xvii
Authors
Joanna F. DeFranco,
New Jersey Institute of Technology, M.S. in computer engineering from Villanova
University, and a B.S. in electrical engineering and math from Penn State University.
She is an Associate Professor of Software Engineering at the Pennsylvania State
University. She has worked as an Electronics Engineer for the Navy as well as a
Software Engineer at Motorola. Dr. DeFranco is also a researcher for the National
Institute of Standards and Technology ( NIST) working with the Secure Systems and
Applications group. She is a senior member of the IEEE and an area and column edi
tor for IEEE Computer Magazine
ing, software security, distributed networks, and Internet of Things.
Bob Maley, Security Officer at Black Kite, the leader in third-party cyber risk intelligence.
Bob has been a leader in security for decades, initially in physical security as a
law enforcement officer. He has acquired a broad range of experience and expertise in all areas of security, including t hird-party security, risk assessment, architecture, design, policy development, deployment, incident response and investigation, and enterprise solution deployments such as intrusion detection, data protection, compli ance, and incident reporting and response.
Before joining Black Kite, Bob was the head of PayPal’s Global T hird-Party
Security & Inspections team, developing the system into a state- of- the-art risk man-
agement program.
In a previous role as chief information security officer for the Commonwealth of
Pennsylvania, he led the Pennsylvania Information Security Architecture program to win the 2007 award for outstanding achievement in information technology by the National Association of State Chief Information Officers ( NASCIO).
Bob has been named a CSO of the Year finalist for the SC Magazine Awards and
was nominated as the Information Security Executive of the Year, North America. Additionally, his team was a finalist in the SC Magazine Awards for Best Security Team. Bob’s certifications include CRISC, CTPRP, OpenFAIR, and CCSK. His expertise has been quoted in numerous articles for Forbes StateTech Magazine
Reading
ERRORS
Despite our best effort as well as the effort of the reviewers and the publisher, there may be errors in this book. If errors are found, please report them to
[email protected].