Selected work
A growing archive of my patents, research, industrial cybersecurity writing, conference talks, interviews, and podcasts—from trusted computing and cloud security to modern OT resilience.
Showing all 45 works
01 / 04
Academic publications and collaborative standards work spanning trusted computing and cloud security.
Collaborative contributions to open standards for cloud management, orchestration, security, and privacy.
DMTF
A contributor to the DMTF standard for interoperable management of cloud infrastructure through a common resource model and REST interface.
View workCloud Security Alliance
Contributed to the CSA Big Data Working Group report identifying the defining security and privacy challenges of large-scale cloud data systems.
View workACM CCSW
A cloud authentication framework applied to mobile users and emerging service environments.
View workIEEE Grid and Cloud Computing
A model for increasing trust while preserving anonymity in cloud execution environments.
View workACM CCSW
A widely cited examination of data control, accountability, and risk in cloud computing.
View workJournal of Information Assurance and Security
An empirical evaluation of how host intrusion detection mechanisms withstand adversarial activity.
View workFuture of Trust in Computing
A client trust infrastructure built around trusted computing technologies and remote assurance.
View workUniversity of Maryland
Doctoral research on evaluating host-based intrusion detection systems and their attack resilience.
View workWorkshop on Advances in Trusted Computing
A trusted platform architecture designed for mobile computing environments.
View workUSENIX Security
A hardware-assisted system for independently monitoring operating-system kernel integrity at runtime.
View workMobiQuitous
An early architecture for mobile and ubiquitous payment and identity services.
View workICICS / Springer
An approach to intrusion detection based on independent auditing components and trusted observation.
View work02 / 04
Practical cybersecurity guidance for operational technology and critical infrastructure.
Waterfall Security Solutions
A power-sector guide to consequence-driven risk assessment, zoning and conduits, and engineering-grade cybersecurity controls.
View workWaterfall Security Solutions
A look at cryptography, attack paths, and the limits of software-only protections in nuclear environments.
View workWaterfall Security Solutions
A guide to the scope, obligations, and operational technology implications of the European NIS2 Directive.
View workWaterfall Security Solutions
An examination of how healthcare ransomware could move from disruption and extortion toward cyber-physical coercion.
View workWaterfall Security Solutions
A consequence-driven comparison of firewalls and unidirectional gateways for operational technology networks.
View workWaterfall Security Solutions
Five architectural patterns for separating inbound and outbound flows at critical IT/OT boundaries.
View workIndustrial Cybersecurity Pulse
How generative AI can lower the barrier to designing OT-specific payloads with consequences beyond conventional ransomware.
View workWaterfall Security Solutions
A practical rail cybersecurity guide aligned with IEC 62443 and TS 50701 for operations control center vital networks.
View workWaterfall Security Solutions
Why IEC 61850 interoperability must be matched by segmentation and cyber-physical protections for modern substations.
View workWaterfall Security Solutions
How manufacturers can maintain required business connectivity while preventing ransomware from reaching operations.
View workBlack Hat USA
The original white paper and briefing on reverse engineering KNX/IP and compromising a large hotel automation deployment.
View work03 / 04
Conference sessions, interviews, webinars, and podcast conversations.
CyberSecTV
An interview on IT and OT security, growing connectivity risks, NIS2, the Cyber Resilience Act, security by design, and AI in industrial environments.
View work
ICS Arabia Podcast
A conversation about the meaning of OT, the Iberian blackout, and the risks surrounding modern remote-access architectures.
View work
CyberTek Tech Festival
A conference session on the practical impact of NIS2 for OT professionals and regulated operators.
View work
S4 Events
Why OT cybersecurity education should be adapted to sector engineering practices rather than taught only through generic standards.
View work
Waterfall Security Solutions
A recorded webinar on what NIS2 changes for operational technology teams and critical infrastructure.
View work
Ciber Tren
A Spanish-language interview on rail and industrial cybersecurity.
View work
(CS)²AI
A career-spanning discussion of offensive research, hotel automation, industrial security, and curiosity-driven innovation.
View workIndustrial Cybersecurity Pulse
A discussion of the United States National Cybersecurity Strategy and its implications for industrial organizations.
View work
Fujitsu Research
A panel discussion on security architecture and trust for the Industrial Internet of Things.
View work
DEF CON
The DEF CON 22 presentation demonstrating how an insecure KNX deployment exposed a luxury hotel to remote control.
View work04 / 04
Twelve granted U.S. patents covering trusted computing, identity, secure migration, and data protection.
U.S. Patent 9,112,681
Granted August 18, 2015. Secure information transfer mechanisms supporting system migration.
View workU.S. Patent 8,955,104
Granted February 10, 2015. A system for monitoring memory integrity using an independent monitoring component.
View workU.S. Patent 8,745,747
Granted June 3, 2014. A device architecture for protecting data in a computing environment.
View workU.S. Patent 8,874,745
Granted October 28, 2014. Techniques for providing services across managed computing environments.
View workU.S. Patent 8,683,059
Granted March 25, 2014. Methods and software mechanisms for strengthening network security.
View workU.S. Patent 8,505,103
Granted August 6, 2013. Hardware-based independent security assessment and trust-state reporting.
View workU.S. Patent 8,438,385
Granted May 7, 2013. Methods for verifying identity using trusted computing mechanisms.
View workU.S. Patent 8,533,469
Granted September 10, 2013. Controlled methods for sharing documents between computing systems.
View workU.S. Patent 8,522,018
Granted August 27, 2013. A remotely supported trusted platform module architecture for mobile devices.
View workU.S. Patent 8,272,002
Granted September 18, 2012. An external trusted platform module for remote host environments.
View workU.S. Patent 7,877,605
Granted January 25, 2011. A framework for registering opinions in pervasive transaction systems.
View workU.S. Patent 7,822,688
Granted October 26, 2010. A wireless wallet architecture for pervasive transactions and services.
View workCitation counts and the complete scholarly record remain available on Google Scholar.