Barrett Lyon

Early Life

Barrett Gibson Lyon was born on March 18, 1978, and raised in Auburn, California. He has described struggling with dyslexia in early schooling, and has said the workarounds he developed for it accelerated his interest in and comfort with computers. As a teenager he became proficient enough to set up Linux servers for friends' websites and to manage his school's computer network. In 1995, while investigating what he believed was a vulnerability related to Network Solutions, he inadvertently caused America Online's website to go offline for an extended period, an early sign of his hands-on approach to exploring Internet infrastructure. He later attended California State University, Sacramento, studying philosophy and photography rather than computer science.

Opte Project and Early Internet Mapping

In October 2003, Lyon launched the Opte Project, an open-source initiative that produced visual, graph-based maps of the structure of the Internet by tracing the connections between autonomous systems. The resulting images were widely circulated as illustrations of Internet topology and were later collected by institutions including the Museum of Modern Art and the Boston Museum of Science.

Founding Prolexic Technologies

Lyon founded Prolexic Technologies in 2003 to defend websites against distributed denial-of-service (DDoS) attacks, building on his own earlier experience running IRC servers in the 1990s, environments that were frequent targets and origin points of early DDoS activity. Rather than selling standalone appliances, Prolexic operated a purpose-built global "scrubbing" network that rerouted a client's traffic through Prolexic's infrastructure to filter out attack traffic before it reached the client's servers, an approach that became a template for the managed DDoS mitigation industry. Prolexic's earliest paying customers were largely online gambling and casino websites, which were frequent targets of extortion campaigns in which attackers threatened sustained DDoS attacks unless a ransom was paid.

Tracking a DDoS Extortion Ring

Through his visibility into attacks against Prolexic's clients, Lyon gathered technical evidence on a group of Russian nationals running a DDoS extortion racket against online casinos, banks, and other web-based businesses in the United States and United Kingdom. He shared this information with law enforcement, contributing to a multinational investigation that led to the identification and prosecution of Ivan Maksakov, Alexander Petrov, and Denis Stepanov. On October 8, 2007, the three were convicted in Russia and sentenced to prison terms, with authorities estimating that their extortion scheme had caused tens of millions of dollars in damages to victim businesses. Lyon's role in this investigation, along with law enforcement's pursuit of the case, was chronicled in the book "Fatal System Error" by journalist Joseph Menn, and Lyon discussed the case publicly, including in an interview on NPR's "Fresh Air."

Later Ventures

Around 2006, Lyon co-founded BitGravity, a content delivery network aimed at scaling video distribution for clients including YouTube, ABC, NBC, CBS, and Fox, where he served as chief technology officer; the company was acquired by Tata Communications in January 2011. In 2009, with backing from investors including Jay Adelson and Kevin Rose, he founded XDN, a content delivery network broker, which was acquired by Fortinet in November 2012. Prolexic itself was acquired by Akamai Technologies in February 2014 for a reported $370 million, by which point it had grown to serve major financial institutions and other large enterprises. In late 2012, prior to the Akamai deal closing, Lyon founded Defense.Net to build a new DDoS mitigation architecture aimed at handling larger and more sophisticated attacks; Defense.Net was later acquired by F5, Inc. Lyon subsequently served in security research roles, including as head of security research and development at Neustar, and co-founded the network security company Netography, where he served as CEO before transitioning to chief architect when Martin Roesch, the creator of Snort, became CEO in 2022; Netography was acquired by Vectra AI in 2025.

Significance

Lyon's career traces the emergence of DDoS mitigation from an ad hoc response to Internet extortion into an established, well-funded segment of the security industry, and Prolexic in particular is widely cited as one of the first companies to commercialize large-scale, network-based DDoS defense. His cooperation with law enforcement in the Maksakov-Petrov-Stepanov case is frequently referenced as an early example of a private security researcher's technical evidence contributing directly to the criminal prosecution of an organized cybercrime group.

Timeline

• 1978-03-18Barrett Gibson Lyon is born in Auburn, California.
• 1995While investigating a suspected Network Solutions vulnerability, Lyon inadvertently causes AOL's website to go offline.
• 2003-10Lyon launches the Opte Project, an open-source visual mapping of the Internet's structure.
• 2003Lyon founds Prolexic Technologies to provide commercial DDoS mitigation services, initially serving online casinos facing extortion threats.
• 2007-10-08Russian nationals Ivan Maksakov, Alexander Petrov, and Denis Stepanov are convicted for a DDoS extortion scheme after an investigation aided by evidence Lyon provided to law enforcement.
• 2006Lyon co-founds video-focused content delivery network BitGravity, serving as chief technology officer.
• 2009Lyon founds content delivery network broker XDN with backing from Jay Adelson and Kevin Rose.
• 2011-01BitGravity is acquired by Tata Communications.
• 2012-11XDN is acquired by Fortinet.
• 2012-12Lyon founds Defense.Net to build a new DDoS mitigation architecture.
• 2014-02Akamai Technologies acquires Prolexic Technologies for a reported $370 million.
• 2022-08Martin Roesch becomes CEO of Netography, with Lyon transitioning to chief architect.
• 2025Netography is acquired by Vectra AI.