Jeff Jones Security Blog
This blog is for discussing all things with respect to computer, network and information security.
Leaving Purdue in 1987, I immediately started working in security at the Computer Security Office of the Aerospace Corporation. We did Air Force risk assessments, research projects and supported the Trusted Product Evaluation Program (now NIAP) with the NSA. Nineteen years later, I've worked always in security, learning along the way at Trusted Information Systems (TIS, where I got my first experience with an Open Source product the FWTK). While at TIS, I also got my first Linux experience when I worked from home on my P66 SLS Linux machine, building and maintaining everything myself. (I connected to a netcom dial-up Shell account and did end-to-end tunneling to our internal office Sun servers, running X as my GUI and using an X-redirector across the tunnel. No encryption, so it wasn't a VPN, but was a VN. Performance was reasonable.) Since those good old days, I did kernel dev on Trusted Xenix, a lot of research and and consulting, thousands of firewall stalls and eventually moved into product management at McAfee/NAI and <blah> <blah>
Now, I'm a Strategy Director in the Microsoft Security Technology Unit, part of the team trying to make all Microsoft products more secure. I get to work with great people and am having a good time helping drive new, more secure, products.
Anyway, been doing it a while and I'm a bit skeptical of "2 year security experts" who couldn't tell you who Robert Morris is, or what was ironic about the Morris Worm without help from Google.
