AVIEN /EWS Disciplinary Committee

The DC consists of 5 AVIEN full members, with the Administrator as non-voting member.

Disciplinary Committee Members shall serve a term 2 years and elect their own chair yearly. The Chair shall speak for the Disciplinary Committee, but have no special powers.

Members

Randy Brown, Anti-Virus Program Manager, Hewlett-Packard Company. Joined Compaq as a part of the Digital / Compaq merger.

Randy's major responsibilities are:

1)The global anti virus tool strategy

2) Implementation of the anti-virus strategy throughout Compaq

3) Chairman of Compaq's global Virus Core Team and

4) Risk assessment of Corporate Desktop and security patches

David Harley BA, CISSP currently runs the Small Blue-Green World consultancy as a Security Author, Editor and Consultant; Anti-Malware Researcher.

Previous Relevant Roles and Projects

• Previously worked as Services Manager, Infrastructure Security Manager, Threat Assessment Centre Manager, and Malware & Email Abuse Management Specialist for the NHS Information Authority and, subsequently, NHS Connecting for Health.
• Previously worked in systems, application and network support, then as Security Analyst for Imperial Cancer Research Fund.
• Prior to that, worked in administration and computer support for the Department of Immunology, Royal Free Hospital, London.
• Technical Reviewer/Editor or Contributing Editor for projects from Osborne/McGraw Hill, Pearson/SAMS, EEMA, NISCC, SANS. Currently on Technical Editor/Reviewer lists for Syngress.
• Web Management/Publishing for NHS Information Authority, NHS Connecting for Health, Imperial Cancer Research Fund, Folk London, Sherpasoft, Mac Virus.
• Macintosh Malware Consultant for ICSAlabs
• Shadow Board Member of NHS Faculty of Health Informatics
• Conference CD Project Manager for EICAR 99 and 2000 conferences
• Programme Co-Chair (“Managing Safety and Security) for EICAR 2000 conference
• Active participant EICAR malware/virus testing checklist project
• Project Manager of EICAR hoaxes/urban legends project

IT Technical Qualifications and Special Skills:

• Bachelors degree in Computer Science and Social Sciences.
• CISSP (Certified Information Systems Security Professional)
• Certified BS 7799/ISO 17799/ISO 27001 Lead Auditor
• ITIL foundation certificate in IT Service Management
• Experience and diverse certifications in UNIX/VMS/Novell/Mac/Windows/DOS systems, network and application security management.

Specialisms:
All forms of malicious software, and all forms of email abuse, including spam, hoaxes, scams. Macintosh security, malware detection testing, network and applications security, standards and legal conformance, policy, governance.

Membership of Professional Organizations

• Active (charter) member, Adjunct Administrator, and Disciplinary Committee Member of AVIEN (Anti-Virus Information Exchange Network)
• Active member of AVI-EWS (Anti-Virus Information and Early Warning System) and TAV (Team Anti-Virus).
• Formerly active member of EICAR (European Institute for Computer Anti-virus Research) and AVAR (Association Anti-Virus Asia Researchers).
• Member and former UK Co-Chair for Education, Anti-Phishing Working Group.
• Former member of Association for ICT Professionals in Health and Social Care
• Member of WildList Organization
• Level 3 Registered Member of UK Council for Health Informatics Professions
• Certified Professional Member (CISSP of (ISC)2 - International Information Systems Security Certification Consortium

Publications

Computing Books:

• “ Windows NT Security: Step by Step”. Contributor. (SANS 1998)
• “ Living with Viruses” (ASIS 2000)
• “ Viruses Revealed” (Harley, Slade, Gattiker): (Osborne/McGraw-Hill, 2001)
• “ Maximum Security” 3rd and 4th Editions. Chapters and updated chapters on “Viruses” and “Trojan Horses”. (SAMS 2001, 2002)
• “ Computer Security Handbook” 4th Ed. Chapter with Paul Brusil on “Medical Records Security” (Wiley 2002)
• “ ISSE 2004 - Securing Electronic Business Processes” Chapter on “Massmailers: New Threats Need Novel Anti-Virus Measures” (Vieweg 2004)
• “ Information Security Handbook” (Ed. Bidgoli). Chapter on “E-mail Threats and Vulnerabilities”. (Wiley 2005)
• “ Coming of Age - an introduction to the new world wide web” 2nd Edition (Ed. Freedman). Chapters on “Security - Spectre at the Feast?”; “Security Resources” (with Judith Harley), “Security and Education - Who Needs it?” (with Judith Harley). (Freedman, 2006 - in press)
• “ The Handbook of Computer Networks” (Ed. Bidgoli). Revision/update of Chapter on “E-Mail Threats and Vulnerabilities” (Wiley 2007 - in press)

Articles and presentations (not listed individually):

• Over 100 articles on security, malicious software, social engineering, hoaxes, book reviews etc. for IP Networking, EICAR News, Security Magazine, Virus Bulletin, BackOffice Magazine, SecurityFocus, win2000mag.com, Information Security, Security Magazine, EEMA et al.
• Many articles on PCs, DOS, Unix, programming and programming languages, batchfile programming, music and music programming, software, book, record and concert reviews.
• Several Internet FAQs published and maintained between 1995 and 2003 on security-related issues (viruses, Mac security, social engineering, hoaxes, spam etc).
• Many conference papers and presentations since 1996 for Virus Bulletin, EICAR, SANS, AVAR, ISSE: other presentations for Mac-Supporters/Apple, Deloitte Touche, NISCC, Open University, Hampshire LEA, Microsoft.

Other Non-Fiction:

• Verse and artwork for a number of anthologies and magazines.
  “ Out of the Bear Steps: Images of Shrewsbury” (With Judith Harley: in preparation)
• “ Strings Attached: A Beginner's Guide to the Guitar” (In preparation)
  “ IT Handbook for Small Businesses” (In preparation)
• Many published songs and recordings.

Job Specific Documentation:

• Articles for in-house magazines, newspapers, newsletters, email-lists, intranet pages. (1986 - 2006)
• Security FAQs (1986 - 2006)
• Technical documentation, manuals etc. (1986 - 2006)
• Reports for top management (1986 -2006)
• Scientific literature awareness service to participating scientists on the Human Genome Project (1989-1991)
• Security Alerts and Briefings Service to the UK National Health Service (2001-2006)
• Priming material for press statements and answers to parliamentary questions & external articles etc. (2001-2006)
• Security presentations for NHS organizations, workshops and forums (2001-2006)
  

  ---

Ken Bechtel

Ken first learned of computer viruses in 1988, while serving with the U.S. Army in Seoul Korea. While at the time, the computer virus threat was very small, he immediately recognized the implications they could have in the future. Spending as much of his free time as possible, he began researching viruses and other malicious software. By the time he left the service in 1993, he had already written several policies and procedures for multiple military commands concerning malware defense.

As a single parent, Ken decided to set his sights on the civilian sector and began a new career devoted to computer network security. In this capacity, Ken has been an educator for a local trade school, a LAN Manager and Lab Technician for ICSA, and the Corporate Anti-Virus specialist for a Global Manufacturing organization.

Ken also continued to maintain his independent research facility and in 1998, he established Team Anti-Virus. The goal of the organization was and is to serve as an umbrella organization for like-minded independent anti-virus researchers who were not employed by Anti-Virus firms. That same year, he was invited to join the WildList Organization as a reporter.

Ken is a strong advocate for education, maintaining that education remains one of the best defenses in the fight against malware. As Ken often states, the more Network Administrators and users know, the more they will be able to help themselves, and subsequently lower the impact of self-replicating code. Ken's outside of the box defenses have earned him the respect of his peers. Indeed, many of Ken’s ideas have been widely adopted and accepted in the corporate arena, and are respected in the formal security and malware research circles.

Ken spends far too much time on the computer and managing his networks, but still manages to enjoy quality time with his wife and daughters. Ken even steals a bit of time every now and then for target shooting and paintball.

Shawn Campbell

Ford

Dave Phillips, BSc, MBCS
Project Officer, The Open University, Technology, IFEC,
Walton Hall, Milton Keynes, MK7 6AA, UK

T187 Vandalism In Cyberspace http://tscp.open.ac.uk/t187.htm

I have been with the University for about 20 years and working in malware removal and security for the last 14 years. I have written papers and articles for Virus Bulletin Magazine, present at different security conferences in the UK, Europe and North America. I am a member of the Wildlist and Co-Admin on the Phoenix FirstClass server in Technology as well as creating and updating some of the websites in the Faculty.

I run the Antivirus helpdesk conferences on FirstClass conference system for Associate lecturers (6,000) and Students (200,000).

Teaching:
Tutoring on T175 Network Living

Co-Author of T187 - Vandalism in Cyberspace

Robert Vibert, Administrator of AVIEN, and non-voting member of the DC. He has been a full-time professional computer security specialist since 1991. From 1983 to 1991, he worked in Europe as an independent computer, management, and security problem-solver for corporate and government clients. For a short period of time, he was a Senior Consultant with Price Waterhouse in Portugal. In 1995, he returned to his native Canada.

He has authored more than 200 articles on computer security and management and was the first contributor from Portugal (and then the first from Canada) to the WildList.

In the role of entrepreneur, he founded two organizations, one in Europe (RSVP-Consultores Associados Lda., started in 1985) and one in Canada when he moved back (SSS-Sensible Security Solutions Inc., 1995), to sell and support Anti-Virus software as part of comprehensive solutions to government departments and large private sector clients. Both organizations were very successful, with multi-million dollar yearly sales of anti-virus software and a customer list which included, in both countries, many government departments, banks, insurance companies and multi-national corporations.

By mid-1999, he found a way to escape from the software sales arena and took some much needed time off from the rat race. From 1999 to 2001, he mainly worked as a problem-solver, trouble-shooter, writer and commentator on things related to computer security, employed at times by the Canadian Government. In 2000, he published his second book on computer security.

From 2001 onwards, he has been studying the meaning of life and all that.

In 2006, he published three more books, on personal success. He has more on the way.

Most of his time is now spent documenting his findings in the realm of personal growth, with a little wrangling of donuts for AVIEN.