John Viega

contact: <my last name> at viega.org

Work

Vice President of Technology,  McAfee

Writings

John is the co-author of six books on security, The Myths of Security (O'Reilly, 2009), Beautiful Security, (O'Reilly, 2009) Building Secure Software (Addison Wesley, 2001), Network Security with OpenSSL (O’Reilly, 2002), the Secure Programming Cookbook (O’Reilly, 2003) and the 19 Deadly Sins of Software Security (McGraw Hill, 2005).

He also built the original CLASP application security process, which is available on-line.

Biography

John started in security as an academic researcher and consultant, and has spent a lot of time in software development, technology M+A, standards development, product security operations and software development and operations management, and even spent some time as a professor at Virginia Tech. John received a MS in Computer Science and a BA from the University of Virginia.

Research and Development

John’s research areas have included application security, cryptography, programming languages and usability. He co-developed GCM, a mode of operation for block ciphers such as AES that has been incorporated into IPSec and the 802.1AE draft document, and is currently being standardized by NIST.

Free and Open Source Software

Despite being cautious about embracing the open source security theory, John has been involved in many open source projects. He was the original author of the Mailman mailing list manager, and has been author or co-author of many other free projects, including  RATS, SafeStr, XXL and ITS4.