Launch of Unified Risk Intelligence Platform (2008)

Responsible for driving business development of Unified Risk Intelligence platform across continental Europe, including working with local sales teams to generate new business leads.  This platform is based around complex Visual Analytics and Predictive Intelligence for fraud detection.

Enterprise Case Management, Major Public-Sector Bank (Italy, 2008)

Assisted with closing business for Fraud Enterprise Case Management platform in a major Italian financial institution.

Major project [multi-million Euros] for automated security monitoring (2003-2006)

Centralized Security Monitoring

Eastern European Bank wanted to implement hundreds of IDS and Log sensors, with centralized management, integrating physical and data security, with incident handling, risk assessment, ISMS implementation, event aggregation, correlation and reporting

Risk Assessment, Security Posture and Penetration Testing (2005)

Large Austrian heavy industry public company.  Assignment included risk assessment, successful penetration test, detailed reporting to senior management

VPN & Secure Extranet (2003)

Using Cisco PIX systems, I sold, designed and managed implementation for a major VPN project, connecting nearly 55 countries within a high-security network for inter-governmental organization (based in Vienna). The same organization also implemented IDS solution which we provided.

Security Audit and Consulting for Encryption Systems (2004-2006)

A Vienna-based international organization retains my services for board-level security expertise, as well as VPN technology review, PenTesting and IDS implementation

Analysis of Wireless Security Risks (2005)

Small Austrian Bank; I provided a report on risks associated with wireless networking, including IEEE802.11, Bluetooth, GSM, etc.

Integrated IDS, Log Management (2003)

Major government institution in Austria needed Gigabit Intrusion Detection/Prevention solution, with integrated Logfile event analysis and forensics

Risk Assessment: Asset Catalog (2001)

As part of a risk assessment, I led a team to catalogue all information assets within a Vienna-based international organization. This included development of specialized software for mapping security relationships and dependencies, which my company developed according to my design. The software has subsequently been released as open source: http://dmo.sourceforge.net/

Surveillance (2003- 2004)

Implemented multi-camera monitoring projects for several small businesses within Austria

Forensics Investigation (2004)

I was retained by a firm of private investigators to conduct a forensics investigation into an alleged case of industrial espionage.

Oracle Gateway (2003)

A major European Bank retained us to develop a bespoke solution for controlling access by outsourced DBAs to a large set of Oracle databases. The solution integrated a trouble-ticket system with enforced granular access control, as well as TCP protocol analysis to log SQL

queries independently from the DBAs.  The solution integrates with Check Point VPN-1.

PenTests (2001-2006)

More than 20 firms have retained my team to perform a variety of Pen-Tests, Vulnerability Analysis, Risk Assessments and general security health checks during the past several years.

Visitor Registration (2002)

A European Bank requested us to develop a system to track visitors to its multiple locations, including passport readers, bar-code badges, key management and centralized reporting.

IT Management (2000-2008)

A major US-based credit union with several European branches retained my services as part-time IT Manager and consultant, focusing on security issues, business continuity and disaster recovery preparation.

VPN Appliance (2003)

A small Austrian Bank retained us to develop a VPN appliance with integrated terminal services, routing, IPSec, Web browser, all based in Flash RAM.