Cigital

Gary McGraw, Ph.D. is the CTO of Cigital, Inc., a software security and quality consulting firm with headquarters in the Washington, D.C. area. He is a globally recognized authority on software security and the author of six best selling books on this topic. The latest, Exploiting Online Games was released in 2007. His other titles include Java Security, Building Secure Software, Exploiting Software, and Software Security; and he is editor of the Addison-Wesley Software Security series. Dr. McGraw has also written over 90 peer-reviewed scientific publications, authors a monthly security column for darkreading.com, and is frequently quoted in the press. Besides serving as a strategic counselor for top business and IT executives, Gary is on the Advisory Boards of Fortify Software and Raven White. His dual PhD is in Cognitive Science and Computer Science from Indiana University where he serves on the Dean's Advisory Council for the School of Informatics. Gary is an IEEE Computer Society Board of Governors member and produces the monthly Silver Bullet Security Podcast for IEEE Security & Privacy magazine.

JOHN STEVEN is a Technical Director with Cigital and a founding member of the company's Office of the CTO. John is responsible for creating Cigital's methodologies and building its knowledge collateral. His more-than-eight years of experience spans consulting, distributed systems architecture, operating systems, and software quality and security research. John combines experience in Cigital's Software Security, Quality Assurance, and Process Improvement practices to deliver clients innovative solutions. He designed and developed jRapture, a capture/replay tool with profiling support for the Java2 platform, and his work was presented at the 2000 International Symposium on Software Testing and Analysis (ISSTA). John has served on conference panels regarding software security, wireless security, and J2EE system development. He is a published author and a sought-after reviewer of journal and conference submissions and edits IEEE Security & Privacy's "Building Security In" column. John holds a B.S. in Computer Engineering and an M.S. in Computer Science from Case Western Reserve University.

Paco Hope is a Technical Manager with Cigital. His areas of expertise include software security, security testing, code analysis, embedded systems, and smart cards. Mr. Hope has published articles on abuse cases in software design, PKI, and UNIX host security features. He is a prominent instructor and frequent lecturer at conferences like the Software Security Summit, STAR East, and the Better Software Conference. In 2007 he is co-chair of VERIFY 2007, the International Conference on Software Testing. He is also co-author of Mastering FreeBSD and OpenBSD Security, published by O'Reilly and Associates. At Cigital Mr. Hope has co-authored standards with MasterCard International governing the use of wireless LAN technology in merchant environments. He has also analyzed architecture and software for lottery systems, mobile phone systems, embedded gaming devices, and smart card applications. Prior to joining Cigital, he served as director of product development for Charlottesville, VA-based Tovaris, Inc. and head systems administrator in the Department of Computer Science at the University of Virginia. Mr. Hope majored in Computer Science and English at The College of William and Mary and received an M.S. in Computer Science from the University of Virginia.

Drew is a Managing Principal with Cigital. He brings over 20 years of software development and technology leadership to Cigital. Formerly, Mr. Kilbourne was Chief Technology Officer at Provox Technologies, where he was responsible for software development, professional services and customer support. Previously, he was Vice President of Strategic Technology Initiatives at AvalonBay Communities, Inc., a $5.5 billion Real Estate Investment Trust (REIT) in the business of developing, redeveloping, acquiring and managing luxury apartment communities. Prior to joining AvalonBay, Mr. Kilbourne was Chief Technology Officer for IXI Corporation, a leading purveyor of market analysis data to the financial services industry. Mr. Kilbourne has also held senior positions with Oracle Corporation, where he led the global financial services e-banking consulting practice, and TELE-TV, where he was responsible for developing consumer products in interactive television. Drew earned a B.A. in Computer Science from East Carolina University, and is a certified TQM facilitator through Qualtec Consultants, a subsidiary of the first US Corporation to have won the prestigious Deming Prize for excellence in total quality management.

John Reilly brings over 20 years of technology leadership experience to his role as Managing Principal at Cigital. Mr. Reilly has an impressive career of developing professional services practices, building large-scale systems, and hiring and developing teams of technology personnel. Mr. Reilly has been CTO at several firms including the Interactive division of Chelsea Property Group, a $3.5 billion REIT. He started and grew a $20M/year professional services practice as Managing Director at Proxicom and led the development of key systems for the former Bell Atlantic's interactive television platform. Mr. Reilly is responsible for the Northeast region, living just outside New York City in Mountain Lakes, NJ. Mr. Reilly has his M.S. from George Washington University and his B.S. from Boston College.

Scott Matsumoto is a Principal Consultant at Cigital. Mr. Matsumoto brings over 20 years of commercial software product development experience to the company. His experience encompasses development of component-based middleware, performance management systems, graphical UIs, language compilers, database management systems and operating system kernels. Most recently Mr. Matsumoto was the CTO of Spring Street Networks. Prior to that he was co-founder and CTO of Xtremesoft, which provided component-based application monitoring for Microsoft technology-based applications. Mr. Matsumoto has held positions at other major software companies such as systems architect for Lotus Development. Prior to Lotus, Mr. Matsumoto was a principal at Working Set, Inc., the software company that designed and implemented Digital Equipment Corp.'s SQL compiler. He was also one of the original designers of Digital's Relational Database system.

Mr. Domolky is a seasoned technology and venture executive with over 15 years of experience in senior management, business development and financial roles. He founded Liquid Capital Group in March, 2000 to provide access for high net worth individuals and families to top venture funds and superior emerging information technology companies. He is an Observer on the Board of Directors of Cigital, Inc., a Director of Grand Brands, Inc. and a Director of Overture Technologies, Inc. In addition to establishing a distinctive track record at Liquid Capital, Mr. Domolky has been a Principal at NextStep Partners, LLC. NextStep Partners is a business development and financial advisory firm assisting emerging technology companies. Prior to joining NextStep Partners, Mr. Domolky served as the Vice President for Business Development and the Vice President of the Mid Atlantic Division for NEON Communications, Inc. (NASDAQ: NOPT). Prior to joining NEON, Mr. Domolky was the Senior Director for Business Development and the General Manager of the Carrier Sales Division at Winstar Communications, Inc. (NASDAQ: WCII). Mr. Domolky has also held a variety of finance, marketing and sales positions with MCI Communications, Inc. (NASDAQ: MCIC) and was a consultant to the energy, pharmaceutical and automobile industries while at Putnam, Hayes & Bartlett. Mr. Domolky holds a B.A. in Economics and Environmental Studies from the University of Pennsylvania. He has also studied at Harvard University and the University of Connecticut.