Scott Korthals

Experience

• 

  National Security Agency

  Jan 1988 - Aug 1991

  Electircal Engineer

  Commercial Product Evaluations:*Evaluating commercial operating systems against the Department of Defense Trusted Computer System Evaluation Criteria.*Specific products included Digital Equipment Ultrix Operating System on a VAX hardware base, IBM VM/XA SP Operating System on an IBM 370 architecture, Concurrent Computer OS/32 and XEROX Reprographic Workstatons.*Main focus of work was the analysis of how the OS's used the hardware mechanism to protect themselves and separate user programs. Show less

• 

  National Security Agency

  Sept 1992 - May 2004

  Network Hardware Team:*DOD PKI related issues with respect to JAVA Smart Cards, analysis of PKI JAVA Applets for the Common Access Card (CAC), and DOD PKI Infrastructure (evaluated proposals for next generation smart cards)*Contributed to Virtual Private Network Boundary Gateway Protection Profile for Medium Robustness Environments under the National Information Assurance Partnership (NIAP)* Built an Internet Key Exchange Fuzzing tool in JAVA for shared key exchange . This effort was used to support a Master Thesis at the Naval Postgraduate School.*GSM Phone and Smart Card Analysis Show less

  • Electrical Engineer

    May 1994 - May 2004

  • Electrical Engineer

    Sept 1992 - Jun 1995
• 

  National Security Agency / Joint Chiefs of Staff J6

  Jun 2004 - Feb 2006

  Staff Officer

  Staffing Officer at Joint Chiefs of Staff J6 C4 (Command, Control, Communications, and Computer Systems Directorate)* Identity Management, Public key infrastructure (PKI), Biometrics, Common Access Card (CAC), and High Assurance Internet Protocol Encryptor (HAIPE).*Working groups included the Certificate Policy Management Working Group (CPMWG), Department of Defense Active Directory Interoperability Working Group (DADIWG), Combined Communications Electronics Board (CCEB) and Multinational Security Accreditation Board (MSAB). Show less

• 

  National Security Agency

  Mar 2006 - Mar 2019

  Cross Domain Solutions and Type 1 Cryptographic Devices* Representative to the Cross Domain Technical Advisory Board which provided accreditation decision recommendations for the Department of Defense.* Performed penetration testing (Analysis of software and hardware architecture, source code analysis, and testing (data filters, networking protocols, access privileges)* Type-1 Cryptographic analysis (High Assurance Internet Protocol Encryptor) focused on system hardware and software architecture, security verification testing, source code analysis, and fuzz testing system calls. Show less Embedded Operating Systems and Hardware Team:*Team leader of seven engineers which included acting as technical lead to manage projects being worked , doing budget, and purchasing equipment.*Projects include the National Information Assurance Partnership (NIAP) evaluation against the Separation Kernels in Environments Requiring High Robustness, Version 1.0.3. Specific product evaluations include the Green Hills Integrity 178B and Wind River VxWorks MILS and LynxSecure Embedded OS.*The Embedded OS work was focused on supporting DOD weapon systems and Type 1 cryptographic efforts. This included the F35 fighter Aircraft, DDG 1000 Navy Destroyer, High Assurance Internet Protocol Encryptor (HAIPE) products and Secure Wireless development efforts. Show less

  • Senior Electrical Engineer

    Aug 2011 - Mar 2019

  • Senior Electronic Engineer

    Dec 1987 - Mar 2019

  • Team and Technical Lead

    Mar 2006 - Jul 2011