Bruce Barnett

Experience

• 

  SLB

  Sept 1973 - Oct 1986

  Senior Software Engineer

  • Developed real-time system for circuit-board testers• Installed/networks 50 Sun workstations.to ARPANET.

• 

  GE

  Jan 1986 - Jan 1991

  Senior System Administrator

  • Maintained more than 1000 Sun workstations.• Installed and connected entire company to Internet.• Installed and maintained open source software for research facility.

• 

  GE Research

  Jan 1991 - Jan 2013

  Security Architect - Advanced Research

  • Created innovative cyber-analytic expert system using SADL (Semantic Application Design Language) which modeled complex networks and noted weakest links in multi-layer defense, economic impact of component compromise, and identified results using prioritized analytics based on Six Sigma principles. • Investigated security of industrial Ethernet switch, operating in SCADA environments, and discovered 7 zero-day vulnerabilities, which were documented in final report, including 40-step proposal to harden Ethernet Switches which was converted into Best Practice for GE Oil and Gas. • Executed Risk Assessment of 900Mhz mesh networking technology for division of GE, and developed numerous debug and analytical tools which merged information from MYSQL database and multiple log files.• Conceived Secure Data Provenance algorithm that calculated integrity, confidentiality, and authenticity of messages transmitted through multi-level security network, for Lockheed Martin.• Created and developed hierarchal key management system for IEEE 802.15.4 wireless sensors.• Invented attack framework using shikata_ga_nai-based polymorphic viruses.• Designed ad hoc PKI system for dynamic wireless systems, adaptive audio transmission mechanism over DCCP, and Object-Oriented Security Examiner.• Developed and deployed Expert Fault Manager.• Produced and taught 4 hour “Introduction to Security” class.• Facilitated weekly seminars and discussion based on Blackhat/DEFCON video presentations.• Performed 10 due diligence investigations of security-related companies, to determine feasibility of investment, including SecureWorks, and Okena.• Awarded $600K from DHS for MOBIUS project team with UIUC. • Presented papers at GridSec, DEFCON, Grid InterOp, IPAW, TCIPG, ISIA, LISA, LCN, Networld+InterOp, SPIE conferences.• Developed Six-Sigma-based Risk Assessment strategy for GE.• Received 10 GE management awards, and 2 Lockheed Martin awards. Show less

• 

  Grymoire Consulting, LLC

  Jan 2013 - now

  Independent Consultant

  I am currently doing penetration testing and vulnerability analysis.

• 

  Retiree AI

  Jan 2022 - now

  Retired