is an American cryptographer and computer scientist known for discovering a critical 1994 protocol flaw in the U.S. government's Clipper Chip key-escrow system, and for subsequent research on wiretapping, electronic voting security, and mechanical lock security.", "url": "people/matt-blaze.html" }, { "id": "matt-suiche", "type": "person", "typeLabel": "Person", "title": "Matt Suiche", "slug": "matt-suiche", "era": "2000s-Present", "tags": [ "memory forensics", "incident response", "shadow brokers", "reverse engineering", "windows internals", "digital forensics", "france" ], "summary": "Matt Suiche (Matthieu Suiche) is a French security researcher and entrepreneur known for his work in memory forensics, founder of MoonSols and Comae Technologies, and for his early public analysis of The Shadow Brokers leaks.", "url": "people/matt-suiche.html" }, { "id": "max-vision-iceman", "type": "person", "typeLabel": "Person", "title": "Max Vision", "slug": "max-vision-iceman", "era": "1990s-2010s", "tags": [ "carding", "cybercrime", "whitehat-to-blackhat", "cardersmarket", "intrusion-detection", "wire-fraud", "fbi-informant" ], "summary": "Max Vision (born Max Ray Butler) is an American former computer security consultant turned cybercriminal who, under the alias \"Iceman,\" built and operated the CardersMarket carding forum before being sentenced to 13 years in federal prison for wire fraud.", "url": "people/max-vision-iceman.html" }, { "id": "michael-calce-mafiaboy", "type": "person", "typeLabel": "Person", "title": "Michael Calce", "slug": "michael-calce-mafiaboy", "era": "2000s-Present", "tags": [ "ddos", "mafiaboy", "canada", "1990s-2000s hacking", "juvenile hacker", "internet security", "botnet" ], "summary": "Michael Demon Calce, known online as MafiaBoy, is a Canadian security consultant and former computer hacker who, at age 15 in February 2000, launched a series of distributed denial-of-service (DDoS) attacks that knocked Yahoo!, eBay, Amazon, CNN, Dell, E*TRADE, and other major websites offline.", "url": "people/michael-calce-mafiaboy.html" }, { "id": "mustafa-al-bassam", "type": "person", "typeLabel": "Person", "title": "Mustafa Al-Bassam", "slug": "mustafa-al-bassam", "era": "2010s-Present", "tags": [ "lulzsec", "hacktivism", "blockchain", "distributed-systems", "computer-misuse-act", "researcher", "cryptography" ], "summary": "Mustafa Al-Bassam is an Iraqi-British computer security researcher who, as a teenager under the alias \"tflow\", was one of six core members of the hacktivist group LulzSec in 2011; he later became an academic and entrepreneur working on blockchain scalability, co-founding Chainspace and Celestia.", "url": "people/mustafa-al-bassam.html" }, { "id": "nadav-zafrir", "type": "person", "typeLabel": "Person", "title": "Nadav Zafrir", "slug": "nadav-zafrir", "era": "2000s-Present", "tags": [ "unit 8200", "israel", "signals intelligence", "cyber command", "venture building", "team8", "check point", "military intelligence" ], "summary": "Nadav Zafrir is a retired Israeli brigadier general who served as commander of Unit 8200, the Israel Defense Forces' signals-intelligence and cyber unit, before co-founding the cybersecurity venture-building firm Team8 in 2014 and later becoming CEO of Check Point Software Technologies in 2024.", "url": "people/nadav-zafrir.html" }, { "id": "neel-mehta", "type": "person", "typeLabel": "Person", "title": "Neel Mehta", "slug": "neel-mehta", "era": "2010s-Present", "tags": [ "heartbleed", "google", "vulnerability-research", "malware-attribution", "wannacry", "lazarus-group", "openssl" ], "summary": "Neel Mehta is a security researcher on Google's security team credited as a co-discoverer of the Heartbleed vulnerability in OpenSSL in 2014, and in 2017 he identified code overlaps between an early WannaCry sample and malware attributed to the Lazarus Group, the first widely cited technical clue linking WannaCry to North Korea.", "url": "people/neel-mehta.html" }, { "id": "nicole-perlroth", "type": "person", "typeLabel": "Person", "title": "Nicole Perlroth", "slug": "nicole-perlroth", "era": "2000s-Present", "tags": [ "journalism", "cybersecurity", "zero-day market", "nation-state hacking", "author", "new york times", "cyberwarfare" ], "summary": "Nicole Perlroth is an American journalist who spent roughly a decade as the lead cybersecurity, digital espionage, and sabotage reporter for The New York Times, and is the author of the 2021 book \"This Is How They Tell Me the World Ends: The Cyberweapons Arms Race.\"", "url": "people/nicole-perlroth.html" }, { "id": "nir-zuk", "type": "person", "typeLabel": "Person", "title": "Nir Zuk", "slug": "nir-zuk", "era": "1990s-Present", "tags": [ "firewall", "network security", "check point", "netscreen", "palo alto networks", "intrusion prevention", "israel", "unit 8200" ], "summary": "Nir Zuk is an Israeli-American security engineer and entrepreneur who helped develop early stateful-inspection firewall technology at Check Point in the 1990s and later founded Palo Alto Networks in 2005, where he pioneered the next-generation firewall concept as the company's CTO.", "url": "people/nir-zuk.html" }, { "id": "onel-de-guzman", "type": "person", "typeLabel": "Person", "title": "Onel de Guzman", "slug": "onel-de-guzman", "era": "2000s-Present", "tags": [ "malware", "computer-worm", "iloveyou", "philippines", "cybercrime", "social-engineering", "2000s" ], "summary": "Onel de Guzman is a Filipino former computer science student who, in 2000, wrote and released the ILOVEYOU worm, which spread to tens of millions of computers worldwide within days and became one of the most damaging malware outbreaks in history.", "url": "people/onel-de-guzman.html" }, { "id": "parisa-tabriz", "type": "person", "typeLabel": "Person", "title": "Parisa Tabriz", "slug": "parisa-tabriz", "era": "2000s-Present", "tags": [ "chrome", "browser-security", "https", "google", "project-zero", "vulnerability-research", "bug-bounty", "diversity-in-security" ], "summary": "Parisa Tabriz is an American computer security engineer and executive at Google, widely known by her self-adopted title \"Security Princess,\" who rose from a security engineering role in 2007 to Vice President and General Manager of Google Chrome.", "url": "people/parisa-tabriz.html" }, { "id": "paul-kocher", "type": "person", "typeLabel": "Person", "title": "Paul Kocher", "slug": "paul-kocher", "era": "1990s-Present", "tags": [ "cryptography", "side-channel-attacks", "timing-attack", "power-analysis", "spectre", "ssl-tls", "hardware-security" ], "summary": "Paul Kocher is an American cryptographer who founded Cryptography Research, Inc. and is best known for discovering timing attacks and (with colleagues) differential power analysis, two foundational side-channel attack techniques, as well as for co-discovering the Spectre CPU vulnerability in 2017-2018.", "url": "people/paul-kocher.html" }, { "id": "pedram-amini", "type": "person", "typeLabel": "Person", "title": "Pedram Amini", "slug": "pedram-amini", "era": "2000s-Present", "tags": [ "fuzzing", "vulnerability research", "bug bounty", "reverse engineering", "zero day initiative", "malware research", "security tools" ], "summary": "Pedram Amini is a computer security researcher known for co-founding the Zero Day Initiative bug bounty program at TippingPoint and for creating the Sulley fuzzing framework and the PaiMei reverse-engineering framework.", "url": "people/pedram-amini.html" }, { "id": "peter-szor", "type": "person", "typeLabel": "Person", "title": "Peter Szor", "slug": "peter-szor", "era": "1990s-2010s", "tags": [ "antivirus", "malware research", "computer viruses", "symantec", "mcafee", "hungary", "security research" ], "summary": "Peter Szor (Hungarian: Peter Szor) was a Hungarian-American computer virus and antivirus researcher, entrepreneur, and author, best known for his book The Art of Computer Virus Research and Defense and for his long career designing antivirus detection technology at Symantec and, later, McAfee.", "url": "people/peter-szor.html" }, { "id": "rafal-wojtczuk", "type": "person", "typeLabel": "Person", "title": "Rafal Wojtczuk", "slug": "rafal-wojtczuk", "era": "1990s-Present", "tags": [ "virtualization security", "xen", "hypervisor escape", "exploit development", "kernel security", "invisible things lab", "bromium", "poland" ], "summary": "Rafal Wojtczuk is a Polish computer security researcher known for pioneering work on Xen hypervisor and virtualization-escape vulnerabilities, and for earlier foundational research on Linux/BSD kernel exploitation and buffer-overflow exploitation techniques.", "url": "people/rafal-wojtczuk.html" }, { "id": "rop-gonggrijp", "type": "person", "typeLabel": "Person", "title": "Rop Gonggrijp", "slug": "rop-gonggrijp", "era": "1980s-Present", "tags": [ "hacker", "netherlands", "isp", "hacktic", "xs4all", "e-voting", "wikileaks", "activism" ], "summary": "Rop Gonggrijp (born Robbert Valentijn Gonggrijp) is a Dutch hacker and entrepreneur who founded the hacker magazine Hack-Tic in 1989 and co-founded the Dutch internet provider XS4ALL in 1993. He later became known for exposing security flaws in electronic voting machines used in Dutch elections and for assisting WikiLeaks with the 2010 'Collateral Murder' video release.", "url": "people/rop-gonggrijp.html" }, { "id": "sergei-skorobogatov", "type": "person", "typeLabel": "Person", "title": "Sergei Skorobogatov", "slug": "sergei-skorobogatov", "era": "2000s-Present", "tags": [ "hardware security", "fault injection", "side-channel analysis", "chip backdoors", "fpga", "smart cards", "cambridge", "forensic data recovery" ], "summary": "Sergei Skorobogatov is a Russian-born hardware security researcher based at the University of Cambridge Computer Laboratory, known for pioneering optical fault-injection attacks on secure microcontrollers and for the 2012 discovery of a hidden backdoor in a military-grade Actel/Microsemi ProASIC3 FPGA.", "url": "people/sergei-skorobogatov.html" }, { "id": "sergey-ulasen", "type": "person", "typeLabel": "Person", "title": "Sergey Ulasen", "slug": "sergey-ulasen", "era": "2000s-Present", "tags": [ "stuxnet", "malware-analysis", "virusblokada", "kaspersky", "belarus", "ics-security", "rootkit-discovery" ], "summary": "Sergey Ulasen is a Belarusian malware analyst who, while working at the Minsk-based antivirus firm VirusBlokAda, led the team that first identified the Stuxnet worm in June 2010, a discovery that exposed the world's first publicly documented cyberweapon aimed at industrial control systems.", "url": "people/sergey-ulasen.html" }, { "id": "shlomo-kramer", "type": "person", "typeLabel": "Person", "title": "Shlomo Kramer", "slug": "shlomo-kramer", "era": "1990s-Present", "tags": [ "firewall", "cybersecurity entrepreneur", "check point", "imperva", "cato networks", "unit 8200", "israeli tech", "sase" ], "summary": "Shlomo Kramer is an Israeli information technology entrepreneur and investor who co-founded Check Point Software Technologies, Imperva (originally WebCohort), and Cato Networks, three companies central to the development of the commercial firewall, web application firewall, and secure access service edge (SASE) markets.", "url": "people/shlomo-kramer.html" }, { "id": "steven-murdoch", "type": "person", "typeLabel": "Person", "title": "Steven Murdoch", "slug": "steven-murdoch", "era": "2000s-Present", "tags": [ "tor", "anonymity", "chip-and-pin", "emv-security", "banking-security", "academic-research", "uk", "privacy" ], "summary": "Steven J. Murdoch is a British computer scientist and Professor of Security Engineering at University College London, known for research on the Tor anonymity network and for exposing critical vulnerabilities in the UK's Chip and PIN (EMV) banking card system.", "url": "people/steven-murdoch.html" }, { "id": "sven-jaschan", "type": "person", "typeLabel": "Person", "title": "Sven Jaschan", "slug": "sven-jaschan", "era": "2000s-Present", "tags": [ "worms", "malware", "germany", "sasser", "netsky", "cybercrime", "teenage hacker", "2004" ], "summary": "Sven Jaschan is a German computer programmer who, as a teenager, authored the Sasser and Netsky computer worms in 2004, causing widespread disruption to computers and networks around the world.", "url": "people/sven-jaschan.html" }, { "id": "theo-de-raadt", "type": "person", "typeLabel": "Person", "title": "Theo de Raadt", "slug": "theo-de-raadt", "era": "1990s-Present", "tags": [ "openbsd", "openssh", "unix", "security", "open-source", "netbsd", "operating-systems" ], "summary": "Theo de Raadt is a South African-born Canadian software engineer who co-founded the NetBSD project in 1993 and, after his expulsion from its core team, founded the OpenBSD operating system project in October 1995, which he has led ever since.", "url": "people/theo-de-raadt.html" }, { "id": "thomas-drake", "type": "person", "typeLabel": "Person", "title": "Thomas Drake", "slug": "thomas-drake", "era": "2000s-Present", "tags": [ "nsa", "whistleblower", "espionage-act", "surveillance", "trailblazer", "government-accountability" ], "summary": "Thomas Andrews Drake is a former senior executive at the U.S. National Security Agency who was prosecuted under the Espionage Act after disclosing information about NSA mismanagement, including the failed Trailblazer program, to a journalist; the government's case against him collapsed in 2011.", "url": "people/thomas-drake.html" }, { "id": "travis-goodspeed", "type": "person", "typeLabel": "Person", "title": "Travis Goodspeed", "slug": "travis-goodspeed", "era": "2000s-Present", "tags": [ "embedded security", "hardware hacking", "reverse engineering", "jtag", "radio hacking", "microcontrollers", "poc-gtfo" ], "summary": "Travis Goodspeed is an American reverse engineer and embedded-systems security researcher, best known for creating the GoodFET open-source JTAG/hardware-hacking tool and for co-editing the reverse-engineering journal PoC||GTFO.", "url": "people/travis-goodspeed.html" }, { "id": "vesselin-bontchev", "type": "person", "typeLabel": "Person", "title": "Vesselin Bontchev", "slug": "vesselin-bontchev", "era": "1990s-Present", "tags": [ "antivirus", "computer viruses", "bulgaria", "malware research", "dark avenger", "caro", "virus test center", "f-prot" ], "summary": "Vesselin Bontchev is a Bulgarian computer virus researcher who directed the Laboratory of Computer Virology at the Bulgarian Academy of Sciences and became one of the earliest and most detailed chroniclers of Bulgaria's prolific early-1990s virus-writing scene, including the pseudonymous virus author known as Dark Avenger.", "url": "people/vesselin-bontchev.html" }, { "id": "victor-gevers", "type": "person", "typeLabel": "Person", "title": "Victor Gevers", "slug": "victor-gevers", "era": "1998-Present", "tags": [ "responsible disclosure", "netherlands", "dutch", "gdi foundation", "divd", "database security", "coordinated vulnerability disclosure", "ethical hacking" ], "summary": "Victor Gevers is a Dutch security researcher and self-described ethical hacker who has been active since 1998, known for founding the GDI Foundation and co-founding the Dutch Institute for Vulnerability Disclosure (DIVD), through which he has reported thousands of exposed databases and critical software vulnerabilities.", "url": "people/victor-gevers.html" }, { "id": "vladimir-levin", "type": "person", "typeLabel": "Person", "title": "Vladimir Leonidovich Levin", "slug": "vladimir-levin", "era": "1990s", "tags": [ "bank fraud", "wire transfer fraud", "citibank hack", "russia", "1990s cybercrime", "extradition case", "financial cybercrime" ], "summary": "Vladimir Levin is a Russian former biochemistry graduate and computer programmer convicted for orchestrating a scheme that fraudulently transferred approximately $10.7 million out of Citibank corporate accounts in 1994, in one of the earliest publicized international bank-network computer fraud cases.", "url": "people/vladimir-levin.html" }, { "id": "wen-xu-security-researcher", "type": "person", "typeLabel": "Person", "title": "Wen Xu", "slug": "wen-xu-security-researcher", "era": "2010s-Present", "tags": [ "kernel exploitation", "fuzzing", "android rooting", "pwn2own", "ctf", "file systems", "academic research" ], "summary": "Wen Xu, also known by the handle \"Memeda,\" is a security researcher known for Android/Linux kernel exploitation work at Keen Team, competitive results at Pwn2Own and DEF CON CTF, and academic fuzzing research completed during his PhD at Georgia Tech.", "url": "people/wen-xu-security-researcher.html" }, { "id": "wietse-venema", "type": "person", "typeLabel": "Person", "title": "Wietse Venema", "slug": "wietse-venema", "era": "1990s-Present", "tags": [ "network security", "unix", "forensics", "mail server", "open source", "security tools" ], "summary": "Wietse Venema is a Dutch-American computer scientist and physicist best known for creating TCP Wrapper and the Postfix mail transfer agent, and for co-developing the SATAN network security scanner and The Coroner's Toolkit forensic suite with Dan Farmer.", "url": "people/wietse-venema.html" }, { "id": "william-binney", "type": "person", "typeLabel": "Person", "title": "William Binney", "slug": "william-binney", "era": "1970s-Present", "tags": [ "nsa", "whistleblower", "surveillance", "thinthread", "cryptanalysis", "signals-intelligence", "privacy" ], "summary": "William Edward Binney is a former United States National Security Agency mathematician and crypanalyst who served as a Technical Director and co-developed the ThinThread signals-intelligence program before becoming one of the earliest and most prominent whistleblowers on NSA mass-surveillance practices, years before Edward Snowden.", "url": "people/william-binney.html" }, { "id": "angr-binary-analysis", "type": "tool", "typeLabel": "Tool", "title": "angr", "slug": "angr-binary-analysis", "era": "2015-Present", "tags": [ "binary analysis", "symbolic execution", "reverse engineering", "ctf", "vulnerability research", "open source", "python", "shellphish" ], "summary": "angr is an open-source, Python-based binary analysis platform combining static and dynamic (symbolic execution) analysis techniques, developed by researchers at UC Santa Barbara's Computer Security Lab and Arizona State University's SEFCOM lab, with strong ties to the Shellphish CTF team.", "url": "tools/angr-binary-analysis.html" }, { "id": "core-impact", "type": "tool", "typeLabel": "Tool", "title": "Core Impact", "slug": "core-impact", "era": "2002-Present", "tags": [ "penetration-testing", "exploitation-framework", "commercial-tool", "vulnerability-management", "core-security", "argentina", "red-team" ], "summary": "Core Impact is a commercial penetration-testing and exploitation framework originally developed by Core Security Technologies, a company founded in 1996 in Buenos Aires, Argentina, with the tool's flagship version first released in 2002.", "url": "tools/core-impact.html" }, { "id": "cuckoo-sandbox", "type": "tool", "typeLabel": "Tool", "title": "Cuckoo Sandbox", "slug": "cuckoo-sandbox", "era": "2010-Present", "tags": [ "malware analysis", "sandbox", "open source", "dynamic analysis", "digital forensics", "reverse engineering", "honeynet project" ], "summary": "Cuckoo Sandbox is an open-source automated malware analysis system that executes suspicious files in isolated virtual environments and produces detailed reports on their behavior, including API calls, network traffic, and file system activity.", "url": "tools/cuckoo-sandbox.html" }, { "id": "impacket", "type": "tool", "typeLabel": "Tool", "title": "Impacket", "slug": "impacket", "era": "2013-Present", "tags": [ "python", "network-protocols", "penetration-testing", "red-team", "active-directory", "smb", "kerberos", "lateral-movement", "open-source" ], "summary": "Impacket is an open-source collection of Python classes providing low-level, object-oriented access to network protocols such as SMB, MSRPC, NTLM, Kerberos, LDAP, and TDS, originally created by SecureAuth and now maintained by Fortra's Core Security.", "url": "tools/impacket.html" }, { "id": "netcat", "type": "tool", "typeLabel": "Tool", "title": "Netcat", "slug": "netcat", "era": "1995-Present", "tags": [ "networking", "tcp-ip", "unix", "port-scanning", "debugging", "penetration-testing", "open-source" ], "summary": "Netcat is a command-line networking utility for reading and writing data across TCP or UDP network connections, originally released by a programmer using the pseudonym *Hobbit* in 1995 and widely nicknamed the \"Swiss Army knife\" of TCP/IP tools.", "url": "tools/netcat.html" }, { "id": "nikto-scanner", "type": "tool", "typeLabel": "Tool", "title": "Nikto", "slug": "nikto-scanner", "era": "2001-Present", "tags": [ "web security", "vulnerability scanner", "open source", "penetration testing", "perl", "cgi scanner", "web server" ], "summary": "Nikto is an open-source command-line web server scanner, originally authored by Chris Sullo, that checks servers for thousands of potentially dangerous files, outdated software versions, and common misconfigurations.", "url": "tools/nikto-scanner.html" }, { "id": "owasp-zap", "type": "tool", "typeLabel": "Tool", "title": "OWASP ZAP", "slug": "owasp-zap", "era": "2010s-Present", "tags": [ "web security", "vulnerability scanner", "penetration testing", "open source", "dast", "proxy", "owasp" ], "summary": "OWASP ZAP (Zed Attack Proxy) is a free and open-source web application security scanner, originally forked from Paros Proxy and first released in 2010, that became one of the world's most widely used dynamic application security testing (DAST) tools.", "url": "tools/owasp-zap.html" }, { "id": "powershell-empire", "type": "tool", "typeLabel": "Tool", "title": "PowerShell Empire", "slug": "powershell-empire", "era": "2015-Present", "tags": [ "post-exploitation", "command-and-control", "powershell", "red-team", "adversary-emulation", "open-source", "penetration-testing" ], "summary": "PowerShell Empire is an open-source post-exploitation and command-and-control framework, originally built around pure PowerShell agents for Windows, that was later merged with the Python-based EmPyre project and, after the original project went dormant, revived and continued by the security firm BC Security.", "url": "tools/powershell-empire.html" }, { "id": "shodan-search-engine", "type": "tool", "typeLabel": "Tool", "title": "Shodan", "slug": "shodan-search-engine", "era": "2009-Present", "tags": [ "search engine", "iot security", "reconnaissance", "internet scanning", "osint", "network security", "banner grabbing" ], "summary": "Shodan is a search engine created by John Matherly that indexes internet-connected devices and services rather than web pages, allowing users to search by device type, software banner, geographic location, and open ports.", "url": "tools/shodan-search-engine.html" }, { "id": "suricata-ids", "type": "tool", "typeLabel": "Tool", "title": "Suricata", "slug": "suricata-ids", "era": "2009-Present", "tags": [ "network security", "ids", "ips", "open source", "network monitoring", "intrusion detection", "oisf" ], "summary": "Suricata is a free and open-source network intrusion detection (IDS), intrusion prevention (IPS), and network security monitoring (NSM) engine developed by the Open Information Security Foundation (OISF) and its community.", "url": "tools/suricata-ids.html" }, { "id": "tcpdump", "type": "tool", "typeLabel": "Tool", "title": "tcpdump", "slug": "tcpdump", "era": "1988-Present", "tags": [ "packet capture", "network analysis", "libpcap", "unix tools", "network security", "open source", "berkeley" ], "summary": "tcpdump is a command-line packet analyzer originally developed in 1988 at Lawrence Berkeley National Laboratory that captures and displays TCP/IP and other network traffic in real time, built on the libpcap capture library it also spawned.", "url": "tools/tcpdump.html" }, { "id": "theharvester", "type": "tool", "typeLabel": "Tool", "title": "theHarvester", "slug": "theharvester", "era": "2011-Present", "tags": [ "osint", "reconnaissance", "penetration-testing", "subdomain-enumeration", "email-harvesting", "open-source", "kali-linux" ], "summary": "theHarvester is an open-source intelligence (OSINT) reconnaissance tool that gathers emails, subdomains, hostnames, employee names, and other public information about a target organization from search engines, DNS records, and other public sources. It was originally created by Christian Martorella of Edge-Security Research and is now bundled by default in Kali Linux.", "url": "tools/theharvester.html" }, { "id": "w3af", "type": "tool", "typeLabel": "Tool", "title": "w3af", "slug": "w3af", "era": "2007-Present", "tags": [ "web application security", "vulnerability scanner", "open source", "penetration testing", "python", "exploitation framework" ], "summary": "w3af (Web Application Attack and Audit Framework) is an open-source Python framework for identifying and exploiting vulnerabilities in web applications, created by Argentine security researcher Andres Riancho starting in 2007.", "url": "tools/w3af.html" }, { "id": "ashley-madison-breach", "type": "attack", "typeLabel": "Attack", "title": "The Ashley Madison Breach", "slug": "ashley-madison-breach", "era": "2015", "tags": [ "data breach", "extortion", "hacktivism", "privacy", "dating site", "insider threat", "class action" ], "summary": "In July 2015, a hacker group calling itself The Impact Team breached Avid Life Media, the parent company of the extramarital-affair dating site Ashley Madison, and later leaked tens of millions of users' personal data after the company refused to shut the site down.", "url": "attacks/ashley-madison-breach.html" }, { "id": "bangladesh-bank-heist", "type": "attack", "typeLabel": "Attack", "title": "The Bangladesh Bank Heist", "slug": "bangladesh-bank-heist", "era": "2016", "tags": [ "swift", "banking-fraud", "lazarus-group", "north-korea", "financial-crime", "insider-threat", "money-laundering" ], "summary": "In February 2016, attackers used stolen SWIFT credentials to issue fraudulent transfer instructions from Bangladesh Bank's account at the Federal Reserve Bank of New York, attempting to steal nearly $1 billion and successfully diverting $101 million, of which $81 million was routed through casinos in the Philippines and never recovered.", "url": "attacks/bangladesh-bank-heist.html" }, { "id": "colonial-pipeline-ransomware", "type": "attack", "typeLabel": "Attack", "title": "The Colonial Pipeline Ransomware Attack", "slug": "colonial-pipeline-ransomware", "era": "2021", "tags": [ "ransomware", "critical infrastructure", "darkside", "extortion", "energy sector", "cryptocurrency", "2021" ], "summary": "In May 2021, the DarkSide ransomware-as-a-service group breached the IT network of Colonial Pipeline, the largest refined-products pipeline operator in the United States, prompting a precautionary six-day shutdown of fuel delivery to much of the U.S. Southeast and a $4.4 million ransom payment.", "url": "attacks/colonial-pipeline-ransomware.html" }, { "id": "moveit-breach-2023", "type": "attack", "typeLabel": "Attack", "title": "The MOVEit Breach", "slug": "moveit-breach-2023", "era": "2023", "tags": [ "data breach", "zero-day", "supply chain", "ransomware", "extortion", "sql injection", "cl0p", "mass exploitation" ], "summary": "In May and June 2023, the Russian-speaking extortion group Cl0p exploited a critical zero-day SQL injection vulnerability (CVE-2023-34362) in Progress Software's MOVEit Transfer file-transfer tool, stealing data from thousands of downstream organizations in one of the largest single-vulnerability mass-exploitation campaigns in history.", "url": "attacks/moveit-breach-2023.html" }, { "id": "operation-aurora", "type": "attack", "typeLabel": "Attack", "title": "Operation Aurora", "slug": "operation-aurora", "era": "2009-2010", "tags": [ "cyberespionage", "china", "google", "apt", "zero-day", "supply-chain", "internet-explorer", "corporate-espionage" ], "summary": "Operation Aurora was a sophisticated cyberespionage campaign conducted between mid-2009 and December 2009 against Google and at least thirty other major U.S. companies, exploiting an Internet Explorer zero-day to steal intellectual property and access source code repositories; its disclosure led Google to stop censoring search results in mainland China.", "url": "attacks/operation-aurora.html" }, { "id": "rsa-securid-breach-2011", "type": "attack", "typeLabel": "Attack", "title": "The RSA SecurID Breach", "slug": "rsa-securid-breach-2011", "era": "2011", "tags": [ "apt", "spear-phishing", "two-factor-authentication", "supply-chain-risk", "china-linked", "cyber-espionage", "defense-industry" ], "summary": "In March 2011, RSA Security disclosed that intruders had breached its network through a spear-phishing campaign and stolen data tied to its SecurID two-factor authentication tokens, information that was later used in an attempted intrusion at defense contractor Lockheed Martin.", "url": "attacks/rsa-securid-breach-2011.html" }, { "id": "sony-pictures-hack-2014", "type": "attack", "typeLabel": "Attack", "title": "The Sony Pictures Hack", "slug": "sony-pictures-hack-2014", "era": "2014", "tags": [ "data breach", "nation-state", "north korea", "extortion", "destructive malware", "entertainment industry", "the interview" ], "summary": "In November 2014, a group calling itself Guardians of Peace breached Sony Pictures Entertainment, wiping systems and leaking terabytes of internal data; the U.S. government publicly attributed the attack to North Korea, tying it to Sony's planned release of the comedy film The Interview.", "url": "attacks/sony-pictures-hack-2014.html" }, { "id": "target-2013-breach", "type": "attack", "typeLabel": "Attack", "title": "Target 2013 Data Breach", "slug": "target-2013-breach", "era": "2013", "tags": [ "data breach", "point-of-sale malware", "retail security", "carding", "third-party risk", "BlackPOS", "payment card fraud" ], "summary": "Between November 27 and December 15, 2013, attackers used point-of-sale (BlackPOS/Kaptoxa) malware installed on Target Corporation's payment terminals to steal data from roughly 40 million credit and debit cards, later followed by disclosure that personal information of up to 70 million customers was also exposed.", "url": "attacks/target-2013-breach.html" }, { "id": "wannacry-ransomware-attack", "type": "attack", "typeLabel": "Attack", "title": "The WannaCry Ransomware Attack", "slug": "wannacry-ransomware-attack", "era": "2017", "tags": [ "ransomware", "eternalblue", "nsa-exploit", "worm", "nhs", "marcus-hutchins", "shadow-brokers", "north-korea" ], "summary": "WannaCry was a fast-spreading ransomware worm that struck in May 2017, using the leaked NSA-developed EternalBlue exploit to infect hundreds of thousands of Windows computers across roughly 150 countries in a matter of days.", "url": "attacks/wannacry-ransomware-attack.html" }, { "id": "yahoo-data-breaches", "type": "attack", "typeLabel": "Attack", "title": "The Yahoo Data Breaches", "slug": "yahoo-data-breaches", "era": "2013-2017", "tags": [ "data breach", "yahoo", "state-sponsored", "fsb", "russia", "credential theft", "mega-breach", "2010s" ], "summary": "Between 2013 and 2014, attackers linked to Russia's FSB intelligence service compromised the entirety of Yahoo's user account database, affecting all three billion accounts; Yahoo did not publicly disclose the intrusions until 2016 and 2017, making it one of the largest data breaches in history.", "url": "attacks/yahoo-data-breaches.html" }, { "id": "black-hat-briefings", "type": "event", "typeLabel": "Event", "title": "Black Hat Briefings", "slug": "black-hat-briefings", "era": "1997-Present", "tags": [ "conference", "information security", "vulnerability disclosure", "hacker culture", "corporate security", "las vegas" ], "summary": "Black Hat Briefings is an information security conference founded in 1997 by Jeff Moss as a more corporate and professional counterpart to his hacker convention DEF CON, bringing together researchers, vendors, and government agencies to discuss vulnerabilities and hacking techniques.", "url": "events/black-hat-briefings.html" }, { "id": "cansecwest-pwn2own-founding", "type": "event", "typeLabel": "Event", "title": "CanSecWest and the Founding of Pwn2Own", "slug": "cansecwest-pwn2own-founding", "era": "2007", "tags": [ "cansecwest", "pwn2own", "dragos ruiu", "exploit contest", "zero day initiative", "vancouver", "browser exploitation", "bug bounty history" ], "summary": "CanSecWest, a Vancouver-based security conference organized by Dragos Ruiu, launched the Pwn2Own contest in April 2007, creating what became one of the world's most prominent live hacking competitions for browsers, operating systems, and devices.", "url": "events/cansecwest-pwn2own-founding.html" }, { "id": "chaos-communication-camp", "type": "event", "typeLabel": "Event", "title": "Chaos Communication Camp", "slug": "chaos-communication-camp", "era": "1999-Present", "tags": [ "ccc", "hacker camp", "germany", "hacker culture", "conference", "privacy", "open air" ], "summary": "The Chaos Communication Camp (CCCamp) is an international outdoor hacker gathering organized by the Chaos Computer Club (CCC), held roughly every four years in Germany since 1999.", "url": "events/chaos-communication-camp.html" }, { "id": "defcon-ctf-origin", "type": "event", "typeLabel": "Event", "title": "The Founding of the DEF CON Capture the Flag Contest", "slug": "defcon-ctf-origin", "era": "1996", "tags": [ "defcon", "ctf", "capture the flag", "competition", "hacking contest", "security culture" ], "summary": "The DEF CON Capture the Flag (CTF) contest was first held in 1996 at DEF CON 4, growing out of informal hacking games at earlier DEF CONs into what became known as the premier hacking competition in the world.", "url": "events/defcon-ctf-origin.html" }, { "id": "hope-hackers-on-planet-earth", "type": "event", "typeLabel": "Event", "title": "HOPE (Hackers On Planet Earth)", "slug": "hope-hackers-on-planet-earth", "era": "1994-Present", "tags": [ "hacker conference", "2600 magazine", "new york", "hope", "emmanuel goldstein", "whistleblowers", "hacker culture" ], "summary": "HOPE (Hackers On Planet Earth) is a hacker conference organized by 2600: The Hacker Quarterly, first held in 1994 in New York City and traditionally staged every two summers since.", "url": "events/hope-hackers-on-planet-earth.html" }, { "id": "operation-sundevil", "type": "event", "typeLabel": "Event", "title": "Operation Sundevil", "slug": "operation-sundevil", "era": "1990", "tags": [ "secret service", "bbs", "phreaking", "hacking crackdown", "eff", "law enforcement", "1990s" ], "summary": "Operation Sundevil was a nationwide crackdown coordinated by the United States Secret Service that culminated in raids across more than a dozen U.S. cities in May 1990, targeting bulletin board systems (BBSes) suspected of trading stolen credit card numbers, phone-phreaking tools, and pirated software.", "url": "events/operation-sundevil.html" }, { "id": "rsa-conference-founding", "type": "event", "typeLabel": "Event", "title": "The Founding of the RSA Conference", "slug": "rsa-conference-founding", "era": "1991", "tags": [ "rsa conference", "cryptography", "security industry", "jim bidzos", "1990s", "information security", "conferences" ], "summary": "The RSA Conference, now the world's largest information security industry gathering, began as a small, single-panel gathering convened by RSA Data Security in November 1991 to debate the U.S. government's proposed Digital Signature Standard.", "url": "events/rsa-conference-founding.html" }, { "id": "shmoocon", "type": "event", "typeLabel": "Event", "title": "ShmooCon", "slug": "shmoocon", "era": "2005-2025", "tags": [ "hacker convention", "infosec", "washington dc", "shmoo group", "security conference", "cryptography", "cyberculture" ], "summary": "ShmooCon was an annual American hacker convention organized by The Shmoo Group, held in the Washington, D.C. area from 2005 until its final edition in January 2025.", "url": "events/shmoocon.html" }, { "id": "apt29-cozy-bear", "type": "group", "typeLabel": "Group", "title": "APT29 (Cozy Bear)", "slug": "apt29-cozy-bear", "era": "2008-Present", "tags": [ "nation-state", "russia", "espionage", "supply-chain-attack", "apt", "solarwinds", "sunburst", "cyberespionage" ], "summary": "APT29, widely known as Cozy Bear, is a Russian state-sponsored cyberespionage group assessed to operate on behalf of Russia's Foreign Intelligence Service (SVR), active since at least 2008 and linked to the 2016 DNC breach and the 2020 SolarWinds/Sunburst supply-chain attack.", "url": "groups/apt29-cozy-bear.html" }, { "id": "core-security-technologies", "type": "group", "typeLabel": "Group", "title": "Core Security Technologies", "slug": "core-security-technologies", "era": "1996-Present", "tags": [ "penetration-testing", "argentina", "exploit-development", "core-impact", "impacket", "vulnerability-research" ], "summary": "Core Security Technologies is an information-security company founded in 1996 in Buenos Aires, Argentina, best known for creating the commercial penetration-testing platform Core Impact and for its long association with the open-source network-protocol toolkit Impacket.", "url": "groups/core-security-technologies.html" }, { "id": "crowdstrike", "type": "group", "typeLabel": "Group", "title": "CrowdStrike", "slug": "crowdstrike", "era": "2011-Present", "tags": [ "cybersecurity company", "endpoint detection", "threat intelligence", "dnc breach", "apt attribution", "falcon platform", "incident response" ], "summary": "CrowdStrike is an American cybersecurity company founded in 2011 by George Kurtz, Dmitri Alperovitch, and Gregg Marston, known for its cloud-native Falcon endpoint protection platform and for its 2016 investigation attributing the Democratic National Committee hack to Russian state-linked groups.", "url": "groups/crowdstrike.html" }, { "id": "equation-group", "type": "group", "typeLabel": "Group", "title": "Equation Group", "slug": "equation-group", "era": "2001-Present", "tags": [ "cyberespionage", "apt", "nsa", "malware", "firmware-implants", "zero-day", "shadow-brokers", "state-sponsored" ], "summary": "The Equation Group is a highly sophisticated cyberespionage actor publicly identified and named by Kaspersky Lab researchers in February 2015, whose tools, techniques, and operational details have led researchers and journalists to widely link it to the U.S. National Security Agency; a subset of its hacking tools was later stolen and leaked by a group calling itself the Shadow Brokers.", "url": "groups/equation-group.html" }, { "id": "hacking-team", "type": "group", "typeLabel": "Group", "title": "Hacking Team", "slug": "hacking-team", "era": "2003-2020", "tags": [ "surveillance", "spyware", "italy", "data-breach", "phineas-fisher", "exploit-broker", "government-hacking" ], "summary": "Hacking Team was a Milan-based company that sold offensive intrusion and surveillance software to governments and police forces worldwide, until a July 2015 breach by the hacker Phineas Fisher exposed roughly 400 gigabytes of its internal emails, source code, and client list.", "url": "groups/hacking-team.html" }, { "id": "lazarus-group", "type": "group", "typeLabel": "Group", "title": "Lazarus Group", "slug": "lazarus-group", "era": "2009-Present", "tags": [ "north-korea", "state-sponsored", "apt", "ransomware", "financial-theft", "sony-hack", "wannacry", "swift-fraud" ], "summary": "Lazarus Group is a state-sponsored cyber threat actor widely attributed to North Korea, active since at least 2009 and linked to the 2014 Sony Pictures hack, the 2016 Bangladesh Bank SWIFT heist, and the 2017 WannaCry ransomware outbreak.", "url": "groups/lazarus-group.html" }, { "id": "mandiant", "type": "group", "typeLabel": "Group", "title": "Mandiant", "slug": "mandiant", "era": "2004-Present", "tags": [ "incident response", "threat intelligence", "apt1", "china", "cyber espionage", "attribution", "fireeye", "google cloud" ], "summary": "Mandiant is a cybersecurity firm specializing in incident response and threat intelligence, founded in 2004 by Kevin Mandia, best known for its 2013 \"APT1\" report publicly attributing years of cyber espionage against U.S. and other organizations to a Chinese military unit.", "url": "groups/mandiant.html" }, { "id": "nso-group", "type": "group", "typeLabel": "Group", "title": "NSO Group", "slug": "nso-group", "era": "2010-Present", "tags": [ "spyware", "pegasus", "israel", "surveillance", "zero-click", "mercenary-hacking", "zero-day", "human-rights" ], "summary": "NSO Group is an Israeli technology company, founded in 2010, best known for developing Pegasus, a commercial \"zero-click\" spyware suite sold to government clients and later linked to widespread surveillance of journalists, activists, lawyers, and political figures worldwide.", "url": "groups/nso-group.html" }, { "id": "zero-day-initiative", "type": "group", "typeLabel": "Group", "title": "Zero Day Initiative (ZDI)", "slug": "zero-day-initiative", "era": "2005-Present", "tags": [ "bug bounty", "vulnerability disclosure", "tippingpoint", "trend micro", "pwn2own", "responsible disclosure", "exploit acquisition" ], "summary": "The Zero Day Initiative (ZDI) is a vendor-agnostic vulnerability purchase and coordinated-disclosure program started on July 25, 2005 by TippingPoint, a division of 3Com, and led today by Trend Micro following its 2015 acquisition of HP TippingPoint.", "url": "groups/zero-day-initiative.html" }, { "id": "computer-underground-digest", "type": "publication", "typeLabel": "Publication", "title": "Computer Underground Digest", "slug": "computer-underground-digest", "era": "1990-2000", "tags": [ "newsletter", "computer underground", "hacker culture", "digital rights", "usenet", "1990s", "policy", "phreaking" ], "summary": "Computer Underground Digest (CuD) was a weekly electronic newsletter published from March 1990 to March 2000 that covered the legal, social, and cultural issues surrounding the early computer underground, edited by Jim Thomas with Gordon Meyer as news editor.", "url": "publications/computer-underground-digest.html" }, { "id": "countdown-to-zero-day", "type": "publication", "typeLabel": "Publication", "title": "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon", "slug": "countdown-to-zero-day", "era": "2014", "tags": [ "stuxnet", "malware", "book", "journalism", "cyberwarfare", "industrial-control-systems", "iran", "nation-state" ], "summary": "\"Countdown to Zero Day\" is a 2014 nonfiction book by American investigative journalist Kim Zetter, published by Crown, that chronicles the discovery and technical analysis of the Stuxnet computer worm and its sabotage of Iran's Natanz uranium-enrichment facility.", "url": "publications/countdown-to-zero-day.html" }, { "id": "ghost-in-the-wires", "type": "publication", "typeLabel": "Publication", "title": "Ghost in the Wires: My Adventures as the World's Most Wanted Hacker", "slug": "ghost-in-the-wires", "era": "2011", "tags": [ "memoir", "social engineering", "kevin mitnick", "fugitive", "phone phreaking", "computer crime", "biography" ], "summary": "\"Ghost in the Wires\" is a 2011 memoir by Kevin Mitnick, co-written with William L. Simon, recounting Mitnick's years as a computer intruder and phone phreaker, his time as a federal fugitive, and his 1995 arrest.", "url": "publications/ghost-in-the-wires.html" }, { "id": "kingpin-poulsen-book", "type": "publication", "typeLabel": "Publication", "title": "Kingpin: How One Hacker Took Over the Billion-Dollar Cybercrime Underground", "slug": "kingpin-poulsen-book", "era": "2011", "tags": [ "carding", "cybercrime", "true-crime", "credit-card-fraud", "book", "iceman", "cardersmarket", "journalism" ], "summary": "\"Kingpin\" is a 2011 non-fiction book by journalist and former hacker Kevin Poulsen, published by Crown, that chronicles the rise and fall of Max Ray Butler (a.k.a. \"Max Vision\" and \"Iceman\"), a hacker who stole access to roughly 1.8 million credit card accounts and took over rival carding forums to build the unified marketplace CardersMarket.", "url": "publications/kingpin-poulsen-book.html" }, { "id": "risks-digest", "type": "publication", "typeLabel": "Publication", "title": "The RISKS Digest", "slug": "risks-digest", "era": "1985-Present", "tags": [ "mailing list", "computer safety", "software reliability", "usenet", "acm", "risk analysis", "moderated forum" ], "summary": "The RISKS Digest, formally the \"Forum On Risks to the Public in Computers and Related Systems,\" is a moderated mailing list and Usenet newsgroup (comp.risks) documenting failures, vulnerabilities, and unintended consequences of computer systems, moderated by Peter G. Neumann since its founding on August 1, 1985.", "url": "publications/risks-digest.html" }, { "id": "sandworm-greenberg-book", "type": "publication", "typeLabel": "Publication", "title": "Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers", "slug": "sandworm-greenberg-book", "era": "2019", "tags": [ "book", "notpetya", "sandworm", "gru", "russia", "cyberwar", "ukraine", "journalism" ], "summary": "\"Sandworm\" is a 2019 nonfiction book by American journalist Andy Greenberg, published by Doubleday, that chronicles the investigation into a Russian military-intelligence hacking group and its escalating cyberattacks, culminating in the 2017 NotPetya malware outbreak.", "url": "publications/sandworm-greenberg-book.html" }, { "id": "the-art-of-deception-mitnick", "type": "publication", "typeLabel": "Publication", "title": "The Art of Deception", "slug": "the-art-of-deception-mitnick", "era": "2002", "tags": [ "social engineering", "kevin mitnick", "security awareness", "phishing", "human factor", "book", "wiley" ], "summary": "\"The Art of Deception: Controlling the Human Element of Security\" is a 2002 book by former hacker Kevin D. Mitnick and co-author William L. Simon, published by John Wiley & Sons, that explains how social engineering is used to bypass technical security controls.", "url": "publications/the-art-of-deception-mitnick.html" }, { "id": "binary-ninja", "type": "tool", "typeLabel": "Tool", "title": "Binary Ninja", "slug": "binary-ninja", "era": "2016-Present", "tags": [ "reverse-engineering", "disassembler", "decompiler", "binary-analysis", "vector-35", "malware-analysis", "vulnerability-research", "commercial-tool" ], "summary": "Binary Ninja is a commercial interactive disassembler, decompiler, and binary analysis platform developed by Vector 35, first released publicly in July 2016 as an alternative to IDA Pro for reverse engineers.", "url": "tools/binary-ninja.html" }, { "id": "cain-and-abel", "type": "tool", "typeLabel": "Tool", "title": "Cain & Abel", "slug": "cain-and-abel", "era": "2000s-2014", "tags": [ "password recovery", "network sniffing", "arp spoofing", "windows", "credential attacks", "man-in-the-middle", "password cracking", "penetration testing" ], "summary": "Cain & Abel was a free Windows password recovery and network analysis tool created by Italian developer Massimiliano Montoro, combining packet sniffing, ARP spoofing, and password-cracking techniques into a single application widely used for both legitimate security testing and credential theft during the 2000s and early 2010s.", "url": "tools/cain-and-abel.html" }, { "id": "maltego", "type": "tool", "typeLabel": "Tool", "title": "Maltego", "slug": "maltego", "era": "2000s-Present", "tags": [ "osint", "link-analysis", "reconnaissance", "threat-intelligence", "digital-forensics", "kali-linux", "investigation-software" ], "summary": "Maltego is a graphical link-analysis and open-source intelligence (OSINT) platform, originally developed by the company Paterva (now Maltego Technologies GmbH), used to map relationships between people, organizations, domains, and other entities for security research, threat intelligence, and investigations.", "url": "tools/maltego.html" }, { "id": "ollydbg", "type": "tool", "typeLabel": "Tool", "title": "OllyDbg", "slug": "ollydbg", "era": "2000s-2010s", "tags": [ "windows-debugger", "reverse-engineering", "malware-analysis", "x86", "disassembler", "software-cracking", "freeware" ], "summary": "OllyDbg is a 32-bit x86 assembler-level debugger for Microsoft Windows, created by Oleh Yuschuk, that became one of the most widely used tools of the 2000s for binary code analysis, reverse engineering, and malware analysis when source code is unavailable.", "url": "tools/ollydbg.html" }, { "id": "responder-tool", "type": "tool", "typeLabel": "Tool", "title": "Responder", "slug": "responder-tool", "era": "2013-Present", "tags": [ "llmnr", "nbt-ns", "mdns", "credential harvesting", "man-in-the-middle", "active directory", "penetration testing", "ntlm" ], "summary": "Responder is an open-source LLMNR, NBT-NS, and mDNS poisoning tool created by Laurent Gaffié that stands up rogue authentication servers to capture NetNTLM hashes and cleartext credentials on local networks.", "url": "tools/responder-tool.html" }, { "id": "sysinternals-suite", "type": "tool", "typeLabel": "Tool", "title": "Sysinternals Suite", "slug": "sysinternals-suite", "era": "1996-Present", "tags": [ "windows", "system-utilities", "process-monitoring", "malware-analysis", "microsoft", "diagnostics", "reverse-engineering" ], "summary": "Sysinternals is a suite of advanced Windows system-internals, diagnostic, and troubleshooting utilities — including Process Explorer, Autoruns, and Process Monitor — originally created by Mark Russinovich and Bryce Cogswell and acquired by Microsoft in 2006.", "url": "tools/sysinternals-suite.html" }, { "id": "bluekeep", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "BlueKeep (CVE-2019-0708)", "slug": "bluekeep", "era": "2019", "tags": [ "rdp", "windows", "wormable", "remote-code-execution", "microsoft", "patch-tuesday", "critical-infrastructure" ], "summary": "BlueKeep (CVE-2019-0708) is a critical, wormable remote code execution vulnerability in Microsoft's Remote Desktop Services affecting older Windows versions, disclosed and patched by Microsoft in May 2019.", "url": "vulnerabilities/bluekeep.html" }, { "id": "citrix-bleed", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "Citrix Bleed (CVE-2023-4966)", "slug": "citrix-bleed", "era": "2023", "tags": [ "citrix", "netscaler", "session-hijacking", "information-disclosure", "ransomware", "lockbit", "credential-theft", "edge-device" ], "summary": "Citrix Bleed (CVE-2023-4966) is a critical information-disclosure vulnerability in Citrix NetScaler ADC and NetScaler Gateway appliances that let remote attackers steal valid session tokens from device memory and hijack authenticated sessions, bypassing passwords and multi-factor authentication.", "url": "vulnerabilities/citrix-bleed.html" }, { "id": "dirty-cow", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "Dirty COW (CVE-2016-5195)", "slug": "dirty-cow", "era": "2016", "tags": [ "linux-kernel", "dirty-cow", "cve-2016-5195", "privilege-escalation", "race-condition", "copy-on-write", "android", "vulnerability", "2016" ], "summary": "Dirty COW (CVE-2016-5195) is a race-condition flaw in the Linux kernel's copy-on-write memory handling that let unprivileged local users gain write access to read-only memory mappings and escalate to root, publicly disclosed in October 2016 after evidence of active exploitation.", "url": "vulnerabilities/dirty-cow.html" }, { "id": "follina", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "Follina (CVE-2022-30190)", "slug": "follina", "era": "2022", "tags": [ "windows", "microsoft-office", "msdt", "zero-day", "remote-code-execution", "url-protocol-handler", "2022" ], "summary": "Follina (CVE-2022-30190) is a remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT), triggered via the ms-msdt URL protocol handler from malicious Microsoft Office documents, publicly disclosed in May 2022.", "url": "vulnerabilities/follina.html" }, { "id": "proxylogon", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "ProxyLogon (CVE-2021-26855 and related)", "slug": "proxylogon", "era": "2021", "tags": [ "exchange server", "zero-day", "microsoft", "hafnium", "web shell", "pre-auth rce", "china", "2021" ], "summary": "ProxyLogon is the name given to a chain of Microsoft Exchange Server vulnerabilities, led by the pre-authentication server-side request forgery flaw CVE-2021-26855, discovered by Orange Tsai of DEVCORE and exploited at mass scale by the Chinese state-sponsored group HAFNIUM in early 2021.", "url": "vulnerabilities/proxylogon.html" }, { "id": "rowhammer", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "Rowhammer", "slug": "rowhammer", "era": "2014-Present", "tags": [ "hardware", "dram", "memory-corruption", "privilege-escalation", "side-channel", "google-project-zero" ], "summary": "Rowhammer is a hardware vulnerability class in dense DRAM chips in which repeatedly and rapidly accessing (\"hammering\") a memory row can cause electrical interference that flips bits in adjacent rows, potentially altering data an attacker does not have permission to touch.", "url": "vulnerabilities/rowhammer.html" }, { "id": "zerologon", "type": "vulnerability", "typeLabel": "Vulnerability", "title": "Zerologon (CVE-2020-1472)", "slug": "zerologon", "era": "2020", "tags": [ "windows", "active-directory", "domain-controller", "netlogon", "privilege-escalation", "cryptography", "microsoft", "cisa" ], "summary": "Zerologon (CVE-2020-1472) is a critical cryptographic flaw in the Netlogon Remote Protocol used by Windows domain controllers, disclosed by Tom Tervoort of Secura in 2020, that let an unauthenticated attacker on the network take full control of an Active Directory domain.", "url": "vulnerabilities/zerologon.html" }, { "id": "poodle-vulnerability", "type": "vulnerability", "title": "POODLE (CVE-2014-3566)", "slug": "poodle-vulnerability", "era": "2014", "tags": [ "poodle", "ssl-3.0", "tls", "cve-2014-3566", "padding-oracle", "protocol-downgrade" ], "summary": "POODLE is a 2014 design vulnerability in SSL 3.0 that can allow a network attacker to recover plaintext from a connection forced to use the obsolete protocol.", "typeLabel": "Vulnerability", "url": "vulnerabilities/poodle-vulnerability.html" }, { "id": "freak-vulnerability", "type": "vulnerability", "title": "FREAK (CVE-2015-0204)", "slug": "freak-vulnerability", "era": "2015", "tags": [ "freak", "tls", "ssl", "cve-2015-0204", "rsa", "export-cryptography" ], "summary": "FREAK is a TLS weakness that could allow a network attacker to downgrade some connections to export-grade RSA encryption and factor the resulting weak key.", "typeLabel": "Vulnerability", "url": "vulnerabilities/freak-vulnerability.html" }, { "id": "badlock", "type": "vulnerability", "title": "Badlock (CVE-2016-2118)", "slug": "badlock", "era": "2016", "tags": [ "badlock", "samba", "windows", "cve-2016-2118", "smb", "dcerpc" ], "summary": "Badlock is the public name for CVE-2016-2118, a Samba and Windows remote-protocol vulnerability disclosed in April 2016.", "typeLabel": "Vulnerability", "url": "vulnerabilities/badlock.html" }, { "id": "blueborne", "type": "vulnerability", "title": "BlueBorne", "slug": "blueborne", "era": "2017", "tags": [ "blueborne", "bluetooth", "android", "windows", "linux", "ios", "armis" ], "summary": "BlueBorne is a set of Bluetooth vulnerabilities disclosed by Armis in 2017 that affected implementations across Android, Windows, Linux, and older Apple platforms.", "typeLabel": "Vulnerability", "url": "vulnerabilities/blueborne.html" }, { "id": "ghost-glibc", "type": "vulnerability", "title": "GHOST (CVE-2015-0235)", "slug": "ghost-glibc", "era": "2015", "tags": [ "ghost", "glibc", "cve-2015-0235", "linux", "buffer-overflow", "dns" ], "summary": "GHOST is CVE-2015-0235, a heap-based buffer overflow in glibc name-resolution functions that affected older versions of the GNU C Library.", "typeLabel": "Vulnerability", "url": "vulnerabilities/ghost-glibc.html" }, { "id": "drown-attack", "type": "vulnerability", "title": "DROWN (CVE-2016-0800)", "slug": "drown-attack", "era": "2016", "tags": [ "drown", "tls", "sslv2", "cve-2016-0800", "rsa", "cross-protocol" ], "summary": "DROWN is a 2016 cross-protocol attack that can use SSLv2 support to decrypt some TLS connections protected with the same RSA key.", "typeLabel": "Vulnerability", "url": "vulnerabilities/drown-attack.html" }, { "id": "efail", "type": "vulnerability", "title": "EFAIL", "slug": "efail", "era": "2018", "tags": [ "efail", "openpgp", "smime", "email-encryption", "cryptography", "2018" ], "summary": "EFAIL is a class of attacks disclosed in 2018 that used weaknesses in some OpenPGP and S/MIME email-client handling to exfiltrate decrypted message content.", "typeLabel": "Vulnerability", "url": "vulnerabilities/efail.html" }, { "id": "spring4shell", "type": "vulnerability", "title": "Spring4Shell (CVE-2022-22965)", "slug": "spring4shell", "era": "2022", "tags": [ "spring4shell", "spring-framework", "java", "cve-2022-22965", "remote-code-execution", "tomcat" ], "summary": "Spring4Shell is CVE-2022-22965, a Spring Framework data-binding vulnerability that could enable remote code execution in certain JDK 9+ and Tomcat WAR deployments.", "typeLabel": "Vulnerability", "url": "vulnerabilities/spring4shell.html" }, { "id": "hydra-thc", "type": "tool", "typeLabel": "Tool", "title": "THC-Hydra", "slug": "hydra-thc", "era": "2000s-Present", "tags": [ "password-auditing", "network-authentication", "thc", "security-testing" ], "summary": "Fast network login/password-cracking tool maintained by The Hackers Choice.", "url": "tools/hydra-thc.html" }, { "id": "veracrypt", "type": "tool", "typeLabel": "Tool", "title": "VeraCrypt", "slug": "veracrypt", "era": "2010s-Present", "tags": [ "disk-encryption", "truecrypt", "open-source", "privacy", "cryptography" ], "summary": "Open-source disk-encryption software based on TrueCrypt.", "url": "tools/veracrypt.html" }, { "id": "truecrypt", "type": "tool", "typeLabel": "Tool", "title": "TrueCrypt", "slug": "truecrypt", "era": "2004-2014", "tags": [ "disk-encryption", "truecrypt", "open-source", "privacy", "cryptography" ], "summary": "Influential disk-encryption software whose development ended abruptly in May 2014.", "url": "tools/truecrypt.html" }, { "id": "wpscan", "type": "tool", "typeLabel": "Tool", "title": "WPScan", "slug": "wpscan", "era": "2011-Present", "tags": [ "wordpress", "vulnerability-scanner", "web-security", "plugins", "themes" ], "summary": "WordPress vulnerability scanner and vulnerability-database service.", "url": "tools/wpscan.html" }, { "id": "bettercap", "type": "tool", "typeLabel": "Tool", "title": "bettercap", "slug": "bettercap", "era": "2010s-Present", "tags": [ "network-security", "reconnaissance", "mitm", "wireless", "go" ], "summary": "Open-source network reconnaissance and man-in-the-middle testing framework.", "url": "tools/bettercap.html" }, { "id": "gophish", "type": "tool", "typeLabel": "Tool", "title": "Gophish", "slug": "gophish", "era": "2010s-Present", "tags": [ "phishing-simulation", "security-awareness", "open-source", "training", "go" ], "summary": "Open-source framework for authorized phishing-simulation campaigns.", "url": "tools/gophish.html" }, { "id": "social-engineer-toolkit", "type": "tool", "typeLabel": "Tool", "title": "Social-Engineer Toolkit (SET)", "slug": "social-engineer-toolkit", "era": "2000s-Present", "tags": [ "social-engineering", "penetration-testing", "trustedsec", "security-awareness", "open-source" ], "summary": "Open-source social-engineering assessment framework maintained by TrustedSec.", "url": "tools/social-engineer-toolkit.html" }, { "id": "drozer", "type": "tool", "typeLabel": "Tool", "title": "drozer", "slug": "drozer", "era": "2010s-Present", "tags": [ "android-security", "mobile-security", "application-security", "ipc", "open-source" ], "summary": "Open-source Android security assessment framework.", "url": "tools/drozer.html" }, { "id": "alexandre-cazes", "type": "person", "typeLabel": "Person", "title": "Alexandre Cazes", "slug": "alexandre-cazes", "era": "2010s", "tags": [ "dark web", "darknet market", "alphabay", "drug trafficking", "operation bayonet", "canada", "thailand", "opsec failure" ], "summary": "Alexandre Cazes was a Canadian citizen who, under the online alias \"Alpha02,\" created and administered AlphaBay, which grew into the largest dark web marketplace for drugs, stolen data, and other illegal goods before its 2017 takedown. He was arrested in Bangkok, Thailand in July 2017 and died in Thai police custody days later, in what Thai authorities described as an apparent suicide.", "url": "people/alexandre-cazes.html" }, { "id": "amit-klein", "type": "person", "typeLabel": "Person", "title": "Amit Klein", "slug": "amit-klein", "era": "2000s-Present", "tags": [ "web security", "http", "application security", "protocol security", "device tracking", "israel", "academia" ], "summary": "Amit Klein is an Israeli security researcher who published the 2004 whitepaper that defined HTTP response splitting and co-authored the 2005 paper that introduced HTTP request smuggling. He later held research leadership roles at Sanctum, Cyota, Trusteer and SafeBreach, and is an associate professor of computer science at the Hebrew University of Jerusalem.", "url": "people/amit-klein.html" }, { "id": "angela-sasse", "type": "person", "typeLabel": "Person", "title": "M. Angela Sasse", "slug": "angela-sasse", "era": "1990s-Present", "tags": [ "usable security", "human factors", "passwords", "security economics", "hci", "academia", "riscs", "germany", "united kingdom" ], "summary": "Martina Angela Sasse is a German psychologist and computer scientist whose research established usable security as a distinct field, most influentially through the 1999 paper \"Users Are Not The Enemy\", co-authored with Anne Adams. She is Horst Görtz Endowed Professor of Human-Centred Security at Ruhr University Bochum and a part-time Professor of Human-Centred Technology at University College London.", "url": "people/angela-sasse.html" }, { "id": "bill-landreth-cracker", "type": "person", "typeLabel": "Person", "title": "Bill Landreth", "slug": "bill-landreth-cracker", "era": "1980s-Present", "tags": [ "early hackers", "1980s", "the inner circle", "gte telemail", "wire fraud", "hacker literature", "united states" ], "summary": "Bill Landreth, known by the handle \"The Cracker\", was an American teenage hacker who led the early-1980s group The Inner Circle and was prosecuted by U.S. federal authorities after intrusions into GTE's Telemail electronic mail service. He later co-wrote Out of the Inner Circle: A Hacker's Guide to Computer Security (1985) with Howard Rheingold, one of the first insider accounts of hacking published by a mainstream press.", "url": "people/bill-landreth-cracker.html" }, { "id": "bunnie-huang", "type": "person", "typeLabel": "Person", "title": "Andrew \"bunnie\" Huang", "slug": "bunnie-huang", "era": "2000s-Present", "tags": [ "hardware hacking", "reverse engineering", "Xbox", "open hardware", "Chumby", "DMCA", "right to repair", "electronics" ], "summary": "Andrew \"bunnie\" Huang is an American hardware engineer and hacker best known for reverse-engineering the original Xbox's security while a graduate student at MIT, publishing his findings in the book \"Hacking the Xbox: An Introduction to Reverse Engineering,\" and for subsequent work co-founding the Chumby internet appliance and building open-source hardware projects such as NeTV and the Novena laptop.", "url": "people/bunnie-huang.html" }, { "id": "chenxi-wang", "type": "person", "typeLabel": "Person", "title": "Chenxi Wang", "slug": "chenxi-wang", "era": "2000s-Present", "tags": [ "venture capital", "industry analyst", "code obfuscation", "cloud security", "container security", "women in security", "carnegie mellon" ], "summary": "Chenxi Wang is a computer scientist, security industry analyst and executive who founded Rain Capital, an early-stage venture fund focused on cybersecurity. Her doctoral research at the University of Virginia produced an early description of control-flow flattening, an obfuscation technique later nicknamed \"chenxification\".", "url": "people/chenxi-wang.html" }, { "id": "chris-goggans-erik-bloodaxe", "type": "person", "typeLabel": "Person", "title": "Chris Goggans", "slug": "chris-goggans-erik-bloodaxe", "era": "1980s-Present", "tags": [ "legion of doom", "erik bloodaxe", "phrack", "comsec", "masters of deception", "hacker crackdown", "texas", "infosec history" ], "summary": "Chris Goggans, known by the handle Erik Bloodaxe, was a member of the Legion of Doom hacker group in the late 1980s and early 1990s and edited Phrack magazine from 1993 to 1995. He co-founded Comsec Data Security, an early attempt to turn underground hacking expertise into a commercial security consultancy.", "url": "people/chris-goggans-erik-bloodaxe.html" }, { "id": "cindy-cohn", "type": "person", "typeLabel": "Person", "title": "Cindy Cohn", "slug": "cindy-cohn", "era": "1990s-Present", "tags": [ "digital rights", "encryption policy", "EFF", "crypto wars", "first amendment", "surveillance litigation", "internet law" ], "summary": "Cindy Cohn is an American civil liberties attorney specializing in Internet law who argued Bernstein v. United States, the case in which the Ninth Circuit held that encryption source code is speech protected by the First Amendment. She spent fifteen years as legal director and general counsel of the Electronic Frontier Foundation before serving as its executive director from 2015 to 2026.", "url": "people/cindy-cohn.html" }, { "id": "collin-mulliner", "type": "person", "typeLabel": "Person", "title": "Collin Mulliner", "slug": "collin-mulliner", "era": "2000s-Present", "tags": [ "mobile security", "sms security", "nfc", "android security", "fuzzing", "bluetooth", "embedded security", "firmware analysis" ], "summary": "Collin Mulliner is a German security researcher known for pioneering work on the security of mobile telephony interfaces, including SMS and MMS fuzzing, NFC-enabled phone attacks, and Android instrumentation and patching. His research demonstrated that the messaging and baseband layers of ordinary phones were a largely unexamined and remotely reachable attack surface.", "url": "people/collin-mulliner.html" }, { "id": "comex-ios-jailbreak", "type": "person", "typeLabel": "Person", "title": "Nicholas Allegra", "slug": "comex-ios-jailbreak", "era": "2010s-Present", "tags": [ "ios", "jailbreak", "exploit development", "mobile security", "apple", "browser exploit", "pwnie award" ], "summary": "Nicholas Allegra, better known by the online handle \"comex,\" is an American security researcher who created the JailbreakMe 2.0 and 3.0 browser-based iOS jailbreak tools, which let users jailbreak an iPhone or iPad simply by visiting a website.", "url": "people/comex-ios-jailbreak.html" }, { "id": "david-chaum", "type": "person", "typeLabel": "Person", "title": "David Chaum", "slug": "david-chaum", "era": "1980s-Present", "tags": [ "cryptography", "digital-cash", "digicash", "privacy", "mix-networks", "anonymity", "ecash", "cypherpunk" ], "summary": "David Chaum is an American computer scientist and cryptographer who invented the concept of digital cash and founded DigiCash, while also originating the mix network design that underlies later anonymity systems such as Tor.", "url": "people/david-chaum.html" }, { "id": "dawn-song", "type": "person", "typeLabel": "Person", "title": "Dawn Song", "slug": "dawn-song", "era": "2000s-Present", "tags": [ "academia", "program analysis", "binary analysis", "malware defense", "applied cryptography", "adversarial machine learning", "blockchain", "uc berkeley" ], "summary": "Dawn Song is a Chinese-American computer scientist and professor of electrical engineering and computer sciences at the University of California, Berkeley, known for research in software security, automated binary and program analysis, applied cryptography, adversarial machine learning, and blockchain privacy. She was named a MacArthur Fellow and a Guggenheim Fellow in 2010 and an ACM Fellow in 2019.", "url": "people/dawn-song.html" }, { "id": "dildog-christien-rioux", "type": "person", "typeLabel": "Person", "title": "Christien Rioux", "slug": "dildog-christien-rioux", "era": "1990s-Present", "tags": [ "L0pht", "Cult of the Dead Cow", "Back Orifice 2000", "Veracode", "application security", "buffer overflows", "Veilid", "binary analysis" ], "summary": "Christien Rioux, known by the handle DilDog, is an American computer security researcher who was a member of L0pht Heavy Industries and the Cult of the Dead Cow, wrote the original code for the Back Orifice 2000 remote administration tool, and co-founded the application security company Veracode.", "url": "people/dildog-christien-rioux.html" }, { "id": "eli-ladopoulos-acid-phreak", "type": "person", "typeLabel": "Person", "title": "Elias Ladopoulos", "slug": "eli-ladopoulos-acid-phreak", "era": "1980s-Present", "tags": [ "masters of deception", "phone phreaking", "legion of doom", "hacker crackdown", "computer crime law", "new york", "information security" ], "summary": "Elias Ladopoulos, known by the handle Acid Phreak, is a New York technologist who co-founded the hacking group Masters of Deception in the late 1980s and was one of five members federally indicted in 1992 for intrusions into telephone company systems. After serving his sentence he worked in professional information security and later founded technology companies.", "url": "people/eli-ladopoulos-acid-phreak.html" }, { "id": "eva-galperin", "type": "person", "typeLabel": "Person", "title": "Eva Galperin", "slug": "eva-galperin", "era": "2000s-Present", "tags": [ "stalkerware", "digital rights", "eff", "surveillance", "threat research", "privacy advocacy", "civil society security" ], "summary": "Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation, where she has worked since 2007 on protecting activists, journalists, and other targeted users from malware and surveillance. She is best known for her campaign to make antivirus vendors detect stalkerware and for co-founding the Coalition Against Stalkerware.", "url": "people/eva-galperin.html" }, { "id": "evgeniy-bogachev", "type": "person", "typeLabel": "Person", "title": "Evgeniy Bogachev", "slug": "evgeniy-bogachev", "era": "2000s-Present", "tags": [ "botnet", "banking-trojan", "ransomware", "russia", "fbi-most-wanted", "cybercrime", "gameover-zeus", "cryptolocker" ], "summary": "Evgeniy Bogachev is a Russian cybercriminal identified by U.S. authorities as the creator and operator of the GameOver Zeus botnet and the figure behind the distribution of CryptoLocker ransomware, and he remains a fugitive on the FBI's Cyber Most Wanted list with a $3 million reward for information leading to his capture.", "url": "people/evgeniy-bogachev.html" }, { "id": "fred-cohen", "type": "person", "typeLabel": "Person", "title": "Fred Cohen", "slug": "fred-cohen", "era": "1980s-Present", "tags": [ "computer viruses", "malware theory", "academic research", "undecidability", "deception defense", "information assurance", "usc" ], "summary": "Fred Cohen is an American computer scientist who in 1983 conducted the first documented controlled experiments with self-replicating programs on a multi-user Unix system and who gave the computer virus its formal definition in his 1984 paper, popularising a term suggested to him by Leonard Adleman. His work established that no algorithm can perfectly detect all possible viruses.", "url": "people/fred-cohen.html" }, { "id": "giorgio-maone", "type": "person", "typeLabel": "Person", "title": "Giorgio Maone", "slug": "giorgio-maone", "era": "2000s-Present", "tags": [ "browser security", "noscript", "firefox", "javascript", "xss", "tor browser", "open source", "mozilla" ], "summary": "Giorgio Maone is the software developer who created and maintains NoScript, a browser extension first released in 2005 that blocks JavaScript and other active web content by default and permits it only on user-trusted sites. He has been a member of the Mozilla Security Group since 2007 and works on the Tor Browser as part of the Tor Project's Applications Development Team.", "url": "people/giorgio-maone.html" }, { "id": "joe-engressia", "type": "person", "typeLabel": "Person", "title": "Joe Engressia", "slug": "joe-engressia", "era": "1950s-2007", "tags": [ "phone phreaking", "2600 hz", "blue box", "telephony", "ma bell", "1970s", "hacker culture" ], "summary": "Josef Carl Engressia Jr. (1949-2007), later legally named Joybubbles, was a blind American phone phreak with absolute pitch who discovered as a child that he could whistle the 2600 Hz tone used to signal idle long-distance trunks on the Bell System network. He became one of the best-known figures of the 1960s and 1970s phone phreak subculture and was profiled in Ron Rosenbaum's 1971 Esquire article \"Secrets of the Little Blue Box\".", "url": "people/joe-engressia.html" }, { "id": "john-hultquist", "type": "person", "typeLabel": "Person", "title": "John Hultquist", "slug": "john-hultquist", "era": "2010s-Present", "tags": [ "threat-intelligence", "sandworm", "mandiant", "google", "fireeye", "isight-partners", "russia", "apt-tracking" ], "summary": "John Hultquist is an American threat intelligence analyst who worked at iSight Partners, FireEye, and Mandiant before becoming Chief Analyst at Google's Threat Intelligence Group, best known for his team's role in identifying and naming the Sandworm hacking group.", "url": "people/john-hultquist.html" }, { "id": "jon-lech-johansen-dvd-jon", "type": "person", "typeLabel": "Person", "title": "Jon Lech Johansen", "slug": "jon-lech-johansen-dvd-jon", "era": "1990s-Present", "tags": [ "decss", "dvd", "drm", "reverse engineering", "norway", "copyright law", "fairplay", "digital rights" ], "summary": "Jon Lech Johansen, widely known by the nickname \"DVD Jon\", is a Norwegian software engineer who as a teenager in 1999 helped release DeCSS, one of the first freely available programs able to decrypt the Content Scramble System used on commercial DVD-Video discs. He was prosecuted in Norway over the release and acquitted in 2003, and later wrote several tools that circumvented Apple's FairPlay digital rights management.", "url": "people/jon-lech-johansen-dvd-jon.html" }, { "id": "kate-temkin", "type": "person", "typeLabel": "Person", "title": "Kate Temkin", "slug": "kate-temkin", "era": "2010s-Present", "tags": [ "usb", "hardware hacking", "console hacking", "reverse engineering", "fpga", "fault injection", "open source hardware", "nintendo switch" ], "summary": "Kate Temkin is a hardware and firmware engineer known for discovering and disclosing Fusée Gelée, an unpatchable bootROM vulnerability in NVIDIA Tegra processors (CVE-2018-6242), and for open-source USB and hardware-hacking tools including Facedancer, GreatFET, GlitchKit, and LUNA.", "url": "people/kate-temkin.html" }, { "id": "lewis-de-payne", "type": "person", "typeLabel": "Person", "title": "Lewis De Payne", "slug": "lewis-de-payne", "era": "1970s-1990s", "tags": [ "phone phreaking", "social engineering", "los angeles", "kevin mitnick", "telephone networks", "computer fraud", "1980s underground" ], "summary": "Lewis De Payne, known by the handle Rosco, is an American former phone phreaker and computer hacker who was a leading figure in the Southern California phreaking scene of the late 1970s and 1980s and an early close associate of Kevin Mitnick. He was charged as Mitnick's co-defendant in the 25-count federal indictment returned in Los Angeles in September 1996.", "url": "people/lewis-de-payne.html" }, { "id": "liveoverflow-fabian-faessler", "type": "person", "typeLabel": "Person", "title": "Fabian Faessler", "slug": "liveoverflow-fabian-faessler", "era": "2015-Present", "tags": [ "security-education", "youtube", "ctf", "binary-exploitation", "browser-exploitation", "game-hacking", "reverse-engineering", "germany" ], "summary": "Fabian Faessler, known online as LiveOverflow, is a German security researcher and educator whose YouTube channel, started in March 2015, teaches capture-the-flag technique, binary and browser exploitation, fuzzing and game hacking. He is also the founder and CEO of the Berlin company Security Flag GmbH, registered in January 2019.", "url": "people/liveoverflow-fabian-faessler.html" }, { "id": "lorrie-cranor", "type": "person", "typeLabel": "Person", "title": "Lorrie Faith Cranor", "slug": "lorrie-cranor", "era": "2000s-Present", "tags": [ "usable security", "privacy", "passwords", "carnegie mellon", "p3p", "ftc", "academia", "soups" ], "summary": "Lorrie Faith Cranor is an American computer scientist and engineering-and-public-policy researcher at Carnegie Mellon University, where she directs the CyLab Security and Privacy Institute and the CyLab Usable Privacy and Security Laboratory (CUPS). She helped establish usable privacy and security as a research field, chaired the W3C Platform for Privacy Preferences (P3P) working group, founded the Symposium on Usable Privacy and Security (SOUPS), and served as Chief Technologist of the U.S. Federal Trade Commission in 2016.", "url": "people/lorrie-cranor.html" }, { "id": "loyd-blankenship-mentor", "type": "person", "typeLabel": "Person", "title": "Loyd Blankenship", "slug": "loyd-blankenship-mentor", "era": "1980s-1990s", "tags": [ "hacker manifesto", "phrack", "legion of doom", "the mentor", "bbs", "steve jackson games", "gurps cyberpunk", "hacker culture" ], "summary": "Loyd Blankenship, known by the handle The Mentor, is an American hacker and game designer who wrote The Conscience of a Hacker, the 1986 Phrack essay universally known as The Hacker Manifesto. His employment at Steve Jackson Games placed him at the centre of the 1990 US Secret Service raid that produced the landmark case Steve Jackson Games, Inc. v. United States Secret Service.", "url": "people/loyd-blankenship-mentor.html" }, { "id": "maksim-yakubets", "type": "person", "typeLabel": "Person", "title": "Maksim Yakubets", "slug": "maksim-yakubets", "era": "2000s-Present", "tags": [ "cybercrime", "evil-corp", "dridex", "zeus", "banking-trojan", "ransomware", "sanctions", "russia" ], "summary": "Maksim Viktorovich Yakubets is a Russian national identified by US and UK authorities as the leader of Evil Corp, the Moscow-based group behind the Dridex banking malware. He was indicted in the United States and sanctioned by the US Treasury on 5 December 2019, when the State Department also announced a reward of up to $5 million for information leading to his arrest.", "url": "people/maksim-yakubets.html" }, { "id": "marcia-hofmann", "type": "person", "typeLabel": "Person", "title": "Marcia Hofmann", "slug": "marcia-hofmann", "era": "2000s-Present", "tags": [ "digital rights", "cfaa", "eff", "privacy law", "security research", "free speech", "foia" ], "summary": "Marcia Clare Hofmann is an American attorney known for her work on electronic privacy, computer crime law and free expression, including years as a staff attorney and special counsel at the Electronic Frontier Foundation. She has defended programmers and security researchers in high-profile computer crime cases, among them the appeals of Andrew \"weev\" Auernheimer and the Lavabit encryption-key dispute.", "url": "people/marcia-hofmann.html" }, { "id": "mark-abene-phiber-optik", "type": "person", "typeLabel": "Person", "title": "Mark Abene", "slug": "mark-abene-phiber-optik", "era": "1980s-Present", "tags": [ "phone phreaking", "masters of deception", "legion of doom", "hacker crackdown", "computer crime law", "new york", "security consulting" ], "summary": "Mark Abene, known by the handle Phiber Optik, is an American hacker who belonged to both the Legion of Doom and the New York group Masters of Deception, and who became one of the best-known defendants of the early 1990s federal crackdown on computer intrusion. After serving a one-year federal sentence and being released in November 1994, he worked as an information security consultant and public speaker.", "url": "people/mark-abene-phiber-optik.html" }, { "id": "mark-curphey", "type": "person", "typeLabel": "Person", "title": "Mark Curphey", "slug": "mark-curphey", "era": "2000s-Present", "tags": [ "owasp", "application security", "appsec", "open source", "software supply chain", "startup founder" ], "summary": "Mark Curphey is a software and security practitioner who started the Open Web Application Security Project (OWASP) in 2001, the open community effort that became one of the most widely referenced sources of web application security guidance. He later founded the software composition analysis company SourceClear and co-founded Crash Override.", "url": "people/mark-curphey.html" }, { "id": "micah-scott-scanlime", "type": "person", "typeLabel": "Person", "title": "Micah Elizabeth Scott", "slug": "micah-scott-scanlime", "era": "2000s-Present", "tags": [ "hardware reverse engineering", "embedded systems", "usb", "open source hardware", "firmware", "led art", "documentation" ], "summary": "Micah Elizabeth Scott, known online as scanlime, is an American engineer and artist who works on hardware reverse engineering, embedded firmware and open source hardware. She is the creator of the Fadecandy LED controller, a co-author of the Fyre rendering program, the developer of the Virtual USB Analyzer at VMware, and the author of a long-running video series documenting her reverse engineering work.", "url": "people/micah-scott-scanlime.html" }, { "id": "orin-kerr", "type": "person", "typeLabel": "Person", "title": "Orin Kerr", "slug": "orin-kerr", "era": "2000s-Present", "tags": [ "cfaa", "computer crime law", "fourth amendment", "digital privacy", "surveillance law", "legal scholarship", "academia" ], "summary": "Orin Samuel Kerr is an American legal scholar and former U.S. Department of Justice computer crime prosecutor who is widely regarded as a founding figure in the academic field of computer crime law. His work on the Computer Fraud and Abuse Act (CFAA) and on the Fourth Amendment's application to digital evidence has been cited by courts up to and including the U.S. Supreme Court.", "url": "people/orin-kerr.html" }, { "id": "paras-jha", "type": "person", "typeLabel": "Person", "title": "Paras Jha", "slug": "paras-jha", "era": "2010s-Present", "tags": [ "mirai", "botnet", "ddos", "iot-security", "cybercrime", "rutgers", "click-fraud" ], "summary": "Paras Jha is an American computer science student who, under the online alias \"Anna-senpai,\" co-authored the Mirai botnet malware and pleaded guilty in federal court in December 2017 to computer crimes related to Mirai and to a separate series of denial-of-service attacks against Rutgers University.", "url": "people/paras-jha.html" }, { "id": "paul-le-roux", "type": "person", "typeLabel": "Person", "title": "Paul Le Roux", "slug": "paul-le-roux", "era": "1990s-2010s", "tags": [ "encryption", "disk encryption", "e4m", "truecrypt", "cybercrime", "transnational crime", "drug trafficking", "arms trafficking", "informant" ], "summary": "Paul Le Roux is a Zimbabwe-born programmer who wrote the disk-encryption program E4M (Encryption for the Masses) in the late 1990s before building a sprawling transnational criminal organization involved in drug trafficking, arms smuggling, and murder-for-hire, which led to his 2012 arrest and 2020 sentencing.", "url": "people/paul-le-roux.html" }, { "id": "peter-tippett", "type": "person", "typeLabel": "Person", "title": "Peter Tippett", "slug": "peter-tippett", "era": "1980s-Present", "tags": [ "antivirus", "malware defense", "certus international", "ncsa", "icsa labs", "trusecure", "risk management", "security industry" ], "summary": "Peter Tippett is an American physician and software developer who founded the Cleveland software house FoundationWare, later renamed Certus International, whose commercial anti-virus products included Vaccine and NOVI. After Symantec acquired Certus International in late 1992 and folded its technology into Norton AntiVirus, Tippett moved into industry leadership, serving as president of the National Computer Security Association and later as chief scientist of ICSA.net and a senior executive at its successors TruSecure and Cybertrust.", "url": "people/peter-tippett.html" }, { "id": "ralph-merkle", "type": "person", "typeLabel": "Person", "title": "Ralph Merkle", "slug": "ralph-merkle", "era": "1970s-Present", "tags": [ "cryptography", "public key cryptography", "merkle trees", "hash functions", "digital signatures", "nanotechnology", "cryonics" ], "summary": "Ralph C. Merkle is an American computer scientist and cryptographer who independently conceived public key cryptography as an undergraduate in 1974 and later invented Merkle trees, the hash-tree structure used in digital signatures, distributed file systems, and blockchains. He is also known for work on cryptographic hash functions, block ciphers at Xerox PARC, and, in a second career, molecular nanotechnology.", "url": "people/ralph-merkle.html" }, { "id": "randy-suess", "type": "person", "typeLabel": "Person", "title": "Randy Suess", "slug": "randy-suess", "era": "1978-2019", "tags": [ "bbs", "cbbs", "chinet", "online communities", "dial-up", "s-100", "public-access unix", "chicago" ], "summary": "Randy Suess (1945-2019) was an American computer hobbyist who, with Ward Christensen, built CBBS, generally recognized as the first computer bulletin board system, brought online in Chicago on February 16, 1978. He later founded Chinet, one of the earliest public-access Unix systems.", "url": "people/randy-suess.html" }, { "id": "renee-diresta", "type": "person", "typeLabel": "Person", "title": "Renee DiResta", "slug": "renee-diresta", "era": "2010s-Present", "tags": [ "disinformation", "influence operations", "platform manipulation", "Stanford Internet Observatory", "information warfare", "election integrity", "propaganda", "social media research" ], "summary": "Renee DiResta is an American researcher and writer on online manipulation, propaganda, and state-sponsored influence operations, best known as lead author of a Senate Intelligence Committee report on Russia's Internet Research Agency and as technical research manager at the Stanford Internet Observatory. She is the author of Invisible Rulers (2024) and an associate research professor at Georgetown University's McCourt School of Public Policy.", "url": "people/renee-diresta.html" }, { "id": "ross-ulbricht", "type": "person", "typeLabel": "Person", "title": "Ross Ulbricht", "slug": "ross-ulbricht", "era": "2010s-2020s", "tags": [ "silk road", "dark web", "dread pirate roberts", "bitcoin", "tor", "darknet markets", "cybercrime", "presidential pardon" ], "summary": "Ross Ulbricht is an American who created and operated the Silk Road, an early and influential dark web marketplace for illegal goods, under the alias \"Dread Pirate Roberts.\" Convicted in 2015 and sentenced to life in prison without parole, he was granted a full and unconditional pardon by President Donald Trump in January 2025.", "url": "people/ross-ulbricht.html" }, { "id": "saurik-jay-freeman", "type": "person", "typeLabel": "Person", "title": "Jay Freeman", "slug": "saurik-jay-freeman", "era": "2000s-Present", "tags": [ "ios jailbreaking", "cydia", "package manager", "app store alternative", "mobile security", "reverse engineering", "antitrust" ], "summary": "Jay Freeman, known online as \"saurik,\" is an American software developer and hacker best known for creating Cydia, the graphical package manager and alternative app distribution platform for jailbroken iOS devices.", "url": "people/saurik-jay-freeman.html" }, { "id": "shafi-goldwasser", "type": "person", "typeLabel": "Person", "title": "Shafi Goldwasser", "slug": "shafi-goldwasser", "era": "1980s-Present", "tags": [ "cryptography", "zero-knowledge proofs", "probabilistic encryption", "turing award", "complexity theory", "provable security", "mit" ], "summary": "Shafi Goldwasser is an American-Israeli computer scientist and cryptographer whose work with Silvio Micali established the theoretical foundations of modern provable security, including probabilistic encryption and zero-knowledge proofs. She and Micali received the 2012 ACM A.M. Turing Award for this body of work.", "url": "people/shafi-goldwasser.html" }, { "id": "silvio-micali", "type": "person", "typeLabel": "Person", "title": "Silvio Micali", "slug": "silvio-micali", "era": "1980s-Present", "tags": [ "cryptography", "zero-knowledge proofs", "probabilistic encryption", "turing award", "blockchain", "algorand", "mit" ], "summary": "Silvio Micali is an Italian-American computer scientist and MIT professor who co-invented probabilistic encryption and zero-knowledge proofs, work for which he shared the 2012 ACM Turing Award, and who later founded the Algorand blockchain protocol.", "url": "people/silvio-micali.html" }, { "id": "skape-matt-miller", "type": "person", "typeLabel": "Person", "title": "Matt Miller", "slug": "skape-matt-miller", "era": "2000s-Present", "tags": [ "exploit development", "metasploit", "meterpreter", "shellcode", "windows internals", "exploit mitigation", "memory safety", "microsoft", "uninformed journal" ], "summary": "Matt Miller, known online as skape, is a security researcher who was a core Metasploit Framework developer from 2004 to 2008, documented the Meterpreter payload, and edited the Uninformed journal before joining Microsoft, where he worked on Windows exploit mitigation research.", "url": "people/skape-matt-miller.html" }, { "id": "susan-headley", "type": "person", "typeLabel": "Person", "title": "Susan Headley", "slug": "susan-headley", "era": "1970s-1990s", "tags": [ "phone phreaking", "social engineering", "Susan Thunder", "Pacific Bell", "Los Angeles", "pretexting", "Senate testimony", "DEF CON" ], "summary": "Susan Headley, known by the handle Susan Thunder (also rendered Susy Thunder), is an American former phone phreak and computer intruder who was active in the Los Angeles scene of the late 1970s and early 1980s. She is remembered chiefly as an early practitioner of what she called psychological subversion, the manipulation of people rather than machines to obtain access to telephone and computer systems.", "url": "people/susan-headley.html" }, { "id": "taher-elgamal", "type": "person", "typeLabel": "Person", "title": "Taher Elgamal", "slug": "taher-elgamal", "era": "1980s-Present", "tags": [ "cryptography", "public-key cryptography", "discrete logarithm", "ssl", "tls", "netscape", "digital signatures", "web security" ], "summary": "Taher Elgamal is an Egyptian-American cryptographer who published the ElGamal public-key cryptosystem and signature scheme in 1985, the latter forming the basis of the NIST Digital Signature Algorithm. As chief scientist at Netscape Communications from 1995 to 1998 he led the company's security work during the development and release of the Secure Sockets Layer protocol, and he is widely described as the \"father of SSL.\"", "url": "people/taher-elgamal.html" }, { "id": "tom-jennings", "type": "person", "typeLabel": "Person", "title": "Tom Jennings", "slug": "tom-jennings", "era": "1980s-Present", "tags": [ "fidonet", "bbs", "store-and-forward", "networking", "diy culture", "zines", "queercore", "internet history" ], "summary": "Tom Jennings is an American programmer and artist who wrote the Fido bulletin board system software in 1983–1984 and then created FidoNet, the store-and-forward messaging network that linked dial-up BBSes worldwide during the 1980s and early 1990s. He was also an early internet service provider operator through The Little Garden and a publisher of the queercore zine Homocore.", "url": "people/tom-jennings.html" }, { "id": "val-smith", "type": "person", "typeLabel": "Person", "title": "Val Smith", "slug": "val-smith", "era": "2000s-Present", "tags": [ "penetration testing", "malware research", "Metasploit", "Attack Research", "Offensive Computing", "post-exploitation", "reverse engineering", "DEF CON" ], "summary": "Val Smith, known as \"Valsmith\", is an American security researcher who co-founded the public malware research project Offensive Computing and later founded the penetration testing firm Attack Research, LLC. He worked on the Metasploit Project development team and presented widely at DEF CON and Black Hat on tactical exploitation, post-exploitation and malware analysis.", "url": "people/val-smith.html" }, { "id": "vitaly-kamluk", "type": "person", "typeLabel": "Person", "title": "Vitaly Kamluk", "slug": "vitaly-kamluk", "era": "2000s-Present", "tags": [ "malware research", "digital forensics", "kaspersky", "great", "interpol", "botnet takedown", "bitscout", "apt research" ], "summary": "Vitaly Kamluk is a Belarusian malware researcher and digital forensics specialist with Kaspersky's Global Research and Analysis Team, who was seconded in 2014 to the INTERPOL Global Complex for Innovation in Singapore. He took part in the 2015 international takedown of the Simda botnet and released the open-source remote forensics tool Bitscout in 2017.", "url": "people/vitaly-kamluk.html" }, { "id": "ward-christensen", "type": "person", "typeLabel": "Person", "title": "Ward Christensen", "slug": "ward-christensen", "era": "1970s-2024", "tags": [ "bbs", "xmodem", "cbbs", "file transfer", "modems", "cp/m", "online communities", "ibm" ], "summary": "Ward Christensen was an American computer hobbyist and longtime IBM systems engineer who created the XMODEM file transfer protocol in 1977 and, with Randy Suess, brought the first bulletin board system, CBBS, online in Chicago on February 16, 1978. His work established the technical and social template for dial-up online communities that preceded the public Internet.", "url": "people/ward-christensen.html" }, { "id": "yan-shoshitaishvili", "type": "person", "typeLabel": "Person", "title": "Yan Shoshitaishvili", "slug": "yan-shoshitaishvili", "era": "2010s-Present", "tags": [ "binary analysis", "symbolic execution", "angr", "shellphish", "ctf", "academia", "security education", "cyber grand challenge" ], "summary": "Yan Shoshitaishvili, known online as Zardus, is a computer security researcher and associate professor at Arizona State University who co-created the open-source binary analysis framework angr. He is a long-time member and captain emeritus of the Shellphish CTF team, helped build the autonomous hacking system Shellphish entered in the DARPA Cyber Grand Challenge, and founded the pwn.college security education platform.", "url": "people/yan-shoshitaishvili.html" }, { "id": "dmitry-sklyarov", "type": "person", "typeLabel": "Person", "title": "Dmitry Sklyarov", "slug": "dmitry-sklyarov", "era": "2001-Present", "tags": [ "dmca", "digital-rights", "elcomsoft", "ebook-security", "def-con" ], "summary": "Russian programmer whose 2001 arrest under the DMCA became a major digital-rights case.", "url": "people/dmitry-sklyarov.html" }, { "id": "david-kernell", "type": "person", "typeLabel": "Person", "title": "David Kernell", "slug": "david-kernell", "era": "2008-2010", "tags": [ "unauthorized-access", "yahoo", "sarah-palin", "computer-crime", "doj" ], "summary": "University student convicted for unauthorized access to Sarah Palin’s Yahoo email account in 2008.", "url": "people/david-kernell.html" }, { "id": "robert-morris-sr", "type": "person", "typeLabel": "Person", "title": "Robert Morris Sr.", "slug": "robert-morris-sr", "era": "1960-2011", "tags": [ "cryptography", "unix", "bell-labs", "password-hashing", "multics" ], "summary": "American cryptographer and Bell Labs researcher who contributed to early Unix security.", "url": "people/robert-morris-sr.html" }, { "id": "jeff-williams-owasp", "type": "person", "typeLabel": "Person", "title": "Jeff Williams", "slug": "jeff-williams-owasp", "era": "2001-Present", "tags": [ "application-security", "owasp", "contrast-security", "owasp-top-10", "devsecops" ], "summary": "Application-security leader who helped found OWASP and co-founded Contrast Security.", "url": "people/jeff-williams-owasp.html" }, { "id": "rodrigo-rubira-branco-bsdaemon", "type": "person", "typeLabel": "Person", "title": "Rodrigo Rubira Branco (BSDaemon)", "slug": "rodrigo-rubira-branco-bsdaemon", "era": "2000s-Present", "tags": [ "vulnerability-research", "kernel-security", "malware-analysis", "h2hc", "brazil" ], "summary": "Brazilian security researcher known as BSDaemon, whose work includes vulnerability research, kernel security, and the Hackers to Hackers Conference (H2HC).", "url": "people/rodrigo-rubira-branco-bsdaemon.html" }, { "id": "james-p-anderson", "type": "person", "typeLabel": "Person", "title": "James P. Anderson", "slug": "james-p-anderson", "era": "1960s-2014", "tags": [ "computer-security", "penetration-testing", "security-evaluation", "reference-monitor", "research" ], "summary": "Computer-security pioneer whose 1972 planning study formalized malicious-user threats, penetration techniques, and engineering requirements for secure multi-user systems.", "url": "people/james-p-anderson.html" }, { "id": "alan-turing", "type": "person", "typeLabel": "Person", "title": "Alan Turing", "slug": "alan-turing", "era": "1930s-1954", "tags": [ "computing", "cryptanalysis", "codebreaking", "mathematics", "academic-research" ], "summary": "British mathematician, cryptanalyst, and computing pioneer whose work on computability and Enigma cryptanalysis became foundational to modern computing and security history.", "url": "people/alan-turing.html" }, { "id": "steven-levy", "type": "person", "typeLabel": "Person", "title": "Steven Levy", "slug": "steven-levy", "era": "1984-Present", "tags": [ "author", "hacker-culture", "computing-history", "books" ], "summary": "Technology writer whose 1984 book Hackers: Heroes of the Computer Revolution documented formative hacker communities and popularized the phrase Hacker Ethic.", "url": "people/steven-levy.html" }, { "id": "clifford-stoll", "type": "person", "typeLabel": "Person", "title": "Clifford Stoll", "slug": "clifford-stoll", "era": "1986-Present", "tags": [ "author", "computer-espionage", "incident-response", "books" ], "summary": "Astronomer and author whose investigation of a small accounting anomaly at Lawrence Berkeley Laboratory became a landmark computer-espionage case and the book The Cuckoo's Egg.", "url": "people/clifford-stoll.html" }, { "id": "gabriella-coleman", "type": "person", "typeLabel": "Person", "title": "Gabriella Coleman", "slug": "gabriella-coleman", "era": "2000s-Present", "tags": [ "academic-research", "anthropology", "hacker-culture", "anonymous", "books" ], "summary": "Anthropologist and Harvard professor whose research and books examine hacker culture, free software, Anonymous, and digital activism.", "url": "people/gabriella-coleman.html" }, { "id": "katie-hafner", "type": "person", "typeLabel": "Person", "title": "Katie Hafner", "slug": "katie-hafner", "era": "1991-Present", "tags": [ "author", "journalism", "hacker-culture", "internet-history", "books" ], "summary": "Technology journalist and co-author of Cyberpunk: Outlaws and Hackers on the Computer Frontier, an early book-length account of 1980s hacker culture.", "url": "people/katie-hafner.html" }, { "id": "agnes-meyer-driscoll", "type": "person", "typeLabel": "Person", "title": "Agnes Meyer Driscoll", "slug": "agnes-meyer-driscoll", "era": "1910s-1971", "tags": [ "cryptanalysis", "naval-cryptology", "codebreaking", "women-in-security" ], "summary": "American naval cryptanalyst whose work on Japanese naval systems made her a major figure in twentieth-century U.S. cryptology.", "url": "people/agnes-meyer-driscoll.html" }, { "id": "butler-lampson", "type": "person", "typeLabel": "Person", "title": "Butler W. Lampson", "slug": "butler-lampson", "era": "1960s-Present", "tags": [ "computer-security", "operating-systems", "access-control", "distributed-systems", "research" ], "summary": "Computer scientist whose work has influenced operating systems, distributed computing, access control, and computer-security design.", "url": "people/butler-lampson.html" }, { "id": "cynthia-dwork", "type": "person", "typeLabel": "Person", "title": "Cynthia Dwork", "slug": "cynthia-dwork", "era": "1980s-Present", "tags": [ "privacy", "differential-privacy", "cryptography", "theoretical-computer-science", "academic-research" ], "summary": "Computer scientist known for foundational contributions to differential privacy, distributed computing, cryptography, and theoretical computer science.", "url": "people/cynthia-dwork.html" }, { "id": "dan-boneh", "type": "person", "typeLabel": "Person", "title": "Dan Boneh", "slug": "dan-boneh", "era": "1990s-Present", "tags": [ "cryptography", "computer-security", "applied-cryptography", "web-security", "academic-research" ], "summary": "Stanford computer scientist whose research focuses on applied cryptography and computer security, including cryptosystems, web security, mobile security, and cryptanalysis.", "url": "people/dan-boneh.html" }, { "id": "david-kahn", "type": "person", "typeLabel": "Person", "title": "David Kahn", "slug": "david-kahn", "era": "1950s-2024", "tags": [ "cryptography-history", "journalism", "books", "signals-intelligence" ], "summary": "American journalist and historian whose 1967 book The Codebreakers brought the history of cryptology to a broad readership.", "url": "people/david-kahn.html" }, { "id": "donald-davies", "type": "person", "typeLabel": "Person", "title": "Donald Davies", "slug": "donald-davies", "era": "1940s-2000", "tags": [ "networking", "packet-switching", "network-security", "academic-research" ], "summary": "British computer scientist whose packet-switching work at the National Physical Laboratory helped establish the technical basis of modern data networks.", "url": "people/donald-davies.html" }, { "id": "dorothy-denning", "type": "person", "typeLabel": "Person", "title": "Dorothy E. Denning", "slug": "dorothy-denning", "era": "1970s-Present", "tags": [ "computer-security", "intrusion-detection", "cryptography", "access-control", "academic-research" ], "summary": "American information-security researcher whose work spans access control, intrusion detection, cryptography, and the social dimensions of computer security.", "url": "people/dorothy-denning.html" }, { "id": "elizebeth-smith-friedman", "type": "person", "typeLabel": "Person", "title": "Elizebeth Smith Friedman", "slug": "elizebeth-smith-friedman", "era": "1910s-1980", "tags": [ "cryptanalysis", "law-enforcement", "codebreaking", "women-in-security" ], "summary": "American cryptanalyst whose work ranged from wartime codebreaking to investigations of Prohibition-era smuggling and Axis espionage.", "url": "people/elizebeth-smith-friedman.html" }, { "id": "frank-b-rowlett", "type": "person", "typeLabel": "Person", "title": "Frank B. Rowlett", "slug": "frank-b-rowlett", "era": "1930s-1998", "tags": [ "cryptanalysis", "cryptography", "signals-intelligence", "communications-security" ], "summary": "American cryptologic pioneer who helped solve Japanese diplomatic cipher systems and helped protect U.S. communications during the Second World War.", "url": "people/frank-b-rowlett.html" }, { "id": "fred-kaplan", "type": "person", "typeLabel": "Person", "title": "Fred Kaplan", "slug": "fred-kaplan", "era": "2016-Present", "tags": [ "author", "journalism", "cyberwar", "national-security", "books" ], "summary": "National-security journalist and author of Dark Territory: The Secret History of Cyber War.", "url": "people/fred-kaplan.html" }, { "id": "james-bamford", "type": "person", "typeLabel": "Person", "title": "James Bamford", "slug": "james-bamford", "era": "1982-Present", "tags": [ "author", "journalism", "signals-intelligence", "nsa", "books" ], "summary": "Investigative journalist and author whose books, including The Puzzle Palace and Body of Secrets, document the National Security Agency and signals intelligence.", "url": "people/james-bamford.html" }, { "id": "joan-feigenbaum", "type": "person", "typeLabel": "Person", "title": "Joan Feigenbaum", "slug": "joan-feigenbaum", "era": "1980s-Present", "tags": [ "security", "privacy", "trust-management", "cryptography", "academic-research" ], "summary": "Computer scientist whose research includes security, privacy, trust management, Internet algorithms, computational complexity, and the relationship between computing and law.", "url": "people/joan-feigenbaum.html" }, { "id": "john-markoff", "type": "person", "typeLabel": "Person", "title": "John Markoff", "slug": "john-markoff", "era": "1985-Present", "tags": [ "author", "journalism", "hacker-culture", "cybersecurity", "books" ], "summary": "Technology journalist and co-author of Cyberpunk: Outlaws and Hackers on the Computer Frontier, a book-length account of early hacker culture.", "url": "people/john-markoff.html" }, { "id": "joseph-menn", "type": "person", "typeLabel": "Person", "title": "Joseph Menn", "slug": "joseph-menn", "era": "2003-Present", "tags": [ "author", "journalism", "cybersecurity", "hacker-culture", "books" ], "summary": "Investigative cybersecurity journalist and author of Cult of the Dead Cow, a history of the influential hacker collective.", "url": "people/joseph-menn.html" }, { "id": "parmy-olson", "type": "person", "typeLabel": "Person", "title": "Parmy Olson", "slug": "parmy-olson", "era": "2012-Present", "tags": [ "author", "journalism", "hacktivism", "anonymous", "books" ], "summary": "Technology journalist and author of We Are Anonymous, a reported account of Anonymous and LulzSec.", "url": "people/parmy-olson.html" }, { "id": "peter-g-neumann", "type": "person", "typeLabel": "Person", "title": "Peter G. Neumann", "slug": "peter-g-neumann", "era": "1960s-Present", "tags": [ "computer-security", "system-safety", "reliability", "multics", "risk-analysis" ], "summary": "Computer-security and reliability researcher associated with SRI International, known for work on trustworthy systems, the RISKS Forum, and analysis of computer-related risk.", "url": "people/peter-g-neumann.html" }, { "id": "peter-sommer-hugo-cornwall", "type": "person", "typeLabel": "Person", "title": "Peter Sommer (Hugo Cornwall)", "slug": "peter-sommer-hugo-cornwall", "era": "1985-Present", "tags": [ "author", "digital-forensics", "computer-security", "hacker-culture", "books" ], "summary": "Digital-forensics scholar and security consultant who wrote The Hacker’s Handbook under the pseudonym Hugo Cornwall.", "url": "people/peter-sommer-hugo-cornwall.html" }, { "id": "phil-lapsley", "type": "person", "typeLabel": "Person", "title": "Phil Lapsley", "slug": "phil-lapsley", "era": "1986-Present", "tags": [ "author", "engineering", "phone-phreaking", "internet-history", "books" ], "summary": "Engineer and author of Exploding the Phone, a documented history of telephone phreaking and the people who challenged Ma Bell.", "url": "people/phil-lapsley.html" }, { "id": "roger-needham", "type": "person", "typeLabel": "Person", "title": "Roger Needham", "slug": "roger-needham", "era": "1960s-2003", "tags": [ "computer-security", "authentication", "distributed-systems", "academic-research" ], "summary": "British computer scientist whose work on authentication, operating systems, and distributed systems shaped practical computer-security research.", "url": "people/roger-needham.html" }, { "id": "susan-landau", "type": "person", "typeLabel": "Person", "title": "Susan Landau", "slug": "susan-landau", "era": "1980s-Present", "tags": [ "cybersecurity-policy", "privacy", "encryption", "surveillance", "academic-research" ], "summary": "Mathematician and cybersecurity-policy scholar whose work addresses privacy, encryption, communications surveillance, law, and public policy.", "url": "people/susan-landau.html" }, { "id": "thomas-rid", "type": "person", "typeLabel": "Person", "title": "Thomas Rid", "slug": "thomas-rid", "era": "2013-Present", "tags": [ "author", "academic", "cyberwar", "cybernetics", "books" ], "summary": "Scholar and author whose books examine cyberwar, cybernetics, and the historical relationship between technology and conflict.", "url": "people/thomas-rid.html" }, { "id": "william-f-friedman", "type": "person", "typeLabel": "Person", "title": "William F. Friedman", "slug": "william-f-friedman", "era": "1910s-1969", "tags": [ "cryptanalysis", "cryptography", "signals-intelligence", "academic-research" ], "summary": "American cryptologist who introduced systematic mathematical methods to U.S. cryptology and led work against Japan's PURPLE diplomatic cipher.", "url": "people/william-f-friedman.html" }, { "id": "willis-ware", "type": "person", "typeLabel": "Person", "title": "Willis H. Ware", "slug": "willis-ware", "era": "1940s-2013", "tags": [ "computer-security", "privacy", "secure-systems", "rand", "computer-history" ], "summary": "American computer engineer and RAND researcher who chaired the 1970 study on security controls for computer systems commonly called the Ware Report.", "url": "people/willis-ware.html" }, { "id": "joan-clarke", "type": "person", "typeLabel": "Person", "title": "Joan Clarke", "slug": "joan-clarke", "era": "1930s-1996", "tags": [ "cryptanalysis", "Bletchley Park", "Enigma", "women-in-security" ], "summary": "English cryptanalyst who worked in Hut 8 at Bletchley Park during the Second World War and later at GCHQ.", "url": "people/joan-clarke.html" }, { "id": "mavis-batey", "type": "person", "typeLabel": "Person", "title": "Mavis Batey", "slug": "mavis-batey", "era": "1940s-2013", "tags": [ "cryptanalysis", "Bletchley Park", "Enigma", "women-in-security" ], "summary": "English codebreaker who worked on Italian and German Enigma systems at Bletchley Park during the Second World War.", "url": "people/mavis-batey.html" }, { "id": "jane-fawcett", "type": "person", "typeLabel": "Person", "title": "Jane Fawcett", "slug": "jane-fawcett", "era": "1940s-2016", "tags": [ "cryptanalysis", "Bletchley Park", "naval intelligence", "women-in-security" ], "summary": "English Bletchley Park codebreaker and later architectural conservationist, known for work handling decrypted naval messages during the Second World War.", "url": "people/jane-fawcett.html" }, { "id": "barbara-liskov", "type": "person", "typeLabel": "Person", "title": "Barbara Liskov", "slug": "barbara-liskov", "era": "1960s-Present", "tags": [ "distributed-systems", "fault-tolerance", "programming-languages", "security-engineering" ], "summary": "American computer scientist whose work on data abstraction, distributed systems and Byzantine fault tolerance has shaped dependable and security-relevant system design.", "url": "people/barbara-liskov.html" }, { "id": "radia-perlman", "type": "person", "typeLabel": "Person", "title": "Radia Perlman", "slug": "radia-perlman", "era": "1970s-Present", "tags": [ "networking", "network-security", "protocol-design", "cryptography" ], "summary": "American computer scientist and network engineer known for spanning-tree protocol work and contributions to network-security education and protocol design.", "url": "people/radia-perlman.html" }, { "id": "latanya-sweeney", "type": "person", "typeLabel": "Person", "title": "Latanya Sweeney", "slug": "latanya-sweeney", "era": "1990s-Present", "tags": [ "privacy", "k-anonymity", "algorithmic-fairness", "public-interest-technology" ], "summary": "American computer scientist whose research on re-identification risk, k-anonymity and algorithmic fairness has shaped data-privacy practice and policy.", "url": "people/latanya-sweeney.html" }, { "id": "keren-elazari", "type": "person", "typeLabel": "Person", "title": "Keren Elazari", "slug": "keren-elazari", "era": "2000s-Present", "tags": [ "cybersecurity", "vulnerability-research", "hacker-culture", "cyber-policy" ], "summary": "Israeli cybersecurity researcher, analyst and educator whose work and public speaking examine hackers, vulnerability research and the social consequences of security practice.", "url": "people/keren-elazari.html" }, { "id": "maddie-stone", "type": "person", "typeLabel": "Person", "title": "Maddie Stone", "slug": "maddie-stone", "era": "2010s-Present", "tags": [ "vulnerability-research", "mobile-security", "browser-security", "Project Zero" ], "summary": "Security researcher known for public vulnerability research and for work on Google’s Project Zero, including mobile and browser security.", "url": "people/maddie-stone.html" }, { "id": "haya-shulman", "type": "person", "typeLabel": "Person", "title": "Haya Shulman", "slug": "haya-shulman", "era": "2010s-Present", "tags": [ "DNS-security", "network-security", "internet-measurement", "academic-research" ], "summary": "Computer-security researcher whose work examines DNS, Internet routing and network-security weaknesses from a measurement and systems perspective.", "url": "people/haya-shulman.html" }, { "id": "ann-cavoukian", "type": "person", "typeLabel": "Person", "title": "Ann Cavoukian", "slug": "ann-cavoukian", "era": "1980s-Present", "tags": [ "privacy", "privacy-by-design", "policy", "information-security" ], "summary": "Canadian privacy scholar and former Information and Privacy Commissioner of Ontario known for developing and promoting Privacy by Design.", "url": "people/ann-cavoukian.html" }, { "id": "claude-shannon", "type": "person", "typeLabel": "Person", "title": "Claude Shannon", "slug": "claude-shannon", "era": "1930s-2001", "tags": [ "information-theory", "cryptography", "digital-logic", "academic-research" ], "summary": "American mathematician and engineer whose work on digital logic and information theory established core concepts used in computing and secure communications.", "url": "people/claude-shannon.html" }, { "id": "james-ellis", "type": "person", "typeLabel": "Person", "title": "James Ellis", "slug": "james-ellis", "era": "1950s-1997", "tags": [ "cryptography", "public-key-cryptography", "gchq", "academic-research" ], "summary": "GCHQ mathematician who conceived the possibility of public-key cryptography, then called non-secret encryption, before the idea was publicly disclosed.", "url": "people/james-ellis.html" }, { "id": "clifford-cocks", "type": "person", "typeLabel": "Person", "title": "Clifford Cocks", "slug": "clifford-cocks", "era": "1970s-Present", "tags": [ "cryptography", "public-key-cryptography", "rsa", "gchq" ], "summary": "British mathematician whose classified GCHQ work in 1973 developed a practical public-key encryption method later recognised as closely related to RSA.", "url": "people/clifford-cocks.html" }, { "id": "malcolm-williamson", "type": "person", "typeLabel": "Person", "title": "Malcolm Williamson", "slug": "malcolm-williamson", "era": "1970s-2015", "tags": [ "cryptography", "key-exchange", "public-key-cryptography", "gchq" ], "summary": "British mathematician and GCHQ cryptographer who developed an early key-agreement method in classified work during the 1970s.", "url": "people/malcolm-williamson.html" }, { "id": "paul-baran", "type": "person", "typeLabel": "Person", "title": "Paul Baran", "slug": "paul-baran", "era": "1950s-2011", "tags": [ "networking", "packet-switching", "resilient-systems", "academic-research" ], "summary": "Polish-born American engineer whose RAND work on distributed communications and packet switching helped establish technical foundations for packet networks.", "url": "people/paul-baran.html" }, { "id": "leonard-kleinrock", "type": "person", "typeLabel": "Person", "title": "Leonard Kleinrock", "slug": "leonard-kleinrock", "era": "1960s-Present", "tags": [ "networking", "packet-switching", "arpanet", "academic-research" ], "summary": "UCLA computer scientist whose queueing-theory research and leadership of the ARPANET Network Measurement Center helped shape early packet-networking practice.", "url": "people/leonard-kleinrock.html" }, { "id": "dennis-ritchie", "type": "person", "typeLabel": "Person", "title": "Dennis Ritchie", "slug": "dennis-ritchie", "era": "1960s-2011", "tags": [ "unix", "c-language", "systems-programming", "computer-security" ], "summary": "Bell Labs computer scientist who co-created Unix and created the C programming language, two foundations of modern systems software.", "url": "people/dennis-ritchie.html" }, { "id": "john-mccarthy", "type": "person", "typeLabel": "Person", "title": "John McCarthy", "slug": "john-mccarthy", "era": "1950s-2011", "tags": [ "artificial-intelligence", "lisp", "timesharing", "academic-research" ], "summary": "American computer scientist who coined the term artificial intelligence, created Lisp, and advanced time-sharing and interactive-computing research.", "url": "people/john-mccarthy.html" }, { "id": "peter-samson", "type": "person", "typeLabel": "Person", "title": "Peter Samson", "slug": "peter-samson", "era": "1950s-Present", "tags": [ "mit", "hacker-culture", "pdp-1", "spacewar", "computer-music" ], "summary": "MIT hacker-culture pioneer who programmed the TX-0 and PDP-1, contributed to Spacewar!, and worked on interactive digital music and early minicomputer software.", "url": "people/peter-samson.html" }, { "id": "jcr-licklider", "type": "person", "typeLabel": "Person", "title": "J. C. R. Licklider", "slug": "jcr-licklider", "era": "1950s-1990", "tags": [ "networking", "interactive-computing", "arpanet", "academic-research" ], "summary": "American psychologist and computer scientist whose vision of interactive, networked computing and leadership at ARPA’s IPTO helped set the conditions for ARPANET.", "url": "people/jcr-licklider.html" }, { "id": "mati-aharoni", "type": "person", "typeLabel": "Person", "title": "Mati Aharoni", "slug": "mati-aharoni", "era": "2000s-Present", "tags": [ "penetration testing", "Kali Linux", "Offensive Security", "security tooling", "community" ], "summary": "Mati Aharoni is a penetration-testing practitioner and the founder of Offensive Security, best known for helping create Kali Linux, a Debian-based distribution used for security assessment and training.", "url": "people/mati-aharoni.html" }, { "id": "patrick-wardle", "type": "person", "typeLabel": "Person", "title": "Patrick Wardle", "slug": "patrick-wardle", "era": "2010s-Present", "tags": [ "macOS security", "malware analysis", "open source", "Objective-See", "vulnerability research" ], "summary": "Patrick Wardle is a macOS security researcher and the founder of Objective-See, a nonprofit that develops free, open-source defensive tools and runs the Objective by the Sea conference.", "url": "people/patrick-wardle.html" }, { "id": "joxean-koret", "type": "person", "typeLabel": "Person", "title": "Joxean Koret", "slug": "joxean-koret", "era": "2000s-Present", "tags": [ "reverse engineering", "malware analysis", "database security", "vulnerability research", "Hex-Rays" ], "summary": "Joxean Koret is a Spanish security researcher known for reverse engineering, malware analysis, and vulnerability research, including work on database software and reverse-engineering tooling.", "url": "people/joxean-koret.html" }, { "id": "aleksandr-matrosov", "type": "person", "typeLabel": "Person", "title": "Aleksandr Matrosov", "slug": "aleksandr-matrosov", "era": "2000s-Present", "tags": [ "malware analysis", "reverse engineering", "bootkits", "firmware security", "threat research" ], "summary": "Aleksandr Matrosov is a malware and threat researcher whose published work has covered reverse engineering, bootkits, advanced threats, exploitation, and firmware or hardware security.", "url": "people/aleksandr-matrosov.html" }, { "id": "jake-williams", "type": "person", "typeLabel": "Person", "title": "Jake Williams", "slug": "jake-williams", "era": "2000s-Present", "tags": [ "incident response", "digital forensics", "malware reverse engineering", "penetration testing", "security education" ], "summary": "Jake Williams is an incident-response, digital-forensics, malware-analysis, and penetration-testing practitioner known for teaching and course-authoring work in the SANS community.", "url": "people/jake-williams.html" }, { "id": "lesley-carhart", "type": "person", "typeLabel": "Person", "title": "Lesley Carhart", "slug": "lesley-carhart", "era": "2000s-Present", "tags": [ "industrial control systems", "incident response", "digital forensics", "threat hunting", "community" ], "summary": "Lesley Carhart is an industrial-cybersecurity incident-response leader known for investigations, digital forensics, threat hunting, education, and community work around operational technology.", "url": "people/lesley-carhart.html" }, { "id": "marc-rogers", "type": "person", "typeLabel": "Person", "title": "Marc Rogers", "slug": "marc-rogers", "era": "1980s-Present", "tags": [ "DEF CON", "automotive security", "vulnerability research", "security leadership", "technical communities" ], "summary": "Marc Rogers is a British security researcher and community organizer known for vulnerability research on connected technologies and for long-running leadership roles at DEF CON.", "url": "people/marc-rogers.html" }, { "id": "paul-asadoorian", "type": "person", "typeLabel": "Person", "title": "Paul Asadoorian", "slug": "paul-asadoorian", "era": "2000s-Present", "tags": [ "security podcasting", "firmware security", "penetration testing", "vulnerability management", "security community" ], "summary": "Paul Asadoorian is a security practitioner, educator, author, and podcaster known for founding Security Weekly and for work on penetration testing, firmware security, vulnerability management, and community education.", "url": "people/paul-asadoorian.html" }, { "id": "kenneth-geers", "type": "person", "typeLabel": "Person", "title": "Kenneth Geers", "slug": "kenneth-geers", "era": "1990s-Present", "tags": [ "cyber policy", "NATO", "threat intelligence", "cyber conflict", "research" ], "summary": "Kenneth Geers is a cybersecurity researcher and policy specialist whose work has addressed cyber conflict, threat intelligence, NATO cyber defence, and the relationship between technical security and international affairs.", "url": "people/kenneth-geers.html" }, { "id": "paul-c-van-oorschot", "type": "person", "typeLabel": "Person", "title": "Paul C. van Oorschot", "slug": "paul-c-van-oorschot", "era": "1990s-Present", "tags": [ "cryptography", "authentication", "computer security", "academic research", "security engineering" ], "summary": "Paul C. van Oorschot is a Canadian cryptographer and computer-security researcher known for academic work on authentication and usable security and for co-authoring the Handbook of Applied Cryptography.", "url": "people/paul-c-van-oorschot.html" }, { "id": "adi-shamir", "type": "person", "typeLabel": "Person", "title": "Adi Shamir", "slug": "adi-shamir", "era": "1970s-Present", "tags": [ "cryptography", "public-key-cryptography", "cryptanalysis", "academic-research" ], "summary": "Israeli cryptographer and co-inventor of RSA public-key cryptography, also known for foundational work in cryptanalysis and secret sharing.", "url": "people/adi-shamir.html" }, { "id": "agnes-driscoll", "type": "person", "typeLabel": "Person", "title": "Agnes Meyer Driscoll", "slug": "agnes-driscoll", "era": "1910s-1971", "tags": [ "cryptanalysis", "naval-cryptology", "machine-ciphers", "codebreaking", "women-in-cryptology" ], "summary": "American naval cryptanalyst and cryptographic-machine specialist whose long career included work against Japanese naval systems.", "url": "people/agnes-driscoll.html" }, { "id": "bart-preneel", "type": "person", "typeLabel": "Person", "title": "Bart Preneel", "slug": "bart-preneel", "era": "1980s-Present", "tags": [ "cryptography", "hash-functions", "privacy", "academic-research" ], "summary": "Belgian cryptographer and professor known for research on symmetric cryptography, hash functions, privacy, and security engineering.", "url": "people/bart-preneel.html" }, { "id": "carl-landwehr", "type": "person", "typeLabel": "Person", "title": "Carl E. Landwehr", "slug": "carl-landwehr", "era": "1970s-Present", "tags": [ "computer-security", "formal-methods", "trustworthy-computing", "research-policy" ], "summary": "Computer-security researcher and research-program leader whose work includes formal security models, trustworthy computing, and federal cybersecurity research.", "url": "people/carl-landwehr.html" }, { "id": "david-wagner", "type": "person", "typeLabel": "Person", "title": "David Wagner", "slug": "david-wagner", "era": "1970s-Present", "tags": [ "cryptography", "web-security", "privacy", "academic-research" ], "summary": "Computer-security and cryptography researcher whose work spans web security, privacy, voting technology, and the analysis of real-world systems.", "url": "people/david-wagner.html" }, { "id": "dilly-knox", "type": "person", "typeLabel": "Person", "title": "Alfred Dillwyn Knox", "slug": "dilly-knox", "era": "1910s-1943", "tags": [ "cryptanalysis", "enigma", "bletchley-park", "classics", "codebreaking" ], "summary": "British classicist and cryptanalyst whose pre-war and wartime work helped establish Bletchley Park’s attack on Enigma.", "url": "people/dilly-knox.html" }, { "id": "fred-schneider", "type": "person", "typeLabel": "Person", "title": "Fred B. Schneider", "slug": "fred-schneider", "era": "1970s-Present", "tags": [ "computer-security", "formal-methods", "distributed-systems", "trustworthy-systems", "cyber-resilience" ], "summary": "Cornell computer scientist whose research connects formal methods, distributed systems, fault tolerance, trustworthy computing, and cybersecurity policy.", "url": "people/fred-schneider.html" }, { "id": "gordon-welchman", "type": "person", "typeLabel": "Person", "title": "Gordon Welchman", "slug": "gordon-welchman", "era": "1930s-1985", "tags": [ "cryptanalysis", "enigma", "bletchley-park", "traffic-analysis", "computer-history" ], "summary": "British mathematician and Bletchley Park leader who directed Hut 6’s Enigma work and advanced the operational organization of codebreaking.", "url": "people/gordon-welchman.html" }, { "id": "henryk-zygalski", "type": "person", "typeLabel": "Person", "title": "Henryk Zygalski", "slug": "henryk-zygalski", "era": "1930s-1978", "tags": [ "cryptanalysis", "enigma", "polish-cipher-bureau", "mathematics", "codebreaking" ], "summary": "Polish mathematician and cryptanalyst who devised perforated “Zygalski sheets” to help recover Enigma settings.", "url": "people/henryk-zygalski.html" }, { "id": "jerzy-rozycki", "type": "person", "typeLabel": "Person", "title": "Jerzy Różycki", "slug": "jerzy-rozycki", "era": "1930s-1942", "tags": [ "cryptanalysis", "enigma", "polish-cipher-bureau", "mathematics", "codebreaking" ], "summary": "Polish mathematician and Cipher Bureau cryptanalyst who worked with Marian Rejewski and Henryk Zygalski against Enigma.", "url": "people/jerzy-rozycki.html" }, { "id": "john-mchugh", "type": "person", "typeLabel": "Person", "title": "John McHugh", "slug": "john-mchugh", "era": "1980s-Present", "tags": [ "intrusion-detection", "security-evaluation", "computer-security", "academic-research" ], "summary": "Computer-security researcher associated with critical work on intrusion-detection evaluation and the assessment of security technologies.", "url": "people/john-mchugh.html" }, { "id": "karl-levitt", "type": "person", "typeLabel": "Person", "title": "Karl N. Levitt", "slug": "karl-levitt", "era": "1980s-Present", "tags": [ "computer-security", "intrusion-detection", "formal-methods", "resilience" ], "summary": "UC Davis computer-security researcher whose work addresses malicious-code detection, misuse detection, verification, and resilience.", "url": "people/karl-levitt.html" }, { "id": "l-jean-camp", "type": "person", "typeLabel": "Person", "title": "L. Jean Camp", "slug": "l-jean-camp", "era": "1990s-Present", "tags": [ "security-economics", "usable-security", "risk-communication", "online-trust", "privacy" ], "summary": "Information-security researcher known for work connecting security economics, human-centered design, risk communication, online trust, and public policy.", "url": "people/l-jean-camp.html" }, { "id": "leonard-adleman", "type": "person", "typeLabel": "Person", "title": "Leonard Adleman", "slug": "leonard-adleman", "era": "1970s-Present", "tags": [ "cryptography", "public-key-cryptography", "algorithms", "academic-research" ], "summary": "Computer scientist and co-inventor of RSA public-key cryptography whose research bridges cryptography, algorithms, and molecular computation.", "url": "people/leonard-adleman.html" }, { "id": "marian-rejewski", "type": "person", "typeLabel": "Person", "title": "Marian Rejewski", "slug": "marian-rejewski", "era": "1930s-1980", "tags": [ "cryptanalysis", "enigma", "mathematics", "polish-cipher-bureau", "codebreaking" ], "summary": "Polish mathematician and cryptanalyst who reconstructed the German Enigma machine’s wiring and developed methods for reading its traffic before the Second World War.", "url": "people/marian-rejewski.html" }, { "id": "martin-hellman", "type": "person", "typeLabel": "Person", "title": "Martin Hellman", "slug": "martin-hellman", "era": "1960s-Present", "tags": [ "cryptography", "public-key-cryptography", "information-theory", "academic-research" ], "summary": "Cryptographer and Stanford professor emeritus whose collaboration with Whitfield Diffie established a foundational approach to public-key cryptography.", "url": "people/martin-hellman.html" }, { "id": "matt-bishop", "type": "person", "typeLabel": "Person", "title": "Matt Bishop", "slug": "matt-bishop", "era": "1980s-Present", "tags": [ "computer-security", "vulnerability-analysis", "security-education", "insider-threat", "election-security" ], "summary": "Computer-security researcher and UC Davis professor emeritus known for vulnerability analysis, security education, and the book Computer Security: Art and Science.", "url": "people/matt-bishop.html" }, { "id": "max-newman", "type": "person", "typeLabel": "Person", "title": "Max Newman", "slug": "max-newman", "era": "1930s-1984", "tags": [ "cryptanalysis", "colossus", "computing", "mathematics", "bletchley-park" ], "summary": "British mathematician who led Bletchley Park’s Newmanry and helped establish the operational context for Colossus-assisted cryptanalysis.", "url": "people/max-newman.html" }, { "id": "ravi-sandhu", "type": "person", "typeLabel": "Person", "title": "Ravi Sandhu", "slug": "ravi-sandhu", "era": "1980s-Present", "tags": [ "access-control", "rbac", "authorization", "computer-security", "academic-research" ], "summary": "Computer-security researcher known for access-control models and for coauthoring the RBAC96 reference models for role-based access control.", "url": "people/ravi-sandhu.html" }, { "id": "ron-rivest", "type": "person", "typeLabel": "Person", "title": "Ron Rivest", "slug": "ron-rivest", "era": "1970s-Present", "tags": [ "cryptography", "public-key-cryptography", "algorithms", "academic-research" ], "summary": "MIT computer scientist and co-inventor of RSA public-key cryptography, with major contributions to cryptographic design and electronic voting research.", "url": "people/ron-rivest.html" }, { "id": "simson-garfinkel", "type": "person", "typeLabel": "Person", "title": "Simson L. Garfinkel", "slug": "simson-garfinkel", "era": "1980s-Present", "tags": [ "digital-forensics", "privacy", "security-writing", "academic-research" ], "summary": "Computer scientist, journalist, and author whose work spans digital forensics, privacy, usable security, and the public understanding of computing.", "url": "people/simson-garfinkel.html" }, { "id": "solomon-kullback", "type": "person", "typeLabel": "Person", "title": "Solomon Kullback", "slug": "solomon-kullback", "era": "1930s-1994", "tags": [ "cryptanalysis", "statistics", "information-theory", "academic-research", "signals-intelligence" ], "summary": "American mathematician and cryptanalyst whose statistical work helped shape modern information theory and cryptologic analysis.", "url": "people/solomon-kullback.html" }, { "id": "stefan-savage", "type": "person", "typeLabel": "Person", "title": "Stefan Savage", "slug": "stefan-savage", "era": "1990s-Present", "tags": [ "systems-security", "internet-measurement", "malware", "academic-research" ], "summary": "Computer-security researcher known for empirical studies of Internet abuse, malware ecosystems, and the security of networked systems.", "url": "people/stefan-savage.html" }, { "id": "steven-bellovin", "type": "person", "typeLabel": "Person", "title": "Steven M. Bellovin", "slug": "steven-bellovin", "era": "1970s-Present", "tags": [ "network-security", "internet-security", "privacy", "academic-research" ], "summary": "Computer-security researcher and Columbia University professor known for foundational work on network security, Internet protocols, and privacy.", "url": "people/steven-bellovin.html" }, { "id": "sushil-jajodia", "type": "person", "typeLabel": "Person", "title": "Sushil Jajodia", "slug": "sushil-jajodia", "era": "1980s-Present", "tags": [ "cybersecurity", "access-control", "secure-databases", "adaptive-defense", "academic-research" ], "summary": "Computer-security and privacy researcher, founding director of George Mason University's Center for Secure Information Systems, known for work on access control, secure databases, and adaptive cyber defense.", "url": "people/sushil-jajodia.html" }, { "id": "tadayoshi-kohno", "type": "person", "typeLabel": "Person", "title": "Tadayoshi Kohno", "slug": "tadayoshi-kohno", "era": "1990s-Present", "tags": [ "security-usability", "embedded-security", "privacy", "academic-research" ], "summary": "Computer-security researcher whose work examines the safety, privacy, and security of devices and systems used in everyday life.", "url": "people/tadayoshi-kohno.html" }, { "id": "tommy-flowers", "type": "person", "typeLabel": "Person", "title": "Tommy Flowers", "slug": "tommy-flowers", "era": "1930s-1998", "tags": [ "electronics", "colossus", "cryptanalysis", "computing", "bletchley-park" ], "summary": "British engineer who designed Colossus, the electronic machines used to assist Bletchley Park’s attack on Lorenz-encrypted traffic.", "url": "people/tommy-flowers.html" }, { "id": "whitfield-diffie", "type": "person", "typeLabel": "Person", "title": "Whitfield Diffie", "slug": "whitfield-diffie", "era": "1960s-Present", "tags": [ "cryptography", "public-key-cryptography", "privacy", "computer-security" ], "summary": "Cryptographer whose work with Martin Hellman introduced the public-key distribution problem and the Diffie–Hellman key-exchange method.", "url": "people/whitfield-diffie.html" }, { "id": "william-tutte", "type": "person", "typeLabel": "Person", "title": "William Tutte", "slug": "william-tutte", "era": "1940s-2002", "tags": [ "cryptanalysis", "colossus", "tunny", "mathematics", "bletchley-park" ], "summary": "British mathematician whose analysis of the German Lorenz cipher made high-level wartime cryptanalysis possible without seeing the machine.", "url": "people/william-tutte.html" }, { "id": "ada-lovelace", "type": "person", "typeLabel": "Person", "title": "Ada Lovelace", "slug": "ada-lovelace", "era": "1830s-1852", "tags": [ "computing", "programming", "mathematics", "historical-pioneer" ], "summary": "English mathematician whose notes on Charles Babbage’s Analytical Engine include a detailed algorithm and an account of a general-purpose calculating machine.", "url": "people/ada-lovelace.html" }, { "id": "charles-babbage", "type": "person", "typeLabel": "Person", "title": "Charles Babbage", "slug": "charles-babbage", "era": "1820s-1871", "tags": [ "computing", "engineering", "mathematics", "historical-pioneer" ], "summary": "English mathematician and engineer who designed the Difference Engine and Analytical Engine, influential precursors to programmable computing.", "url": "people/charles-babbage.html" }, { "id": "chris-nickerson", "type": "person", "typeLabel": "Person", "title": "Chris Nickerson", "slug": "chris-nickerson", "era": "2000s-Present", "tags": [ "red-teaming", "social-engineering", "penetration-testing", "adversary-simulation", "lares" ], "summary": "Security practitioner associated with red-team testing, adversary simulation, and social-engineering assessments.", "url": "people/chris-nickerson.html" }, { "id": "david-aitel", "type": "person", "typeLabel": "Person", "title": "Dave Aitel", "slug": "david-aitel", "era": "2000s-Present", "tags": [ "offensive-security", "fuzzing", "exploit-development", "immunity", "conference-organizer" ], "summary": "American offensive-security researcher associated with the SPIKE fuzzing framework and the security firm Immunity.", "url": "people/david-aitel.html" }, { "id": "david-maynor", "type": "person", "typeLabel": "Person", "title": "David Maynor", "slug": "david-maynor", "era": "2000s-Present", "tags": [ "wireless-security", "device-drivers", "vulnerability-research", "black-hat", "responsible-disclosure" ], "summary": "Security researcher known for co-presenting research on wireless device-driver vulnerabilities at Black Hat USA in 2006.", "url": "people/david-maynor.html" }, { "id": "edsger-w-dijkstra", "type": "person", "typeLabel": "Person", "title": "Edsger W. Dijkstra", "slug": "edsger-w-dijkstra", "era": "1950s-2002", "tags": [ "programming", "formal-methods", "algorithms", "computer-science" ], "summary": "Dutch computer scientist whose work on algorithms, structured programming, and disciplined reasoning shaped dependable software engineering.", "url": "people/edsger-w-dijkstra.html" }, { "id": "george-boole", "type": "person", "typeLabel": "Person", "title": "George Boole", "slug": "george-boole", "era": "1840s-1864", "tags": [ "mathematics", "logic", "computing", "foundations" ], "summary": "English mathematician whose algebra of logic became a central mathematical foundation for digital circuits and computation.", "url": "people/george-boole.html" }, { "id": "georgi-guninski", "type": "person", "typeLabel": "Person", "title": "Georgi Guninski", "slug": "georgi-guninski", "era": "1990s-Present", "tags": [ "vulnerability-research", "browser-security", "cryptography", "cve", "full-disclosure" ], "summary": "Bulgarian security researcher and consultant whose public work has documented vulnerabilities in widely deployed software.", "url": "people/georgi-guninski.html" }, { "id": "grace-murray-hopper", "type": "person", "typeLabel": "Person", "title": "Grace Murray Hopper", "slug": "grace-murray-hopper", "era": "1940s-1992", "tags": [ "programming", "compilers", "computing", "navy", "historical-pioneer" ], "summary": "American mathematician, U.S. Navy rear admiral, and computer scientist known for pioneering compiler work and helping lead COBOL standardization.", "url": "people/grace-murray-hopper.html" }, { "id": "herman-hollerith", "type": "person", "typeLabel": "Person", "title": "Herman Hollerith", "slug": "herman-hollerith", "era": "1880s-1929", "tags": [ "data-processing", "computing", "punch-cards", "historical-pioneer" ], "summary": "American inventor whose punched-card tabulating systems transformed large-scale data processing and helped establish the business lineage that became IBM.", "url": "people/herman-hollerith.html" }, { "id": "howard-h-aiken", "type": "person", "typeLabel": "Person", "title": "Howard H. Aiken", "slug": "howard-h-aiken", "era": "1930s-1973", "tags": [ "computing", "engineering", "harvard-mark-i", "historical-pioneer" ], "summary": "American computer pioneer who initiated the Harvard Mark I project, an influential large-scale electromechanical automatic calculator.", "url": "people/howard-h-aiken.html" }, { "id": "hugo-krawczyk", "type": "person", "typeLabel": "Person", "title": "Hugo Krawczyk", "slug": "hugo-krawczyk", "era": "1990s-Present", "tags": [ "cryptography", "key-derivation", "network-security", "academic-research" ], "summary": "Cryptographer whose work on key derivation, authentication, and secure key exchange has influenced practical Internet security protocols.", "url": "people/hugo-krawczyk.html" }, { "id": "iftach-ian-amit", "type": "person", "typeLabel": "Person", "title": "Iftach Ian Amit", "slug": "iftach-ian-amit", "era": "2000s-Present", "tags": [ "penetration-testing", "security-research", "dc9723", "ptes", "conference-speaker" ], "summary": "Security researcher and practitioner associated with penetration-testing methodology, community organizing, and conference presentations.", "url": "people/iftach-ian-amit.html" }, { "id": "ilja-van-sprundel", "type": "person", "typeLabel": "Person", "title": "Ilja van Sprundel", "slug": "ilja-van-sprundel", "era": "2000s-Present", "tags": [ "penetration-testing", "kernel-security", "fuzzing", "exploit-development", "windows-security" ], "summary": "Security researcher and penetration tester whose work has included low-level kernel assessment, fuzzing, and exploit development.", "url": "people/ilja-van-sprundel.html" }, { "id": "jean-jacques-quisquater", "type": "person", "typeLabel": "Person", "title": "Jean-Jacques Quisquater", "slug": "jean-jacques-quisquater", "era": "1980s-Present", "tags": [ "cryptography", "smart-cards", "cryptanalysis", "academic-research" ], "summary": "Belgian cryptographer whose research helped advance smart-card security, public-key cryptography, and practical cryptanalysis.", "url": "people/jean-jacques-quisquater.html" }, { "id": "john-backus", "type": "person", "typeLabel": "Person", "title": "John Backus", "slug": "john-backus", "era": "1950s-2007", "tags": [ "programming-languages", "compilers", "computing", "formal-methods" ], "summary": "American computer scientist who led the IBM team that developed FORTRAN and later advanced functional-programming notation.", "url": "people/john-backus.html" }, { "id": "john-heasman", "type": "person", "typeLabel": "Person", "title": "John Heasman", "slug": "john-heasman", "era": "2000s-Present", "tags": [ "firmware-security", "rootkits", "bios", "acpi", "hardware-security" ], "summary": "Security researcher whose conference work examined firmware-resident and ACPI BIOS rootkits.", "url": "people/john-heasman.html" }, { "id": "john-vincent-atanasoff", "type": "person", "typeLabel": "Person", "title": "John Vincent Atanasoff", "slug": "john-vincent-atanasoff", "era": "1930s-1995", "tags": [ "computing", "electronics", "mathematics", "historical-pioneer" ], "summary": "American physicist and inventor who, with Clifford Berry, developed the Atanasoff–Berry Computer, an early electronic digital computing system.", "url": "people/john-vincent-atanasoff.html" }, { "id": "konrad-zuse", "type": "person", "typeLabel": "Person", "title": "Konrad Zuse", "slug": "konrad-zuse", "era": "1930s-1995", "tags": [ "computing", "engineering", "programming-languages", "historical-pioneer" ], "summary": "German civil engineer and computer pioneer who built programmable calculating machines including the Z3 and created the Plankalkül programming-language design.", "url": "people/konrad-zuse.html" }, { "id": "michael-o-rabin", "type": "person", "typeLabel": "Person", "title": "Michael O. Rabin", "slug": "michael-o-rabin", "era": "1950s-Present", "tags": [ "cryptography", "computability", "randomized-algorithms", "academic-research" ], "summary": "Computer scientist and Turing Award recipient whose work in automata theory, randomized algorithms, and cryptography has had long-term influence on security research.", "url": "people/michael-o-rabin.html" }, { "id": "mihir-bellare", "type": "person", "typeLabel": "Person", "title": "Mihir Bellare", "slug": "mihir-bellare", "era": "1990s-Present", "tags": [ "cryptography", "provable-security", "authentication", "academic-research" ], "summary": "Cryptographer known for influential work on provable security, authentication, encryption, and practical cryptographic standards.", "url": "people/mihir-bellare.html" }, { "id": "moni-naor", "type": "person", "typeLabel": "Person", "title": "Moni Naor", "slug": "moni-naor", "era": "1980s-Present", "tags": [ "cryptography", "complexity-theory", "academic-research", "privacy" ], "summary": "Israeli computer scientist whose work helped define modern cryptography, including visual cryptography, non-malleability, and foundations for abuse-resistant systems.", "url": "people/moni-naor.html" }, { "id": "moti-yung", "type": "person", "typeLabel": "Person", "title": "Moti Yung", "slug": "moti-yung", "era": "1980s-Present", "tags": [ "cryptography", "cryptovirology", "malware-research", "academic-research" ], "summary": "Computer scientist and cryptographer known for work in cryptography, security, distributed systems, and early research on cryptovirology.", "url": "people/moti-yung.html" }, { "id": "oded-goldreich", "type": "person", "typeLabel": "Person", "title": "Oded Goldreich", "slug": "oded-goldreich", "era": "1980s-Present", "tags": [ "cryptography", "complexity-theory", "zero-knowledge", "academic-research" ], "summary": "Theoretical computer scientist whose research on cryptography, pseudorandomness, proof systems, and complexity has helped establish foundations used in modern security theory.", "url": "people/oded-goldreich.html" }, { "id": "phillip-rogaway", "type": "person", "typeLabel": "Person", "title": "Phillip Rogaway", "slug": "phillip-rogaway", "era": "1990s-Present", "tags": [ "cryptography", "applied-cryptography", "privacy", "academic-research", "technology-ethics" ], "summary": "Cryptographer and former UC Davis professor whose work on authenticated encryption and cryptographic practice has influenced both standards and security-engineering debates.", "url": "people/phillip-rogaway.html" }, { "id": "rich-mogull", "type": "person", "typeLabel": "Person", "title": "Rich Mogull", "slug": "rich-mogull", "era": "2000s-Present", "tags": [ "cloud-security", "incident-response", "securosis", "black-hat", "security-education" ], "summary": "Cloud-security researcher and educator associated with Securosis, Cloud Security Alliance work, and hands-on cloud-security training.", "url": "people/rich-mogull.html" }, { "id": "ronald-cramer", "type": "person", "typeLabel": "Person", "title": "Ronald Cramer", "slug": "ronald-cramer", "era": "1990s-Present", "tags": [ "cryptography", "public-key-cryptography", "secure-computation", "academic-research" ], "summary": "Dutch cryptographer whose research covers public-key encryption, secret sharing, secure computation, and mathematical cryptology.", "url": "people/ronald-cramer.html" }, { "id": "stefan-esser", "type": "person", "typeLabel": "Person", "title": "Stefan Esser", "slug": "stefan-esser", "era": "2000s-Present", "tags": [ "php-security", "suhosin", "web-security", "vulnerability-research", "hardened-php" ], "summary": "German security researcher known for PHP security research and for the Hardened-PHP and Suhosin projects.", "url": "people/stefan-esser.html" }, { "id": "tal-rabin", "type": "person", "typeLabel": "Person", "title": "Tal Rabin", "slug": "tal-rabin", "era": "1990s-Present", "tags": [ "cryptography", "secure-computation", "threshold-cryptography", "academic-research" ], "summary": "Cryptographer known for research on secure distributed computation, threshold techniques, and foundations of modern cryptographic protocols.", "url": "people/tal-rabin.html" }, { "id": "thomas-dullien", "type": "person", "typeLabel": "Person", "title": "Thomas Dullien (Halvar Flake)", "slug": "thomas-dullien", "era": "1990s-Present", "tags": [ "reverse-engineering", "binary-analysis", "zynamics", "project-zero", "vulnerability-research" ], "summary": "German computer-security researcher known as Halvar Flake, whose work has focused on reverse engineering, binary analysis, and vulnerability research.", "url": "people/thomas-dullien.html" }, { "id": "abraham-sinkov", "type": "person", "typeLabel": "Person", "title": "Abraham Sinkov", "slug": "abraham-sinkov", "era": "1930s-1998", "tags": [ "cryptanalysis", "signals-intelligence", "mathematics", "communications-security", "wwii" ], "summary": "American mathematician and cryptanalyst who served in the Signal Intelligence Service and held senior communications-security roles in the early NSA era.", "url": "people/abraham-sinkov.html" }, { "id": "adam-shostack", "type": "person", "typeLabel": "Person", "title": "Adam Shostack", "slug": "adam-shostack", "era": "1990s-Present", "tags": [ "threat-modeling", "application-security", "microsoft-sdl", "owasp", "author" ], "summary": "Threat-modeling practitioner and author whose frameworks, tools, and teaching helped make adversarial design review accessible to software teams.", "url": "people/adam-shostack.html" }, { "id": "avi-rubin", "type": "person", "typeLabel": "Person", "title": "Avi Rubin", "slug": "avi-rubin", "era": "1990s-Present", "tags": [ "computer-security", "applied-cryptography", "electronic-voting", "academia", "privacy" ], "summary": "Computer-security researcher and Johns Hopkins professor known for applied-security research, including influential public analysis of electronic voting systems.", "url": "people/avi-rubin.html" }, { "id": "avi-wigderson", "type": "person", "typeLabel": "Person", "title": "Avi Wigderson", "slug": "avi-wigderson", "era": "1980s-Present", "tags": [ "complexity-theory", "cryptography", "randomness", "distributed-computing", "academic-research" ], "summary": "Theoretical computer scientist whose research on randomness, complexity, cryptography, and distributed computation shaped the foundations used to analyze secure computation.", "url": "people/avi-wigderson.html" }, { "id": "boris-hagelin", "type": "person", "typeLabel": "Person", "title": "Boris Hagelin", "slug": "boris-hagelin", "era": "1920s-1983", "tags": [ "cryptography", "cipher-machines", "mechanical-cryptography", "hagelin", "communications-security" ], "summary": "Swedish industrialist and inventor whose mechanical cipher machines were widely used by governments and militaries in the twentieth century.", "url": "people/boris-hagelin.html" }, { "id": "charles-h-bennett", "type": "person", "typeLabel": "Person", "title": "Charles H. Bennett", "slug": "charles-h-bennett", "era": "1970s-Present", "tags": [ "quantum-cryptography", "quantum-information", "reversible-computing", "academic-research" ], "summary": "IBM Fellow and information theorist whose research helped establish quantum cryptography, quantum teleportation, and reversible computation.", "url": "people/charles-h-bennett.html" }, { "id": "edward-hebern", "type": "person", "typeLabel": "Person", "title": "Edward Hugh Hebern", "slug": "edward-hebern", "era": "1910s-1952", "tags": [ "cryptography", "rotor-machines", "cipher-machines", "invention", "mechanical-cryptography" ], "summary": "American inventor whose early rotor cipher machine was an important precursor to later electromechanical encryption systems.", "url": "people/edward-hebern.html" }, { "id": "elias-levy-aleph-one", "type": "person", "typeLabel": "Person", "title": "Elias Levy (Aleph One)", "slug": "elias-levy-aleph-one", "era": "1990s-Present", "tags": [ "phrack", "bugtraq", "full-disclosure", "buffer-overflow", "securityfocus" ], "summary": "Security researcher and editor known as Aleph One, whose Phrack article and Bugtraq community work became reference points in vulnerability disclosure culture.", "url": "people/elias-levy-aleph-one.html" }, { "id": "gary-mcgraw", "type": "person", "typeLabel": "Person", "title": "Gary McGraw", "slug": "gary-mcgraw", "era": "1990s-Present", "tags": [ "software-security", "application-security", "secure-development", "author", "bsimm" ], "summary": "Computer scientist, author, and software-security advocate whose books and measurement work helped popularize building security into software development.", "url": "people/gary-mcgraw.html" }, { "id": "gene-spafford", "type": "person", "typeLabel": "Person", "title": "Gene Spafford", "slug": "gene-spafford", "era": "1980s-Present", "tags": [ "computer-security", "intrusion-detection", "cerias", "academic-security", "forensics" ], "summary": "Purdue computer-security researcher and educator whose work on intrusion detection, policy, forensics, and security education helped establish an academic security community.", "url": "people/gene-spafford.html" }, { "id": "gerald-combs", "type": "person", "typeLabel": "Person", "title": "Gerald Combs", "slug": "gerald-combs", "era": "1990s-Present", "tags": [ "wireshark", "ethereal", "packet-analysis", "open-source", "sharkfest" ], "summary": "Creator of Ethereal, later Wireshark, whose open-source packet analyzer became a central tool and community for network troubleshooting and security analysis.", "url": "people/gerald-combs.html" }, { "id": "gilles-brassard", "type": "person", "typeLabel": "Person", "title": "Gilles Brassard", "slug": "gilles-brassard", "era": "1970s-Present", "tags": [ "quantum-cryptography", "quantum-information", "cryptography", "academic-research" ], "summary": "Canadian computer scientist whose work with Charles H. Bennett helped establish quantum cryptography and quantum-information science.", "url": "people/gilles-brassard.html" }, { "id": "horst-feistel", "type": "person", "typeLabel": "Person", "title": "Horst Feistel", "slug": "horst-feistel", "era": "1940s-1990", "tags": [ "cryptography", "block-ciphers", "ibm", "symmetric-cryptography", "academic-research" ], "summary": "German-American cryptographer whose iterative cipher construction became the Feistel network used by DES and many later block ciphers.", "url": "people/horst-feistel.html" }, { "id": "i-j-good", "type": "person", "typeLabel": "Person", "title": "Irving John Good", "slug": "i-j-good", "era": "1940s-2009", "tags": [ "cryptanalysis", "statistics", "bletchley-park", "computing-history", "bayesian-inference" ], "summary": "British mathematician, statistician, and Bletchley Park cryptanalyst who later contributed to computing and Bayesian statistics.", "url": "people/i-j-good.html" }, { "id": "john-c-mitchell", "type": "person", "typeLabel": "Person", "title": "John C. Mitchell", "slug": "john-c-mitchell", "era": "1980s-Present", "tags": [ "formal-methods", "computer-security", "privacy", "programming-languages", "academic-research" ], "summary": "Stanford computer scientist whose work spans programming-language theory, formal analysis of security protocols, privacy, and computer security.", "url": "people/john-c-mitchell.html" }, { "id": "john-tiltman", "type": "person", "typeLabel": "Person", "title": "John H. Tiltman", "slug": "john-tiltman", "era": "1920s-1982", "tags": [ "cryptanalysis", "signals-intelligence", "gchq", "nsa", "communications-security" ], "summary": "British Army officer and cryptanalyst who held senior roles at GC&CS and GCHQ and later consulted for the NSA.", "url": "people/john-tiltman.html" }, { "id": "john-viega", "type": "person", "typeLabel": "Person", "title": "John Viega", "slug": "john-viega", "era": "1990s-Present", "tags": [ "software-security", "secure-development", "static-analysis", "cryptography", "author" ], "summary": "Software-security author and practitioner known for early secure-development guidance, security-analysis tools, and work on cryptographic and application-security engineering.", "url": "people/john-viega.html" }, { "id": "joseph-desch", "type": "person", "typeLabel": "Person", "title": "Joseph Desch", "slug": "joseph-desch", "era": "1940s-1987", "tags": [ "cryptanalysis", "bombe", "enigma", "engineering", "naval-cryptology" ], "summary": "American electrical engineer who led the design of high-speed U.S. Navy Bombes used against four-rotor German Enigma traffic.", "url": "people/joseph-desch.html" }, { "id": "lance-spitzner", "type": "person", "typeLabel": "Person", "title": "Lance Spitzner", "slug": "lance-spitzner", "era": "1990s-Present", "tags": [ "honeypots", "honeynets", "threat-intelligence", "security-awareness", "sans" ], "summary": "Security practitioner, educator, and founder of the Honeynet Project, known for advancing study of attacker behavior through high-interaction honeynets.", "url": "people/lance-spitzner.html" }, { "id": "leo-marks", "type": "person", "typeLabel": "Person", "title": "Leo Marks", "slug": "leo-marks", "era": "1940s-2001", "tags": [ "cryptography", "soe", "wwii", "one-time-pads", "communications-security" ], "summary": "British cryptographer and writer who headed the Special Operations Executive’s codes office during the Second World War.", "url": "people/leo-marks.html" }, { "id": "manuel-blum", "type": "person", "typeLabel": "Person", "title": "Manuel Blum", "slug": "manuel-blum", "era": "1960s-Present", "tags": [ "theoretical-computer-science", "cryptography", "pseudorandomness", "academic-research" ], "summary": "Computer scientist whose work connected complexity theory to cryptographic protocols, pseudorandomness, and program checking.", "url": "people/manuel-blum.html" }, { "id": "michael-ben-or", "type": "person", "typeLabel": "Person", "title": "Michael Ben-Or", "slug": "michael-ben-or", "era": "1980s-Present", "tags": [ "distributed-computing", "fault-tolerance", "cryptography", "quantum-computing", "academic-research" ], "summary": "Theoretical computer scientist whose work spans fault-tolerant distributed computation, secure multiparty computation, cryptography, and quantum computing.", "url": "people/michael-ben-or.html" }, { "id": "nadia-heninger", "type": "person", "typeLabel": "Person", "title": "Nadia Heninger", "slug": "nadia-heninger", "era": "2010s-Present", "tags": [ "cryptography", "cryptanalysis", "internet-measurement", "academic-research", "public-key-cryptography" ], "summary": "Cryptographer and UC San Diego professor whose research analyzes deployed public-key cryptography and consequences of weak keys and protocol failures.", "url": "people/nadia-heninger.html" }, { "id": "ran-canetti", "type": "person", "typeLabel": "Person", "title": "Ran Canetti", "slug": "ran-canetti", "era": "1990s-Present", "tags": [ "cryptography", "protocol-security", "network-security", "academic-research" ], "summary": "Cryptographer whose research on cryptographic protocol design and analysis includes the universally composable security framework.", "url": "people/ran-canetti.html" }, { "id": "roxana-geambasu", "type": "person", "typeLabel": "Person", "title": "Roxana Geambasu", "slug": "roxana-geambasu", "era": "2000s-Present", "tags": [ "privacy", "systems-security", "web-security", "academia", "cloud-security" ], "summary": "Computer-systems and privacy researcher at Columbia University whose work examines accountable, privacy-preserving systems for the Web, cloud services, and mobile devices.", "url": "people/roxana-geambasu.html" }, { "id": "ueli-maurer", "type": "person", "typeLabel": "Person", "title": "Ueli Maurer", "slug": "ueli-maurer", "era": "1980s-Present", "tags": [ "cryptography", "information-theory", "security-proofs", "academic-research" ], "summary": "ETH Zürich computer scientist known for research in cryptography, information-theoretic security, and constructive approaches to security definitions.", "url": "people/ueli-maurer.html" }, { "id": "victor-shoup", "type": "person", "typeLabel": "Person", "title": "Victor Shoup", "slug": "victor-shoup", "era": "1990s-Present", "tags": [ "cryptography", "number-theory", "algorithms", "open-source-security-tools", "academic-research" ], "summary": "Cryptographer and NYU professor known for research on cryptographic protocols and number-theoretic algorithms, and for the NTL software library.", "url": "people/victor-shoup.html" }, { "id": "yehuda-lindell", "type": "person", "typeLabel": "Person", "title": "Yehuda Lindell", "slug": "yehuda-lindell", "era": "1990s-Present", "tags": [ "cryptography", "secure-multiparty-computation", "applied-cryptography", "academic-research" ], "summary": "Cryptographer and educator whose research focuses on secure multiparty computation, rigorous cryptographic protocols, and practical key-protection systems.", "url": "people/yehuda-lindell.html" }, { "id": "john-rushby", "type": "person", "typeLabel": "Person", "title": "John Rushby", "slug": "john-rushby", "era": "1983-Present", "tags": [ "formal-methods", "high-assurance", "computer-security", "sri", "research" ], "summary": "Computer-security researcher whose work applies formal methods to the assurance of secure, safe, and dependable systems.", "url": "people/john-rushby.html" }, { "id": "steve-lipner", "type": "person", "typeLabel": "Person", "title": "Steve Lipner", "slug": "steve-lipner", "era": "1970s-Present", "tags": [ "secure-development", "microsoft", "software-assurance", "msrc", "leadership" ], "summary": "Security engineer and technical leader associated with Microsoft’s Security Development Lifecycle and software-assurance practice.", "url": "people/steve-lipner.html" }, { "id": "dieter-gollmann", "type": "person", "typeLabel": "Person", "title": "Dieter Gollmann", "slug": "dieter-gollmann", "era": "1980s-Present", "tags": [ "security-engineering", "distributed-systems", "software-security", "academia", "books" ], "summary": "Computer-security scholar known for research and teaching spanning communications, software, and application security.", "url": "people/dieter-gollmann.html" }, { "id": "elisa-bertino", "type": "person", "typeLabel": "Person", "title": "Elisa Bertino", "slug": "elisa-bertino", "era": "1980s-Present", "tags": [ "access-control", "database-security", "privacy", "cerias", "academia" ], "summary": "Computer-security and database researcher whose work includes access control, privacy, and secure data management.", "url": "people/elisa-bertino.html" }, { "id": "ninghui-li", "type": "person", "typeLabel": "Person", "title": "Ninghui Li", "slug": "ninghui-li", "era": "2000s-Present", "tags": [ "access-control", "trust-management", "privacy", "applied-cryptography", "academia" ], "summary": "Computer-security researcher known for work on access control, trust management, privacy, and distributed-system security.", "url": "people/ninghui-li.html" }, { "id": "william-cheswick", "type": "person", "typeLabel": "Person", "title": "William R. Cheswick", "slug": "william-cheswick", "era": "1987-Present", "tags": [ "firewalls", "honeypots", "network-security", "bell-labs", "internet-mapping" ], "summary": "Network-security researcher known for early firewall work at Bell Labs and for co-authoring Firewalls and Internet Security.", "url": "people/william-cheswick.html" }, { "id": "jeannette-wing", "type": "person", "typeLabel": "Person", "title": "Jeannette M. Wing", "slug": "jeannette-wing", "era": "1980s-Present", "tags": [ "trustworthy-computing", "security-and-privacy", "formal-methods", "academia", "research-leadership" ], "summary": "Computer scientist whose research and research leadership address trustworthy computing, security, privacy, and formal methods.", "url": "people/jeannette-wing.html" }, { "id": "mark-s-miller", "type": "person", "typeLabel": "Person", "title": "Mark S. Miller", "slug": "mark-s-miller", "era": "1980s-Present", "tags": [ "capability-security", "programming-languages", "object-capabilities", "secure-systems", "research" ], "summary": "Computer scientist known for object-capability security and programming-language designs for secure open systems.", "url": "people/mark-s-miller.html" }, { "id": "elaine-barker", "type": "person", "typeLabel": "Person", "title": "Elaine Barker", "slug": "elaine-barker", "era": "1970s-Present", "tags": [ "cryptography", "nist", "standards", "key-management", "research" ], "summary": "Cryptography specialist associated with NIST guidance on key management and cryptographic standards.", "url": "people/elaine-barker.html" }, { "id": "donna-dodson", "type": "person", "typeLabel": "Person", "title": "Donna Dodson", "slug": "donna-dodson", "era": "1980s-Present", "tags": [ "cryptography", "nist", "standards", "computer-security", "leadership" ], "summary": "Computer-security and cryptography leader associated with NIST’s Computer Security Division and national cryptographic standards work.", "url": "people/donna-dodson.html" }, { "id": "charles-rackoff", "type": "person", "typeLabel": "Person", "title": "Charles Rackoff", "slug": "charles-rackoff", "era": "1970s-Present", "tags": [ "cryptography", "complexity-theory", "zero-knowledge", "interactive-proofs" ], "summary": "Cryptographer and complexity theorist whose work helped establish the theory of interactive proofs and zero-knowledge.", "url": "people/charles-rackoff.html" }, { "id": "nancy-lynch", "type": "person", "typeLabel": "Person", "title": "Nancy Lynch", "slug": "nancy-lynch", "era": "1970s-Present", "tags": [ "distributed-systems", "formal-methods", "fault-tolerance", "security" ], "summary": "MIT computer scientist whose formal models of distributed systems underpin reasoning about reliability and security in concurrent systems.", "url": "people/nancy-lynch.html" }, { "id": "ivan-damgard", "type": "person", "typeLabel": "Person", "title": "Ivan Bjerre Damgård", "slug": "ivan-damgard", "era": "1980s-Present", "tags": [ "cryptography", "secure-computation", "hash-functions", "multiparty-computation" ], "summary": "Danish cryptographer whose research spans hash-function constructions, secure computation, and cryptographic protocol design.", "url": "people/ivan-damgard.html" }, { "id": "tatsuaki-okamoto", "type": "person", "typeLabel": "Person", "title": "Tatsuaki Okamoto", "slug": "tatsuaki-okamoto", "era": "1970s-Present", "tags": [ "cryptography", "authentication", "public-key-cryptography", "information-security" ], "summary": "Japanese cryptographer and NTT Fellow known for long-running research and leadership in cryptography and information security.", "url": "people/tatsuaki-okamoto.html" }, { "id": "martin-abadi", "type": "person", "typeLabel": "Person", "title": "Martín Abadi", "slug": "martin-abadi", "era": "1980s-Present", "tags": [ "security-protocols", "formal-methods", "programming-languages", "cryptography" ], "summary": "Computer scientist whose formal work on authentication protocols and programming-language security shaped methods for reasoning about secure systems.", "url": "people/martin-abadi.html" }, { "id": "andrew-appel", "type": "person", "typeLabel": "Person", "title": "Andrew W. Appel", "slug": "andrew-appel", "era": "1980s-Present", "tags": [ "formal-verification", "computer-security", "election-security", "programming-languages" ], "summary": "Princeton computer scientist whose work joins formal verification, secure systems, and public scrutiny of election technology.", "url": "people/andrew-appel.html" }, { "id": "ralf-kusters", "type": "person", "typeLabel": "Person", "title": "Ralf Küsters", "slug": "ralf-kusters", "era": "1990s-Present", "tags": [ "formal-security", "cryptographic-protocols", "web-security", "electronic-voting" ], "summary": "German computer-security researcher known for formal analysis of cryptographic protocols, web security, electronic voting, and related systems.", "url": "people/ralf-kusters.html" }, { "id": "gavin-lowe", "type": "person", "typeLabel": "Person", "title": "Gavin Lowe", "slug": "gavin-lowe", "era": "1990s-Present", "tags": [ "formal-methods", "security-protocols", "authentication", "csp" ], "summary": "Oxford computer scientist whose formal analysis exposed a flaw in the Needham–Schroeder public-key protocol and influenced protocol-verification practice.", "url": "people/gavin-lowe.html" }, { "id": "michael-backes", "type": "person", "typeLabel": "Person", "title": "Michael Backes", "slug": "michael-backes", "era": "1990s-Present", "tags": [ "computer-security", "privacy", "cryptography", "formal-methods" ], "summary": "Computer-security and privacy researcher whose work spans cryptographic protocol analysis, formal methods, and privacy-preserving systems.", "url": "people/michael-backes.html" }, { "id": "catherine-meadows", "type": "person", "typeLabel": "Person", "title": "Catherine A. Meadows", "slug": "catherine-meadows", "era": "1980s-Present", "tags": [ "formal-methods", "cryptographic-protocols", "protocol-analysis", "high-assurance-systems" ], "summary": "Cryptographer and formal-methods researcher known for advancing formal analysis and automated discovery of flaws in security protocols.", "url": "people/catherine-meadows.html" }, { "id": "david-wheeler", "type": "person", "typeLabel": "Person", "title": "David Wheeler", "slug": "david-wheeler", "era": "1940s-2004", "tags": [ "computer-science", "edsac", "subroutines", "cryptography", "cambridge", "software-engineering" ], "summary": "British computer scientist who worked on EDSAC, developed the closed subroutine, and co-designed the Tiny Encryption Algorithm with Roger Needham.", "url": "people/david-wheeler.html" }, { "id": "douglas-engelbart", "type": "person", "typeLabel": "Person", "title": "Douglas Engelbart", "slug": "douglas-engelbart", "era": "1950s-2013", "tags": [ "human-computer-interaction", "mouse", "hypertext", "collaboration", "computer-networks", "research" ], "summary": "American engineer whose work at SRI advanced interactive computing, hypertext, collaborative systems, and the computer mouse.", "url": "people/douglas-engelbart.html" }, { "id": "frances-allen", "type": "person", "typeLabel": "Person", "title": "Frances Allen", "slug": "frances-allen", "era": "1950s-2020", "tags": [ "compiler-optimization", "programming-languages", "high-performance-computing", "ibm", "academic-research", "women-in-computing" ], "summary": "American computer scientist whose research in compiler optimization and parallel computing helped shape modern high-performance computing.", "url": "people/frances-allen.html" }, { "id": "frederick-p-brooks-jr", "type": "person", "typeLabel": "Person", "title": "Frederick P. Brooks Jr.", "slug": "frederick-p-brooks-jr", "era": "1950s-2022", "tags": [ "software-engineering", "computer-architecture", "ibm-system-360", "operating-systems", "academic-research", "books" ], "summary": "American computer scientist and software-engineering author who led work on IBM System/360 projects and wrote The Mythical Man-Month.", "url": "people/frederick-p-brooks-jr.html" }, { "id": "genevieve-grotjan-feinstein", "type": "person", "typeLabel": "Person", "title": "Genevieve Grotjan Feinstein", "slug": "genevieve-grotjan-feinstein", "era": "1930s-2006", "tags": [ "cryptanalysis", "purple", "venona", "mathematics", "signals-intelligence", "women-in-cryptology" ], "summary": "American mathematician and cryptanalyst whose breakthroughs assisted the solution of Japan's Purple diplomatic system and later work on Venona.", "url": "people/genevieve-grotjan-feinstein.html" }, { "id": "john-herivel", "type": "person", "typeLabel": "Person", "title": "John Herivel", "slug": "john-herivel", "era": "1940s-2011", "tags": [ "cryptanalysis", "enigma", "bletchley-park", "mathematics", "history-of-science", "codebreaking" ], "summary": "Irish mathematician, historian of science, and Bletchley Park codebreaker remembered for the \"Herivel Tip\" used in Enigma cryptanalysis.", "url": "people/john-herivel.html" }, { "id": "peter-naur", "type": "person", "typeLabel": "Person", "title": "Peter Naur", "slug": "peter-naur", "era": "1950s-2016", "tags": [ "programming-languages", "algol", "bnf", "computer-science", "academic-research", "turing-award" ], "summary": "Danish computer-science pioneer whose work on ALGOL 60 and formal language description contributed to modern programming-language practice.", "url": "people/peter-naur.html" }, { "id": "robert-w-taylor", "type": "person", "typeLabel": "Person", "title": "Robert W. Taylor", "slug": "robert-w-taylor", "era": "1960s-2017", "tags": [ "arpanet", "computer-networks", "xerox-parc", "interactive-computing", "research-management", "internet-history" ], "summary": "American computer-science research leader whose work at ARPA, Xerox PARC, and DEC supported major advances in networking and personal computing.", "url": "people/robert-w-taylor.html" }, { "id": "ann-z-caracristi", "type": "person", "typeLabel": "Person", "title": "Ann Z. Caracristi", "slug": "ann-z-caracristi", "era": "1940s-2016", "tags": [ "cryptanalysis", "leadership", "signals-intelligence", "computing" ], "summary": "Cryptanalyst and NSA leader who became the agency’s first woman deputy director.", "url": "people/ann-z-caracristi.html" }, { "id": "antoine-joux", "type": "person", "typeLabel": "Person", "title": "Antoine Joux", "slug": "antoine-joux", "era": "1990s-Present", "tags": [ "cryptography", "pairings", "cryptanalysis", "academic-research" ], "summary": "French cryptographer known for work on pairing-based cryptography and for research on discrete-logarithm algorithms.", "url": "people/antoine-joux.html" }, { "id": "antoni-palluth", "type": "person", "typeLabel": "Person", "title": "Antoni Palluth", "slug": "antoni-palluth", "era": "1920s-1944", "tags": [ "cryptanalysis", "enigma", "polish-cipher-bureau", "cryptographic-engineering", "world-war-ii" ], "summary": "Polish engineer, cryptologist, and co-founder of AVA Radio Company whose work supported the Polish Cipher Bureau’s Enigma effort.", "url": "people/antoni-palluth.html" }, { "id": "david-naccache", "type": "person", "typeLabel": "Person", "title": "David Naccache", "slug": "david-naccache", "era": "1990s-Present", "tags": [ "cryptography", "embedded-security", "forensics", "academic-research" ], "summary": "French cryptographer and ENS researcher whose work spans public-key cryptography, embedded-system security, code security and digital forensics.", "url": "people/david-naccache.html" }, { "id": "don-coppersmith", "type": "person", "typeLabel": "Person", "title": "Don Coppersmith", "slug": "don-coppersmith", "era": "1970s-Present", "tags": [ "cryptography", "mathematics", "cryptanalysis", "ibm-research" ], "summary": "American mathematician and cryptographer whose IBM research includes DES, discrete logarithms, RSA cryptanalysis and algorithms for modular equations.", "url": "people/don-coppersmith.html" }, { "id": "dorothy-t-blum", "type": "person", "typeLabel": "Person", "title": "Dorothy T. Blum", "slug": "dorothy-t-blum", "era": "1940s-1980", "tags": [ "cryptanalysis", "computing", "programming", "signals-intelligence" ], "summary": "Cryptanalyst and computer-programming pioneer who led NSA efforts to apply computers to cryptologic problems.", "url": "people/dorothy-t-blum.html" }, { "id": "eli-biham", "type": "person", "typeLabel": "Person", "title": "Eli Biham", "slug": "eli-biham", "era": "1980s-Present", "tags": [ "cryptography", "cryptanalysis", "differential-cryptanalysis", "academic-research" ], "summary": "Israeli cryptographer and Technion professor whose doctoral research with Adi Shamir publicly developed differential cryptanalysis, a general technique for analysing block ciphers.", "url": "people/eli-biham.html" }, { "id": "friedrich-kasiski", "type": "person", "typeLabel": "Person", "title": "Friedrich Kasiski", "slug": "friedrich-kasiski", "era": "1860s-1881", "tags": [ "cryptanalysis", "classical-cryptography", "vigenere", "cryptographic-history", "research" ], "summary": "German officer and cryptographer who published the Kasiski examination, a method for attacking repeating-key polyalphabetic ciphers.", "url": "people/friedrich-kasiski.html" }, { "id": "gilbert-vernam", "type": "person", "typeLabel": "Person", "title": "Gilbert S. Vernam", "slug": "gilbert-vernam", "era": "1910s-1960", "tags": [ "cryptography", "stream-ciphers", "one-time-pad", "teleprinter", "engineering" ], "summary": "American engineer whose teleprinter cipher design became the Vernam system, a key precursor to the modern one-time pad.", "url": "people/gilbert-vernam.html" }, { "id": "harry-golombek", "type": "person", "typeLabel": "Person", "title": "Harry Golombek", "slug": "harry-golombek", "era": "1940s-1995", "tags": [ "cryptanalysis", "bletchley-park", "enigma", "chess", "writing" ], "summary": "British chess master, writer, and wartime codebreaker who worked at Bletchley Park.", "url": "people/harry-golombek.html" }, { "id": "herbert-yardley", "type": "person", "typeLabel": "Person", "title": "Herbert O. Yardley", "slug": "herbert-yardley", "era": "1910s-1958", "tags": [ "cryptanalysis", "signals-intelligence", "black-chamber", "history" ], "summary": "American codebreaker who led MI-8, the U.S. State Department and Army codebreaking office commonly called the Black Chamber.", "url": "people/herbert-yardley.html" }, { "id": "james-l-massey", "type": "person", "typeLabel": "Person", "title": "James L. Massey", "slug": "james-l-massey", "era": "1960s-2013", "tags": [ "cryptography", "coding-theory", "information-theory", "academic-research" ], "summary": "American-Swiss information theorist and cryptographer whose research and teaching shaped coding theory and modern cryptology.", "url": "people/james-l-massey.html" }, { "id": "joan-daemen", "type": "person", "typeLabel": "Person", "title": "Joan Daemen", "slug": "joan-daemen", "era": "1990s-Present", "tags": [ "cryptography", "symmetric-cryptography", "aes", "sha-3", "academic-research" ], "summary": "Belgian cryptographer who co-designed Rijndael, selected by NIST as the Advanced Encryption Standard, and later co-designed Keccak, selected as SHA-3.", "url": "people/joan-daemen.html" }, { "id": "joseph-weizenbaum", "type": "person", "typeLabel": "Person", "title": "Joseph Weizenbaum", "slug": "joseph-weizenbaum", "era": "1950s-2008", "tags": [ "computer-science", "ai", "ethics", "academic-research", "eliza" ], "summary": "MIT computer scientist who created ELIZA and became an influential critic of uncritical claims about computers, automation, and artificial intelligence.", "url": "people/joseph-weizenbaum.html" }, { "id": "juanita-moody", "type": "person", "typeLabel": "Person", "title": "Juanita Moody", "slug": "juanita-moody", "era": "1940s-2019", "tags": [ "signals-intelligence", "cryptanalysis", "cuban-missile-crisis", "intelligence-analysis" ], "summary": "Cryptologic leader who directed NSA signals-intelligence production during the Cuban Missile Crisis.", "url": "people/juanita-moody.html" }, { "id": "juliana-mickwitz", "type": "person", "typeLabel": "Person", "title": "Juliana Mickwitz", "slug": "juliana-mickwitz", "era": "1940s-1976", "tags": [ "linguistics", "signals-intelligence", "russian", "cryptanalysis" ], "summary": "Russian-language specialist and cryptologic educator who advanced language-based intelligence work at U.S. security agencies.", "url": "people/juliana-mickwitz.html" }, { "id": "kaisa-nyberg", "type": "person", "typeLabel": "Person", "title": "Kaisa Nyberg", "slug": "kaisa-nyberg", "era": "1980s-Present", "tags": [ "cryptography", "mobile-security", "symmetric-cryptography", "academic-research" ], "summary": "Finnish cryptographer and Aalto University professor emerita whose work has covered block ciphers, Boolean functions and mobile-security protocols.", "url": "people/kaisa-nyberg.html" }, { "id": "lambros-callimahos", "type": "person", "typeLabel": "Person", "title": "Lambros D. Callimahos", "slug": "lambros-callimahos", "era": "1940s-1977", "tags": [ "cryptanalysis", "nsa", "cryptologic-education", "signals-intelligence", "research" ], "summary": "U.S. Army and NSA cryptologist, teacher, and author who developed advanced cryptanalysis instruction including the CA-400 course.", "url": "people/lambros-callimahos.html" }, { "id": "lars-knudsen", "type": "person", "typeLabel": "Person", "title": "Lars R. Knudsen", "slug": "lars-knudsen", "era": "1990s-Present", "tags": [ "cryptography", "symmetric-cryptography", "cryptanalysis", "academic-research" ], "summary": "Danish cryptographer recognized for fundamental contributions to the design and cryptanalysis of symmetric primitives.", "url": "people/lars-knudsen.html" }, { "id": "marie-meyer", "type": "person", "typeLabel": "Person", "title": "Marie Meyer", "slug": "marie-meyer", "era": "1940s-1970s", "tags": [ "cryptanalysis", "venona", "linguistics", "russian", "signals-intelligence" ], "summary": "Linguist and cryptanalyst whose early work helped recover parts of the VENONA codebook.", "url": "people/marie-meyer.html" }, { "id": "mary-polly-budenbach", "type": "person", "typeLabel": "Person", "title": "Mary H. “Polly” Budenbach", "slug": "mary-polly-budenbach", "era": "1940s-2000s", "tags": [ "cryptanalysis", "signals-intelligence", "research", "naval-cryptology" ], "summary": "Cryptanalyst and research leader who joined U.S. Navy cryptologic work in World War II and later led an NSA research group.", "url": "people/mary-polly-budenbach.html" }, { "id": "maureen-baginski", "type": "person", "typeLabel": "Person", "title": "Maureen Baginski", "slug": "maureen-baginski", "era": "1970s-Present", "tags": [ "signals-intelligence", "intelligence-analysis", "leadership", "cybersecurity" ], "summary": "Signals-intelligence leader who directed NSA SIGINT during the September 11 attacks and later held a senior FBI intelligence role.", "url": "people/maureen-baginski.html" }, { "id": "meredith-gardner", "type": "person", "typeLabel": "Person", "title": "Meredith Gardner", "slug": "meredith-gardner", "era": "1940s-2002", "tags": [ "cryptanalysis", "venona", "linguistics", "signals-intelligence" ], "summary": "Linguist and cryptanalyst whose work on VENONA helped read Soviet intelligence traffic.", "url": "people/meredith-gardner.html" }, { "id": "mitsuru-matsui", "type": "person", "typeLabel": "Person", "title": "Mitsuru Matsui", "slug": "mitsuru-matsui", "era": "1990s-Present", "tags": [ "cryptography", "cryptanalysis", "linear-cryptanalysis", "mobile-security" ], "summary": "Japanese cryptographer at Mitsubishi Electric known for developing linear cryptanalysis and for work on MISTY, KASUMI and Camellia cipher technology.", "url": "people/mitsuru-matsui.html" }, { "id": "niklaus-wirth", "type": "person", "typeLabel": "Person", "title": "Niklaus Wirth", "slug": "niklaus-wirth", "era": "1960s-2024", "tags": [ "computer-science", "programming-languages", "software-engineering", "academic-research", "pascal" ], "summary": "Swiss computer scientist, professor, and Turing Award recipient known for Pascal and influential work in programming languages and software engineering.", "url": "people/niklaus-wirth.html" }, { "id": "peter-twinn", "type": "person", "typeLabel": "Person", "title": "Peter Twinn", "slug": "peter-twinn", "era": "1930s-2004", "tags": [ "cryptanalysis", "bletchley-park", "enigma", "bombe", "mathematics" ], "summary": "British mathematician and cryptanalyst who made the first British break into a German Enigma message and later led the ISK section at Bletchley Park.", "url": "people/peter-twinn.html" }, { "id": "rolf-noskwith", "type": "person", "typeLabel": "Person", "title": "Rolf Noskwith", "slug": "rolf-noskwith", "era": "1940s-2017", "tags": [ "cryptanalysis", "bletchley-park", "enigma", "mathematics", "naval-intelligence" ], "summary": "British mathematician and Bletchley Park codebreaker who worked on German naval Enigma traffic in Hut 8.", "url": "people/rolf-noskwith.html" }, { "id": "stuart-milner-barry", "type": "person", "typeLabel": "Person", "title": "Stuart Milner-Barry", "slug": "stuart-milner-barry", "era": "1940s-1995", "tags": [ "cryptanalysis", "bletchley-park", "enigma", "chess", "public-service" ], "summary": "British codebreaker, civil servant, and chess player who led Hut 6 at Bletchley Park during the Second World War.", "url": "people/stuart-milner-barry.html" }, { "id": "vincent-rijmen", "type": "person", "typeLabel": "Person", "title": "Vincent Rijmen", "slug": "vincent-rijmen", "era": "1990s-Present", "tags": [ "cryptography", "symmetric-cryptography", "aes", "academic-research" ], "summary": "Belgian cryptographer and co-designer of Rijndael, the cipher NIST standardized as the Advanced Encryption Standard.", "url": "people/vincent-rijmen.html" }, { "id": "michael-waidner", "type": "person", "typeLabel": "Person", "title": "Michael Waidner", "slug": "michael-waidner", "era": "1980s-Present", "tags": [ "academic-research", "cryptography", "privacy", "cybersecurity" ], "summary": "German computer scientist and cybersecurity researcher whose work spans security, privacy, cryptography, and dependable systems.", "url": "people/michael-waidner.html" }, { "id": "roberto-tamassia", "type": "person", "typeLabel": "Person", "title": "Roberto Tamassia", "slug": "roberto-tamassia", "era": "1980s-Present", "tags": [ "academic-research", "applied-cryptography", "authentication", "computer-security" ], "summary": "Italian-American computer scientist whose research includes computer security, applied cryptography, authentication, algorithms, and data security.", "url": "people/roberto-tamassia.html" }, { "id": "gene-tsudik", "type": "person", "typeLabel": "Person", "title": "Gene Tsudik", "slug": "gene-tsudik", "era": "1990s-Present", "tags": [ "academic-research", "security", "privacy", "applied-cryptography" ], "summary": "Computer-security and privacy researcher at UC Irvine whose work covers applied cryptography, Internet security, distributed systems, and privacy.", "url": "people/gene-tsudik.html" }, { "id": "leslie-lamport", "type": "person", "typeLabel": "Person", "title": "Leslie Lamport", "slug": "leslie-lamport", "era": "1970s-Present", "tags": [ "academic-research", "distributed-systems", "formal-methods", "computer-security" ], "summary": "Computer scientist known for foundational work on distributed systems, formal specification and verification, and the initial development of LaTeX.", "url": "people/leslie-lamport.html" }, { "id": "donald-knuth", "type": "person", "typeLabel": "Person", "title": "Donald Knuth", "slug": "donald-knuth", "era": "1950s-Present", "tags": [ "academic-research", "algorithms", "programming-languages", "computer-science-history" ], "summary": "Computer scientist and Stanford professor emeritus whose work on algorithms, programming languages, and The Art of Computer Programming helped establish computer science as a rigorous discipline.", "url": "people/donald-knuth.html" }, { "id": "robert-floyd", "type": "person", "typeLabel": "Person", "title": "Robert W. Floyd", "slug": "robert-floyd", "era": "1950s-2001", "tags": [ "academic-research", "algorithms", "program-verification", "computer-science-history" ], "summary": "American computer scientist whose work on algorithms and formal methods—including Floyd–Warshall and Floyd–Hoare logic—helped establish program verification.", "url": "people/robert-floyd.html" }, { "id": "robin-milner", "type": "person", "typeLabel": "Person", "title": "Robin Milner", "slug": "robin-milner", "era": "1960s-2010", "tags": [ "academic-research", "formal-methods", "programming-languages", "concurrency" ], "summary": "British computer scientist whose work on LCF, ML, CCS, and process calculi shaped formal methods and the theory of concurrent systems.", "url": "people/robin-milner.html" }, { "id": "peter-denning", "type": "person", "typeLabel": "Person", "title": "Peter J. Denning", "slug": "peter-denning", "era": "1960s-Present", "tags": [ "academic-research", "operating-systems", "computer-security", "computing-education" ], "summary": "Computer scientist known for work on operating systems, working sets, computer security, and the communication of computing research to broader audiences.", "url": "people/peter-denning.html" }, { "id": "donald-michie", "type": "person", "typeLabel": "Person", "title": "Donald Michie", "slug": "donald-michie", "era": "1940s-2007", "tags": [ "cryptanalysis", "artificial-intelligence", "bletchley-park", "academic-research" ], "summary": "British codebreaker and artificial-intelligence researcher whose wartime work on the Lorenz cipher preceded a major academic career in machine intelligence.", "url": "people/donald-michie.html" }, { "id": "friedrich-l-bauer", "type": "person", "typeLabel": "Person", "title": "Friedrich L. Bauer", "slug": "friedrich-l-bauer", "era": "1940s-2015", "tags": [ "cryptography", "software-engineering", "programming-languages", "academic-research" ], "summary": "German computer-science pioneer whose work ranged across programming languages, software engineering, and cryptography.", "url": "people/friedrich-l-bauer.html" }, { "id": "alonzo-church", "type": "person", "typeLabel": "Person", "title": "Alonzo Church", "slug": "alonzo-church", "era": "1930s-1995", "tags": [ "logic", "computability", "cryptography", "academic-research" ], "summary": "American mathematician and logician whose work on computability established enduring foundations for computer science and the formal analysis of algorithms.", "url": "people/alonzo-church.html" }, { "id": "abraham-lempel", "type": "person", "typeLabel": "Person", "title": "Abraham Lempel", "slug": "abraham-lempel", "era": "1960s-2023", "tags": [ "information-theory", "data-compression", "algorithms", "academic-research" ], "summary": "Israeli computer scientist and information theorist who co-created the Lempel–Ziv family of lossless compression algorithms.", "url": "people/abraham-lempel.html" }, { "id": "gustave-solomon", "type": "person", "typeLabel": "Person", "title": "Gustave Solomon", "slug": "gustave-solomon", "era": "1950s-1996", "tags": [ "coding-theory", "information-theory", "error-correction", "academic-research" ], "summary": "American mathematician and electrical engineer who co-invented Reed–Solomon error-correcting codes with Irving S. Reed.", "url": "people/gustave-solomon.html" }, { "id": "irving-s-reed", "type": "person", "typeLabel": "Person", "title": "Irving S. Reed", "slug": "irving-s-reed", "era": "1940s-2012", "tags": [ "coding-theory", "information-theory", "error-correction", "academic-research" ], "summary": "American mathematician and engineer who co-invented Reed–Muller and Reed–Solomon codes, foundational methods for reliable digital communication.", "url": "people/irving-s-reed.html" }, { "id": "elwyn-berlekamp", "type": "person", "typeLabel": "Person", "title": "Elwyn Berlekamp", "slug": "elwyn-berlekamp", "era": "1960s-2019", "tags": [ "coding-theory", "cryptography", "mathematics", "academic-research" ], "summary": "American mathematician and computer scientist whose algorithms advanced error-correcting codes, finite-field computation, and cryptographic research.", "url": "people/elwyn-berlekamp.html" }, { "id": "david-l-mills", "type": "person", "typeLabel": "Person", "title": "David L. Mills", "slug": "david-l-mills", "era": "1970s-2024", "tags": [ "internet", "network-time-protocol", "network-security", "academic-research" ], "summary": "American computer engineer and internet pioneer who developed the Network Time Protocol (NTP) and taught computer security and networking at the University of Delaware.", "url": "people/david-l-mills.html" }, { "id": "hans-dobbertin", "type": "person", "typeLabel": "Person", "title": "Hans Dobbertin", "slug": "hans-dobbertin", "era": "1980s-2006", "tags": [ "cryptanalysis", "hash-functions", "information-security", "academic-research" ], "summary": "German cryptographer known for cryptanalysis of early hash functions and for research on RIPEMD.", "url": "people/hans-dobbertin.html" }, { "id": "hedy-lamarr", "type": "person", "typeLabel": "Person", "title": "Hedy-Lamarr", "slug": "hedy-lamarr", "era": "1940s-2000", "tags": [ "wireless-communications", "spread-spectrum", "inventors", "security-history" ], "summary": "Austrian-born American inventor and actor who co-patented a frequency-hopping communications system with George Antheil during the Second World War.", "url": "people/hedy-lamarr.html" }, { "id": "harri-hursti", "type": "person", "typeLabel": "Person", "title": "Harri Hursti", "slug": "harri-hursti", "era": "2000s-Present", "tags": [ "election-security", "voting-systems", "independent-research", "public-interest-security" ], "summary": "Finnish computer-security researcher known for independent security testing of electronic voting systems and for election-technology security advocacy.", "url": "people/harri-hursti.html" }, { "id": "robert-knake", "type": "person", "typeLabel": "Person", "title": "Robert Knake", "slug": "robert-knake", "era": "2000s-Present", "tags": [ "cybersecurity-policy", "critical-infrastructure", "ransomware", "public-service", "author" ], "summary": "U.S. cybersecurity policy specialist and author whose work has addressed critical-infrastructure protection, ransomware, and national cyber strategy.", "url": "people/robert-knake.html" }, { "id": "tanya-janca", "type": "person", "typeLabel": "Person", "title": "Tanya Janca", "slug": "tanya-janca", "era": "2010s-Present", "tags": [ "application-security", "devsecops", "secure-development", "education", "author" ], "summary": "Application-security educator, author, and practitioner known for making secure software-development practices accessible to engineering teams.", "url": "people/tanya-janca.html" }, { "id": "caroline-wong", "type": "person", "typeLabel": "Person", "title": "Caroline Wong", "slug": "caroline-wong", "era": "2000s-Present", "tags": [ "application-security", "security-leadership", "security-metrics", "education", "author" ], "summary": "Application-security leader, educator, and author known for work on security programs, software-security metrics, and professional development.", "url": "people/caroline-wong.html" }, { "id": "david-brumley", "type": "person", "typeLabel": "Person", "title": "David Brumley", "slug": "david-brumley", "era": "2000s-Present", "tags": [ "software-security", "program-analysis", "automated-exploit-generation", "research", "education" ], "summary": "Computer-security researcher and Carnegie Mellon professor known for work on program analysis, vulnerability discovery, and automated reasoning about software security.", "url": "people/david-brumley.html" }, { "id": "eric-rescorla", "type": "person", "typeLabel": "Person", "title": "Eric Rescorla", "slug": "eric-rescorla", "era": "1990s-Present", "tags": [ "cryptography", "internet-standards", "tls", "web-security", "research" ], "summary": "Internet-security researcher and standards contributor known for work on TLS, browser security, and the engineering of secure web protocols.", "url": "people/eric-rescorla.html" }, { "id": "michael-howard", "type": "person", "typeLabel": "Person", "title": "Michael Howard", "slug": "michael-howard", "era": "1990s-Present", "tags": [ "secure-development", "microsoft", "threat-modeling", "security-engineering", "author" ], "summary": "Software-security engineer and author known for helping develop secure-development practices at Microsoft and for co-authoring Writing Secure Code.", "url": "people/michael-howard.html" }, { "id": "steve-riley", "type": "person", "typeLabel": "Person", "title": "Steve Riley", "slug": "steve-riley", "era": "1990s-Present", "tags": [ "security-strategy", "microsoft", "enterprise-security", "author", "risk-management" ], "summary": "Security strategist and author known for public work on enterprise security, risk management, and the operational adoption of secure-computing practices.", "url": "people/steve-riley.html" }, { "id": "frank-swiderski", "type": "person", "typeLabel": "Person", "title": "Frank Swiderski", "slug": "frank-swiderski", "era": "2000s-Present", "tags": [ "threat-modeling", "secure-development", "software-security", "author", "microsoft" ], "summary": "Software-security practitioner and author known for co-authoring a practical threat-modeling guide for developers and security teams.", "url": "people/frank-swiderski.html" }, { "id": "jon-callas", "type": "person", "typeLabel": "Person", "title": "Jon Callas", "slug": "jon-callas", "era": "1990s-Present", "tags": [ "cryptography", "privacy", "pgp", "openpgp", "security-engineering" ], "summary": "Cryptographer and privacy engineer known for work on PGP, OpenPGP, secure communications, and public-interest technology.", "url": "people/jon-callas.html" }, { "id": "alex-biryukov", "type": "person", "typeLabel": "Person", "title": "Alex Biryukov", "slug": "alex-biryukov", "era": "1990s-Present", "tags": [ "cryptography", "symmetric-cryptography", "cryptanalysis", "password-security", "academic-research" ], "summary": "Cryptographer and professor at the University of Luxembourg whose research includes symmetric cryptography, cryptanalysis, and password-hashing research.", "url": "people/alex-biryukov.html" }, { "id": "arvid-damm", "type": "person", "typeLabel": "Person", "title": "Arvid Damm", "slug": "arvid-damm", "era": "1910s-1928", "tags": [ "cryptography", "rotor-machines", "cipher-machines", "patents" ], "summary": "Swedish engineer and inventor who patented early rotor-cipher mechanisms and founded the enterprise that later became associated with Boris Hagelin’s work.", "url": "people/arvid-damm.html" }, { "id": "auguste-kerckhoffs", "type": "person", "typeLabel": "Person", "title": "Auguste Kerckhoffs", "slug": "auguste-kerckhoffs", "era": "1860s-1903", "tags": [ "cryptography", "security-design", "academic-research", "kerckhoffs-principle" ], "summary": "Dutch linguist and cryptography writer whose 1883 design rules for military ciphers remain central to modern security engineering.", "url": "people/auguste-kerckhoffs.html" }, { "id": "benny-pinkas", "type": "person", "typeLabel": "Person", "title": "Benny Pinkas", "slug": "benny-pinkas", "era": "1990s-Present", "tags": [ "applied-cryptography", "secure-computation", "private-set-intersection", "privacy", "research" ], "summary": "Applied cryptography researcher whose work includes secure multi-party computation, private set intersection, privacy-preserving analytics, and computer security.", "url": "people/benny-pinkas.html" }, { "id": "chris-peikert", "type": "person", "typeLabel": "Person", "title": "Chris Peikert", "slug": "chris-peikert", "era": "2000s-Present", "tags": [ "cryptography", "lattices", "post-quantum-cryptography", "ring-lwe", "research" ], "summary": "Cryptographer whose research on lattice-based constructions and the Learning With Errors family of assumptions contributed to post-quantum cryptography.", "url": "people/chris-peikert.html" }, { "id": "craig-gentry", "type": "person", "typeLabel": "Person", "title": "Craig Gentry", "slug": "craig-gentry", "era": "2000s-Present", "tags": [ "cryptography", "fully-homomorphic-encryption", "privacy", "encrypted-computation", "research" ], "summary": "Cryptographer known for introducing a plausible fully homomorphic encryption scheme in 2009, a major development in privacy-preserving computation.", "url": "people/craig-gentry.html" }, { "id": "daniele-micciancio", "type": "person", "typeLabel": "Person", "title": "Daniele Micciancio", "slug": "daniele-micciancio", "era": "1990s-Present", "tags": [ "cryptography", "lattice-cryptography", "post-quantum-cryptography", "complexity-theory", "academic-research" ], "summary": "Italian-American computer scientist and cryptographer known for research on lattice problems, cryptographic complexity, and lattice-based cryptography.", "url": "people/daniele-micciancio.html" }, { "id": "david-cash", "type": "person", "typeLabel": "Person", "title": "David Cash", "slug": "david-cash", "era": "2000s-Present", "tags": [ "cryptography", "encrypted-search", "post-quantum-cryptography", "computer-security", "research" ], "summary": "Cryptographer and University of Chicago professor whose work includes encrypted data search, quantum-secure cryptography, and computer security.", "url": "people/david-cash.html" }, { "id": "david-pointcheval", "type": "person", "typeLabel": "Person", "title": "David Pointcheval", "slug": "david-pointcheval", "era": "1990s-Present", "tags": [ "cryptography", "provable-security", "public-key-cryptography", "privacy", "academic-research" ], "summary": "French cryptographer and CNRS research director whose work has helped advance formal security analysis and practical public-key cryptography.", "url": "people/david-pointcheval.html" }, { "id": "etienne-bazeries", "type": "person", "typeLabel": "Person", "title": "Étienne Bazeries", "slug": "etienne-bazeries", "era": "1890s-1931", "tags": [ "cryptanalysis", "cryptography", "military-history", "cipher-devices" ], "summary": "French military cryptanalyst known for attacking historical and contemporary ciphers and for the Bazeries cylinder.", "url": "people/etienne-bazeries.html" }, { "id": "felix-delastelle", "type": "person", "typeLabel": "Person", "title": "Félix Delastelle", "slug": "felix-delastelle", "era": "1890s-1902", "tags": [ "cryptography", "classical-ciphers", "cipher-design", "research" ], "summary": "French amateur cryptographer who introduced the Bifid, Trifid, and four-square cipher families.", "url": "people/felix-delastelle.html" }, { "id": "helger-lipmaa", "type": "person", "typeLabel": "Person", "title": "Helger Lipmaa", "slug": "helger-lipmaa", "era": "1990s-Present", "tags": [ "cryptography", "zero-knowledge", "cryptographic-protocols", "privacy", "academic-research" ], "summary": "Estonian cryptographer whose research includes zero-knowledge protocols, privacy-preserving systems, e-voting, and blockchain-related cryptography.", "url": "people/helger-lipmaa.html" }, { "id": "hugo-koch", "type": "person", "typeLabel": "Person", "title": "Hugo Koch", "slug": "hugo-koch", "era": "1910s-1928", "tags": [ "cryptography", "rotor-machines", "cipher-machines", "patents" ], "summary": "Dutch inventor whose 1919 rotor-machine patent forms part of the early history of electromechanical cipher machines.", "url": "people/hugo-koch.html" }, { "id": "jean-philippe-aumasson", "type": "person", "typeLabel": "Person", "title": "Jean-Philippe Aumasson", "slug": "jean-philippe-aumasson", "era": "2000s-Present", "tags": [ "cryptography", "hash-functions", "cryptographic-engineering", "security-research", "technical-writing" ], "summary": "Swiss cryptographer and security researcher known for work on hash functions, including BLAKE2, and for technical writing on modern cryptography.", "url": "people/jean-philippe-aumasson.html" }, { "id": "john-francis-byrne", "type": "person", "typeLabel": "Person", "title": "John Francis Byrne", "slug": "john-francis-byrne", "era": "1910s-1960", "tags": [ "cryptography", "classical-ciphers", "chaocipher", "cipher-history" ], "summary": "Irish-American journalist and inventor of Chaocipher, a cipher system whose mechanism was not publicly disclosed until decades after his death.", "url": "people/john-francis-byrne.html" }, { "id": "jonathan-katz", "type": "person", "typeLabel": "Person", "title": "Jonathan Katz", "slug": "jonathan-katz", "era": "2000s-Present", "tags": [ "cryptography", "network-security", "cryptographic-protocols", "education", "research" ], "summary": "Cryptographer and University of Maryland professor whose work spans cryptography, computer and network security, and cryptography education.", "url": "people/jonathan-katz.html" }, { "id": "joseph-mauborgne", "type": "person", "typeLabel": "Person", "title": "Joseph O. Mauborgne", "slug": "joseph-mauborgne", "era": "1910s-1971", "tags": [ "cryptology", "one-time-pad", "signal-corps", "military-history" ], "summary": "U.S. Army Signal Corps officer and cryptologist credited with Gilbert Vernam for the practical one-time-pad system.", "url": "people/joseph-mauborgne.html" }, { "id": "joseph-rochefort", "type": "person", "typeLabel": "Person", "title": "Joseph Rochefort", "slug": "joseph-rochefort", "era": "1920s-1976", "tags": [ "cryptanalysis", "signals-intelligence", "station-hypo", "naval-history" ], "summary": "U.S. Navy officer and cryptanalyst who led Station Hypo’s wartime intelligence work in Hawaii.", "url": "people/joseph-rochefort.html" }, { "id": "kobbi-nissim", "type": "person", "typeLabel": "Person", "title": "Kobbi Nissim", "slug": "kobbi-nissim", "era": "2000s-Present", "tags": [ "privacy", "differential-privacy", "cryptography", "privacy-law", "research" ], "summary": "Computer scientist whose work examines rigorous privacy practices at the intersection of cryptography, data analysis, and privacy policy.", "url": "people/kobbi-nissim.html" }, { "id": "kristin-lauter", "type": "person", "typeLabel": "Person", "title": "Kristin Lauter", "slug": "kristin-lauter", "era": "1990s-Present", "tags": [ "cryptography", "elliptic-curves", "homomorphic-encryption", "privacy", "academic-research" ], "summary": "American mathematician and cryptographer known for research on elliptic-curve cryptography, homomorphic encryption, and privacy-preserving computation.", "url": "people/kristin-lauter.html" }, { "id": "laurance-safford", "type": "person", "typeLabel": "Person", "title": "Laurance F. Safford", "slug": "laurance-safford", "era": "1920s-1973", "tags": [ "cryptanalysis", "naval-cryptology", "signals-intelligence", "sigaba" ], "summary": "U.S. Navy cryptologist who built and led early naval cryptologic organizations and helped shape their worldwide collection capability.", "url": "people/laurance-safford.html" }, { "id": "marcel-givierge", "type": "person", "typeLabel": "Person", "title": "Marcel Givierge", "slug": "marcel-givierge", "era": "1910s-1931", "tags": [ "cryptanalysis", "cryptography", "military-history", "academic-research" ], "summary": "French Army officer and cryptology specialist who directed wartime cipher work and wrote instructional texts on cryptography.", "url": "people/marcel-givierge.html" }, { "id": "niels-ferguson", "type": "person", "typeLabel": "Person", "title": "Niels Ferguson", "slug": "niels-ferguson", "era": "1990s-Present", "tags": [ "cryptography", "protocol-design", "random-number-generation", "cryptographic-engineering", "security-research" ], "summary": "Dutch cryptographer and security consultant known for co-designing cryptographic primitives and for coauthoring Cryptography Engineering.", "url": "people/niels-ferguson.html" }, { "id": "nigel-smart", "type": "person", "typeLabel": "Person", "title": "Nigel Smart", "slug": "nigel-smart", "era": "1990s-Present", "tags": [ "cryptography", "multi-party-computation", "homomorphic-encryption", "cryptographic-protocols", "research" ], "summary": "Cryptographer at KU Leuven's COSIC group whose research connects public-key cryptography, cryptographic protocols, multi-party computation, and homomorphic encryption.", "url": "people/nigel-smart.html" }, { "id": "oded-regev", "type": "person", "typeLabel": "Person", "title": "Oded Regev", "slug": "oded-regev", "era": "2000s-Present", "tags": [ "cryptography", "lattices", "post-quantum-cryptography", "learning-with-errors", "research" ], "summary": "Computer scientist whose work on lattice-based cryptography, including the Learning With Errors problem, helped establish mathematical foundations used in post-quantum cryptography.", "url": "people/oded-regev.html" }, { "id": "samuel-neves", "type": "person", "typeLabel": "Person", "title": "Samuel Neves", "slug": "samuel-neves", "era": "2010s-Present", "tags": [ "cryptography", "elliptic-curves", "implementation-security", "post-quantum-cryptography", "academic-research" ], "summary": "Portuguese cryptographer whose research includes elliptic-curve cryptography, efficient implementations, and post-quantum cryptography.", "url": "people/samuel-neves.html" }, { "id": "tanja-lange", "type": "person", "typeLabel": "Person", "title": "Tanja Lange", "slug": "tanja-lange", "era": "2000s-Present", "tags": [ "cryptography", "number-theory", "elliptic-curves", "post-quantum-cryptography", "academic-research" ], "summary": "German cryptographer and number theorist whose research spans curve-based cryptography, implementation security, and post-quantum cryptography.", "url": "people/tanja-lange.html" }, { "id": "thomas-pornin", "type": "person", "typeLabel": "Person", "title": "Thomas Pornin", "slug": "thomas-pornin", "era": "2000s-Present", "tags": [ "cryptography", "cryptographic-engineering", "implementation-security", "public-key-cryptography", "security-research" ], "summary": "French cryptographer and software engineer known for work on cryptographic implementations and the BearSSL TLS library.", "url": "people/thomas-pornin.html" }, { "id": "vinod-vaikuntanathan", "type": "person", "typeLabel": "Person", "title": "Vinod Vaikuntanathan", "slug": "vinod-vaikuntanathan", "era": "2000s-Present", "tags": [ "cryptography", "homomorphic-encryption", "lattice-cryptography", "post-quantum-cryptography", "research" ], "summary": "MIT cryptographer whose research includes homomorphic encryption, lattice-based cryptography, and cryptographic foundations for computing on encrypted data.", "url": "people/vinod-vaikuntanathan.html" }, { "id": "yevgeniy-dodis", "type": "person", "typeLabel": "Person", "title": "Yevgeniy Dodis", "slug": "yevgeniy-dodis", "era": "2000s-Present", "tags": [ "cryptography", "randomness", "secure-messaging", "fuzzy-extractors", "research" ], "summary": "NYU cryptographer whose research covers cryptographic randomness, leakage resilience, fuzzy extractors, and secure messaging.", "url": "people/yevgeniy-dodis.html" }, { "id": "andreas-pfitzmann", "type": "person", "typeLabel": "Person", "title": "Andreas Pfitzmann", "slug": "andreas-pfitzmann", "era": "1980s-2010", "tags": [ "privacy", "privacy-enhancing-technologies", "anonymity", "computer-security", "academic-research" ], "summary": "German computer-security and privacy researcher whose work helped shape privacy-enhancing technologies and privacy protection goals.", "url": "people/andreas-pfitzmann.html" }, { "id": "arthur-scherbius", "type": "person", "typeLabel": "Person", "title": "Arthur Scherbius", "slug": "arthur-scherbius", "era": "1918-1929", "tags": [ "cryptography", "rotor machines", "enigma", "electrical engineering" ], "summary": "German electrical engineer associated with the design and development of the Enigma rotor cipher machine.", "url": "people/arthur-scherbius.html" }, { "id": "arvind-narayanan", "type": "person", "typeLabel": "Person", "title": "Arvind Narayanan", "slug": "arvind-narayanan", "era": "2000s-Present", "tags": [ "privacy", "de-anonymization", "web-measurement", "academic-research" ], "summary": "Computer scientist whose research exposed practical limits of data anonymization and examined the privacy and societal consequences of digital systems.", "url": "people/arvind-narayanan.html" }, { "id": "bill-tutte", "type": "person", "typeLabel": "Person", "title": "William Thomas \"Bill\" Tutte", "slug": "bill-tutte", "era": "1940s-2002", "tags": [ "cryptanalysis", "lorenz", "bletchley-park", "graph-theory", "mathematics", "gchq" ], "summary": "British and Canadian mathematician and wartime cryptanalyst who reconstructed the logical structure of the German Lorenz SZ40/42 teleprinter cipher.", "url": "people/bill-tutte.html" }, { "id": "david-j-farber", "type": "person", "typeLabel": "Person", "title": "David J. Farber", "slug": "david-j-farber", "era": "1960s-2026", "tags": [ "computer-networking", "internet-history", "research-networks", "academic-research", "public-policy" ], "summary": "American computer scientist and educator whose work contributed to computer communications, research networking, and internet policy.", "url": "people/david-j-farber.html" }, { "id": "david-p-reed", "type": "person", "typeLabel": "Person", "title": "David P. Reed", "slug": "david-p-reed", "era": "1970s-Present", "tags": [ "computer-networking", "internet-architecture", "end-to-end-principle", "distributed-systems", "academic-research" ], "summary": "American computer scientist and network architect associated with the end-to-end argument and early internet protocol work.", "url": "people/david-p-reed.html" }, { "id": "dillwyn-knox", "type": "person", "typeLabel": "Person", "title": "Alfred Dillwyn Knox", "slug": "dillwyn-knox", "era": "1910s-1943", "tags": [ "cryptanalysis", "bletchley-park", "enigma", "classics", "machine-ciphers" ], "summary": "British classicist and cryptanalyst who helped build the prewar and wartime foundations of British work against Enigma systems.", "url": "people/dillwyn-knox.html" }, { "id": "dorothy-e-denning", "type": "person", "typeLabel": "Person", "title": "Dorothy E. Denning", "slug": "dorothy-e-denning", "era": "1970s-Present", "tags": [ "computer-security", "cryptography", "intrusion-detection", "access-control", "academic-research" ], "summary": "American computer-security researcher whose work helped define intrusion detection, access control, and the public study of cryptography.", "url": "people/dorothy-e-denning.html" }, { "id": "emiliano-de-cristofaro", "type": "person", "typeLabel": "Person", "title": "Emiliano De Cristofaro", "slug": "emiliano-de-cristofaro", "era": "2010s-Present", "tags": [ "privacy", "applied-cryptography", "machine-learning-privacy", "cybersecurity", "academic-research" ], "summary": "Computer-security and privacy researcher whose work explores privacy-preserving systems, data sharing, and the privacy risks of machine learning.", "url": "people/emiliano-de-cristofaro.html" }, { "id": "frank-rowlett", "type": "person", "typeLabel": "Person", "title": "Frank B. Rowlett", "slug": "frank-rowlett", "era": "1930s-1998", "tags": [ "cryptanalysis", "sigaba", "purple", "signals-intelligence", "communications-security" ], "summary": "American cryptanalyst and cryptologist whose work included Japanese diplomatic systems and the SIGABA cipher machine.", "url": "people/frank-rowlett.html" }, { "id": "george-danezis", "type": "person", "typeLabel": "Person", "title": "George Danezis", "slug": "george-danezis", "era": "2000s-Present", "tags": [ "privacy", "anonymous-communications", "traffic-analysis", "applied-cryptography", "academic-research" ], "summary": "Security and privacy engineer whose research examines anonymity systems, traffic analysis, and privacy-preserving communications.", "url": "people/george-danezis.html" }, { "id": "george-stibitz", "type": "person", "typeLabel": "Person", "title": "George Stibitz", "slug": "george-stibitz", "era": "1936-1995", "tags": [ "relay computing", "remote computing", "bell labs", "binary arithmetic" ], "summary": "Bell Labs mathematician whose relay calculators and 1940 remote demonstration were important landmarks in the history of digital computation.", "url": "people/george-stibitz.html" }, { "id": "herbert-o-yardley", "type": "person", "typeLabel": "Person", "title": "Herbert O. Yardley", "slug": "herbert-o-yardley", "era": "1910s-1958", "tags": [ "cryptanalysis", "signals-intelligence", "black-chamber", "codebreaking", "history" ], "summary": "American cryptanalyst who led the U.S. Cipher Bureau (the “Black Chamber”) and later wrote a consequential public account of its work.", "url": "people/herbert-o-yardley.html" }, { "id": "herman-goldstine", "type": "person", "typeLabel": "Person", "title": "Herman Goldstine", "slug": "herman-goldstine", "era": "1942-2004", "tags": [ "eniac", "edvac", "computing history", "mathematics" ], "summary": "American mathematician and administrator who connected wartime ballistics work, the ENIAC project, and the EDVAC discussions that shaped early electronic computing.", "url": "people/herman-goldstine.html" }, { "id": "j-c-r-licklider", "type": "person", "typeLabel": "Person", "title": "J. C. R. Licklider", "slug": "j-c-r-licklider", "era": "1950s-1990", "tags": [ "interactive-computing", "computer-networks", "arpa", "academic-research", "human-computer-interaction", "internet-history" ], "summary": "American psychologist and computer scientist whose writing and ARPA leadership helped establish interactive computing and networked-computing research agendas.", "url": "people/j-c-r-licklider.html" }, { "id": "j-presper-eckert", "type": "person", "typeLabel": "Person", "title": "J. Presper Eckert", "slug": "j-presper-eckert", "era": "1943-1995", "tags": [ "eniac", "univac", "electrical engineering", "computer engineering" ], "summary": "American electrical engineer and chief engineer of the ENIAC project, later a co-founder of the Eckert-Mauchly Computer Corporation.", "url": "people/j-presper-eckert.html" }, { "id": "john-mauchly", "type": "person", "typeLabel": "Person", "title": "John W. Mauchly", "slug": "john-mauchly", "era": "1941-1980", "tags": [ "eniac", "univac", "electronic computing", "university of pennsylvania" ], "summary": "American physicist and computing pioneer who worked with J. Presper Eckert on ENIAC and later on the Eckert-Mauchly Computer Corporation’s systems.", "url": "people/john-mauchly.html" }, { "id": "john-von-neumann", "type": "person", "typeLabel": "Person", "title": "John von Neumann", "slug": "john-von-neumann", "era": "1940s-1957", "tags": [ "mathematics", "stored-program computing", "computer architecture", "automata theory" ], "summary": "Hungarian-American mathematician whose EDVAC report and work on the IAS computer helped establish the stored-program model used in many later computers.", "url": "people/john-von-neumann.html" }, { "id": "jonathan-mayer", "type": "person", "typeLabel": "Person", "title": "Jonathan Mayer", "slug": "jonathan-mayer", "era": "2000s-Present", "tags": [ "privacy", "web-security", "technology-policy", "tracking", "academic-research" ], "summary": "Computer scientist and lawyer whose work examines web tracking, consumer privacy, surveillance, and the interaction of technical systems with public policy.", "url": "people/jonathan-mayer.html" }, { "id": "maurice-wilkes", "type": "person", "typeLabel": "Person", "title": "Maurice V. Wilkes", "slug": "maurice-wilkes", "era": "1945-2010", "tags": [ "edsac", "stored-program computing", "microprogramming", "cambridge" ], "summary": "British computer scientist who led the EDSAC project at Cambridge and made lasting contributions to programming, microprogramming, and computer systems.", "url": "people/maurice-wilkes.html" }, { "id": "neal-koblitz", "type": "person", "typeLabel": "Person", "title": "Neal I. Koblitz", "slug": "neal-koblitz", "era": "1970s-Present", "tags": [ "cryptography", "elliptic-curve-cryptography", "number-theory", "academic-research", "mathematics" ], "summary": "American mathematician and cryptographer, independently associated with the introduction of elliptic-curve methods to public-key cryptography.", "url": "people/neal-koblitz.html" }, { "id": "paul-ohm", "type": "person", "typeLabel": "Person", "title": "Paul Ohm", "slug": "paul-ohm", "era": "2000s-Present", "tags": [ "privacy", "computer-crime-law", "anonymization", "technology-policy", "academic-research" ], "summary": "Legal scholar, programmer, and privacy researcher whose work examines anonymization failures, computer crime, surveillance, and the law of digital systems.", "url": "people/paul-ohm.html" }, { "id": "sarah-meiklejohn", "type": "person", "typeLabel": "Person", "title": "Sarah Meiklejohn", "slug": "sarah-meiklejohn", "era": "2010s-Present", "tags": [ "cryptography", "cryptocurrency-security", "blockchain-analysis", "privacy", "academic-research" ], "summary": "Cryptography and security researcher known for empirical analysis of cryptocurrency systems and research at the intersection of privacy and digital-currency infrastructure.", "url": "people/sarah-meiklejohn.html" }, { "id": "victor-s-miller", "type": "person", "typeLabel": "Person", "title": "Victor S. Miller", "slug": "victor-s-miller", "era": "1970s-Present", "tags": [ "cryptography", "elliptic-curve-cryptography", "mathematics", "academic-research", "public-key-cryptography" ], "summary": "American mathematician and cryptographer who independently introduced elliptic curves as a basis for public-key cryptography.", "url": "people/victor-s-miller.html" }, { "id": "vint-cerf", "type": "person", "typeLabel": "Person", "title": "Vint Cerf", "slug": "vint-cerf", "era": "1970s-present", "tags": [ "internet", "tcp-ip", "arpanet", "protocols", "internet-governance" ], "summary": "American computer scientist who co-designed TCP/IP with Bob Kahn and is widely described as one of the 'fathers of the Internet'.", "url": "people/vint-cerf.html" }, { "id": "bob-kahn", "type": "person", "typeLabel": "Person", "title": "Bob Kahn", "slug": "bob-kahn", "era": "1970s-present", "tags": [ "internet", "tcp-ip", "arpanet", "protocols", "networking" ], "summary": "American engineer who co-invented TCP/IP with Vint Cerf and organized the 1972 public demonstration of the ARPANET.", "url": "people/bob-kahn.html" }, { "id": "jon-postel", "type": "person", "typeLabel": "Person", "title": "Jon Postel", "slug": "jon-postel", "era": "1970s-1990s", "tags": [ "internet", "rfc", "iana", "dns", "internet-governance" ], "summary": "American computer scientist who edited the RFC series for nearly three decades and administered Internet number and name assignments as IANA.", "url": "people/jon-postel.html" }, { "id": "tim-berners-lee", "type": "person", "typeLabel": "Person", "title": "Tim Berners-Lee", "slug": "tim-berners-lee", "era": "1980s-present", "tags": [ "world-wide-web", "http", "html", "w3c", "cern" ], "summary": "British computer scientist who invented the World Wide Web at CERN in 1989 and founded the World Wide Web Consortium.", "url": "people/tim-berners-lee.html" }, { "id": "roger-dingledine", "type": "person", "typeLabel": "Person", "title": "Roger Dingledine", "slug": "roger-dingledine", "era": "2000s-present", "tags": [ "tor", "anonymity", "onion-routing", "privacy", "censorship-circumvention" ], "summary": "American computer scientist who co-created Tor and co-founded The Tor Project.", "url": "people/roger-dingledine.html" }, { "id": "nick-mathewson", "type": "person", "typeLabel": "Person", "title": "Nick Mathewson", "slug": "nick-mathewson", "era": "2000s-present", "tags": [ "tor", "anonymity", "onion-routing", "remailers", "privacy" ], "summary": "American programmer who co-created Tor, co-founded The Tor Project, and served as its chief architect.", "url": "people/nick-mathewson.html" }, { "id": "ian-goldberg", "type": "person", "typeLabel": "Person", "title": "Ian Goldberg", "slug": "ian-goldberg", "era": "1990s-present", "tags": [ "cryptography", "privacy", "otr", "ssl", "academic-research" ], "summary": "Canadian cryptographer who exposed the Netscape SSL random-number flaw in 1995 and co-created Off-the-Record Messaging.", "url": "people/ian-goldberg.html" }, { "id": "hal-finney", "type": "person", "typeLabel": "Person", "title": "Hal Finney", "slug": "hal-finney", "era": "1990s-2010s", "tags": [ "cypherpunks", "pgp", "bitcoin", "remailers", "cryptography" ], "summary": "American cypherpunk and PGP developer who created reusable proofs of work and received the first Bitcoin transaction.", "url": "people/hal-finney.html" }, { "id": "adam-back", "type": "person", "typeLabel": "Person", "title": "Adam Back", "slug": "adam-back", "era": "1990s-present", "tags": [ "cypherpunks", "hashcash", "proof-of-work", "cryptography", "bitcoin" ], "summary": "British cryptographer who invented Hashcash, the proof-of-work scheme cited in the Bitcoin whitepaper.", "url": "people/adam-back.html" }, { "id": "wei-dai", "type": "person", "typeLabel": "Person", "title": "Wei Dai", "slug": "wei-dai", "era": "1990s-present", "tags": [ "cypherpunks", "b-money", "cryptography", "crypto-plus-plus", "bitcoin" ], "summary": "Computer engineer who proposed b-money in 1998 and created the Crypto++ cryptographic library.", "url": "people/wei-dai.html" }, { "id": "nick-szabo", "type": "person", "typeLabel": "Person", "title": "Nick Szabo", "slug": "nick-szabo", "era": "1990s-present", "tags": [ "cypherpunks", "smart-contracts", "bit-gold", "cryptography", "digital-currency" ], "summary": "Computer scientist and legal scholar who coined the term 'smart contract' and designed the bit gold digital-currency proposal.", "url": "people/nick-szabo.html" }, { "id": "tim-may", "type": "person", "typeLabel": "Person", "title": "Tim May", "slug": "tim-may", "era": "1980s-2010s", "tags": [ "cypherpunks", "crypto-anarchy", "privacy", "manifesto", "intel" ], "summary": "American physicist and writer who authored 'The Crypto Anarchist Manifesto' and co-founded the cypherpunks mailing list.", "url": "people/tim-may.html" }, { "id": "eric-hughes", "type": "person", "typeLabel": "Person", "title": "Eric Hughes", "slug": "eric-hughes", "era": "1990s", "tags": [ "cypherpunks", "privacy", "remailers", "manifesto", "cryptography" ], "summary": "American mathematician and programmer who wrote 'A Cypherpunk's Manifesto' and co-founded the cypherpunks mailing list.", "url": "people/eric-hughes.html" }, { "id": "john-gilmore", "type": "person", "typeLabel": "Person", "title": "John Gilmore", "slug": "john-gilmore", "era": "1980s-present", "tags": [ "eff", "cypherpunks", "civil-liberties", "free-software", "des" ], "summary": "American programmer and activist who co-founded the Electronic Frontier Foundation, Cygnus Solutions, and the cypherpunks mailing list.", "url": "people/john-gilmore.html" }, { "id": "john-perry-barlow", "type": "person", "typeLabel": "Person", "title": "John Perry Barlow", "slug": "john-perry-barlow", "era": "1990s-2010s", "tags": [ "eff", "civil-liberties", "cyberspace", "manifesto", "internet-culture" ], "summary": "American writer and activist who co-founded the Electronic Frontier Foundation and wrote 'A Declaration of the Independence of Cyberspace'.", "url": "people/john-perry-barlow.html" }, { "id": "mitch-kapor", "type": "person", "typeLabel": "Person", "title": "Mitch Kapor", "slug": "mitch-kapor", "era": "1980s-present", "tags": [ "eff", "lotus", "civil-liberties", "software-industry", "mozilla" ], "summary": "American software entrepreneur who founded Lotus Development and co-founded the Electronic Frontier Foundation.", "url": "people/mitch-kapor.html" }, { "id": "wau-holland", "type": "person", "typeLabel": "Person", "title": "Wau Holland", "slug": "wau-holland", "era": "1980s-2000s", "tags": [ "chaos-computer-club", "germany", "hacker-ethics", "btx-hack", "activism" ], "summary": "German journalist and activist who co-founded the Chaos Computer Club and shaped the European hacker ethic.", "url": "people/wau-holland.html" }, { "id": "karl-koch-hagbard", "type": "person", "typeLabel": "Person", "title": "Karl Koch (Hagbard)", "slug": "karl-koch-hagbard", "era": "1980s", "tags": [ "germany", "kgb-hack", "espionage", "chaos-computer-club", "cold-war" ], "summary": "German hacker known as Hagbard who took part in the 1980s KGB hack, selling access to Western military and research systems to Soviet intelligence.", "url": "people/karl-koch-hagbard.html" }, { "id": "markus-hess", "type": "person", "typeLabel": "Person", "title": "Markus Hess", "slug": "markus-hess", "era": "1980s", "tags": [ "germany", "kgb-hack", "espionage", "cuckoos-egg", "cold-war" ], "summary": "German hacker whose intrusions into U.S. military and research networks were traced by Clifford Stoll, as told in 'The Cuckoo's Egg'.", "url": "people/markus-hess.html" }, { "id": "craig-neidorf-knight-lightning", "type": "person", "typeLabel": "Person", "title": "Craig Neidorf (Knight Lightning)", "slug": "craig-neidorf-knight-lightning", "era": "1980s-1990s", "tags": [ "phrack", "e911-case", "free-speech", "operation-sundevil", "ezines" ], "summary": "Co-founder of Phrack whose 1990 prosecution over a BellSouth E911 document collapsed and became a landmark for online free speech.", "url": "people/craig-neidorf-knight-lightning.html" }, { "id": "bruce-sterling", "type": "person", "typeLabel": "Person", "title": "Bruce Sterling", "slug": "bruce-sterling", "era": "1980s-present", "tags": [ "author", "hacker-crackdown", "cyberpunk", "journalism", "hacker-culture" ], "summary": "American science-fiction author whose non-fiction book 'The Hacker Crackdown' documented the 1990 U.S. crackdown on the hacker underground.", "url": "people/bruce-sterling.html" }, { "id": "martin-roesch", "type": "person", "typeLabel": "Person", "title": "Martin Roesch", "slug": "martin-roesch", "era": "1990s-present", "tags": [ "snort", "intrusion-detection", "open-source", "sourcefire", "network-security" ], "summary": "American security engineer who wrote Snort, the open-source network intrusion detection system, and founded Sourcefire.", "url": "people/martin-roesch.html" }, { "id": "ilfak-guilfanov", "type": "person", "typeLabel": "Person", "title": "Ilfak Guilfanov", "slug": "ilfak-guilfanov", "era": "1990s-present", "tags": [ "ida-pro", "reverse-engineering", "disassembler", "hex-rays", "wmf-patch" ], "summary": "Software developer who created the IDA disassembler and the Hex-Rays decompiler, standard tools of reverse engineering.", "url": "people/ilfak-guilfanov.html" }, { "id": "jonathan-james-c0mrade", "type": "person", "typeLabel": "Person", "title": "Jonathan James (c0mrade)", "slug": "jonathan-james-c0mrade", "era": "1990s-2000s", "tags": [ "nasa", "dtra", "juvenile-justice", "intrusion", "united-states" ], "summary": "American hacker who, at 15, intruded into NASA and Defense Threat Reduction Agency systems and became the first juvenile jailed for cybercrime in the United States.", "url": "people/jonathan-james-c0mrade.html" }, { "id": "paul-vixie", "type": "person", "typeLabel": "Person", "title": "Paul Vixie", "slug": "paul-vixie", "era": "1980s-present", "tags": [ "dns", "bind", "anti-spam", "internet-infrastructure", "open-source" ], "summary": "American Internet pioneer who maintained BIND, founded the Internet Systems Consortium, and created the first anti-spam DNS blocklist.", "url": "people/paul-vixie.html" }, { "id": "len-sassaman", "type": "person", "typeLabel": "Person", "title": "Len Sassaman", "slug": "len-sassaman", "era": "2000s", "tags": [ "cypherpunks", "remailers", "privacy", "pgp", "cryptography" ], "summary": "American privacy advocate and cryptographer who maintained the Mixmaster anonymous remailer and co-designed the Pynchon Gate.", "url": "people/len-sassaman.html" } ]