Publications

Documents:

SSLSniff and IE's Certification Chain Validation Vulnerability: Decomposing an Insider Threat to a Sensitive Web Application (PDF) - April 14, 2004

As a requirement to attaining the SANS GIAC Certified Incident Handler certification, I published a paper describing both the use of a vulnerability and the defense mechanisms required to prevent, detect, and resolve such an attack.

Wireless Application Protocol: Technical Description (PDF) - August 3, 2000

In the middle of 2000, "wireless" was one of the most hyped buzz-words in the Internet business world. No one wanted to "miss the boat", and not have some sort of mobile technology practice. I was asked to co-chair a working group devoted to mobile technologies and usability. Since my focus was on the technological aspects of the mobile technologies, I authored a basic description of the Wireless Application Protocol for the working group.

Training:

Introduction to Data Warehousing and Data Landscaping Concepts (PPT) - December 18, 2001

The goal of this training class was to provide students with a basic understanding of the data warehousing and data landscaping knowledge domains. The intended audiences were web development project managers with varied levels of technical experience.

Markup and Programming Markup Dynamically: XML and DHTML (PPT) - August 16, 2000

This class was focused on explaining what markup languages are, defining their relationship with web and application development, and providing a little bit of history surrounding the SGML family tree. The intended audiences were web development project managers with varied levels of technical experience.