Steven Branigan CV

	Providing Advanced High Tech Security Solutions			Cyanline Founder Steven Branigan authored the book that takes forensic investigators and law enforcement officials through high-tech investigations. It provides best-practices on handling digital information
Experts in High Tech Crime Prevention, Detection, Investigation & Litigation Support

Steven Branigan CV

Education

Master of Business Administration	Columbia University, New York City,NY
M.S. Computer Science	Rutgers University, New Brunswick, NJ
B.A. Computer Science	Rutgers College, New Brunswick, NJ

Patents

A Method and Apparatus for Identifying Hosts Breeching the Firewall Perimeter, (S. Branigan, H. Burch, B. Cheswick), 7,299,489
A Method and Apparatus for Securing Wireless Data Networks, (S. Branigan, B. Cheswick), patent pending.

Publications

"Trends in Disk Drives and Data Transfer Speeds", S. Branigan, Information Security Bulletin, May, 2007
"Top 10 Most Common Wireless Mistakes", S.Branigan, Computer Technology Review, October, 2007
"High-Tech Crimes Revealed", S. Branigan, Addison Wesley, Copyright (c) 2005.
"Securing the Critical IP Infrastructure", S. Branigan, Information Security Technical Report, Volume 7, Issue 2, 1 June 2002
"What Can You Do with Traceroute", S. Branigan, H. Burch, B. Cheswick and F. Wojcik, Internet Computing online, 2001
"Mapping and Visualizing the Internet", S. Branigan, H. Burch, B. Cheswick. Usenix Security Symposium, 2000

Presentations

"The Internet as a Backbone of the New Digital Economy", Testimony before the Joint Economic Committed (Chaired by Jim Saxton) as part of the Wired World: Cyber Security and the U.S Economy Hearing for the 107th Congress.
"Understanding Steganography", Presented at the New Jersey State Police Cyber Terrorism Awareness Day, May 2, 2003
"An Update on Quantum Computing", Presented to NATO\'s Allied Command Europe Counter Intelligence ACI/CI network security, May, 2001
"Yugoslavia: An Unclassified Peak at a New Battlefield", Presented to NATO's Allied Command Europe Counter Intelligence ACI/CI network security, May, 2001

Honors, Awards, Societies

Board Member of the High Tech Crime Investigation Association, NorthEast Chapter.
Member of the FBI's Infragard program
Member of the NJ License Private Investigator Association
Certificate of Appreciation, United States Secret Service, 2002
Awarded for assistance provided to rebuild infrastructure for the NY Field Office immediately after the September 11th, 2001 attacks.
Certificate of Appreciation, New Jersey State Police, 2002
Awarded for training on cyber-terrorism issues.
A founding member, along with ATSAIC Bob Weaver, of the New York Electronic Crimes Task Force.

Experience

Designed, developed, implemented and supported patent-pending techniques for forensic disk acquistion.
Developed and deployed new techniques for tracking hackers.
Devised new method for securing wireless networks (patent-pending)

Developed and delivered graduate level Software Security Course

Led the team of engineers that build and deliver Lumeta's IPsonar product.
Direct research on TCP/IP networks as it relates to Internet and intranet traffic.
Devised new methods for detecting network devices that are attempting to hide computers on a network.

Assisted corporate business units and the CIO in implementing Virtual Private Network technology, to securely improve remote access and reduce cost for the business.
Researched Internet networking security issues with Bill Cheswick. Devised and patented a method for detecting hosts that are breeching the corporate network security perimeter.
Researched wireless data communication issues. Devised and patented a method for securing wireless data networks that enables user level authorization while preserving the ability of clients to roam among many different base stations.

Brought Intrusion Detection technology into the corporation to improve detection of hacker activity on the corporate network.
Improved the technology and techniques that the computer investigation teams used, reducing the potential liability incurred by lack of procedures.
Led team for Integrated E-Commerce Security for the corporation that reported to the General Auditor.
Led the security efforts to implement Virtual Private Network technology for remote access into the corporation, and ran the first corporate VPN trial for the company.
Worked with business units to develop methods to securely distribute sensitive sales data to a world wide sales force.

Led intrusion investigations on behalf of the RBOCs. Pioneered techniques in high-tech investigations.
Led teams on providing network security consulting services to the RBOCs and financial clients.
Led a team of engineers on the redesign and implementation of the security subsystem for the Service Control Point (a switch in the SS7 network.)
Led a team of engineers on the redesign of the toll-free and calling cards database used in processing telephone calls in the US and Canada to allow the RBOCs to comply with FCC mandates.

CyanLine Blog

Why won’t my call go through? Denial of service in the cell phone network.

Mon, 30 Jan 2012 19:50:02 +0000 - Recently, some of the major cellular carriers have released “Network Extenders”, also known as femtocell. The network extender is a device that a subscriber purchases to extend the reach of the cell phone network. (In effect, the subscriber is paying for the privilege of increasing the cellular network coverage. What a deal!) The network extender [...]

SCADA and security

Wed, 30 Nov 2011 13:49:10 +0000 - A recent article by Hal Hodson of Information Age reports that the FBI has publicly stated that hackers have successfully targeted SCADA systems in three unnamed US communities. The attacks were reported to have the potential to shut down electricity at a nearby mall as well as the potential to dump sewage. Just weeks earlier came an announcement from the [...]

How to find hidden passwords (and how to protect them)

Fri, 30 Sep 2011 15:27:46 +0000 - While preparing to teach a computer forensic workshop, I discovered a new live Linux distribution entitled C.A.IN.E, (Computer Aided Investigative Environment.) This software is one of a few live Linux distributions that allows a user to boot Linux from a CD or DVD and start a forensic investigation. The distribution includes tools to make forensic [...]

Revenge Hacking

Mon, 01 Aug 2011 03:26:15 +0000 - Revenge is a powerful motivator for hacking. Take, for example, the case of Barry Ardolf of Minnesota. Trouble started when Mr. Ardolf was accused by a neighbor of kissing their 4-year boy on the lips. When the parents confronted Mr. Ardolf, he confessed that the accusation was true. Naturally, the parents of the 4-year old contacted the police. This made Mr. Ardolf angry [...]