I am passionate about software security, machine learning security, and technology transfer. I deliver talks spiked with both humor and insight to audiences ranging from big commercial trade shows to academic lecture halls. You will most certainly laugh and will probably learn something as an accidental side effect. Abstracts for these current titles are available on request:
- Security Engineering for Machine Learning
- Seven Things: Frank Zappa, T. Coraghassen Boyle, and 21 Years in Security
- Four CISO Tribes and Where to Find Them
- A Brief History of Software, Security, and Software Security: Bits, Bytes, Bugs, and the BSIMM
- Cyber War, Cyber Peace, Stones, and Glass Houses
- Technology Transfer: A Software Security Case Study
Sample Keynote Talks from 2014-2026
No Security Meter for AI
- NIST, Gaithersburg, MD, April 2026 (invited talk).
Why Machine Learning Security Affects Everyone
- Mind the Sec 2025, keynote, São Paulo, Brazil, September 2025 (in the round keynote for 16,000 attendee trade show).
10, 23, 81 — Stacking up the LLM Risks: Applied Machine Learning Security
- University of São Paulo, Brazil, September 2025.
- CCSC Eastern Conference, dinner keynote, October 2024.
- Rose-Hulman Institute of Technology, Terre Haute, IN, October 2024.
- ISSA NoVa, Reston, VA, May 2024.
- Google (global engineering audience, hosted by Google Zurich), May 2024.
- Stockholm, Oslo, and Bergen (Scandinavian tour), April 2024.
- Luddy Center for Artificial Intelligence (SPICE), Indiana University, April 2024.
- NDSS’24 workshops (SDIoTSec, USEC, AISCC), San Diego, CA, February 2024.
- Philosophy of Mind workshop, Rio de Janeiro, Brazil, January 2024 (pre-publication preview).
- NBIM, Oslo, Norway, October 2023 (Top Ten LLM Risks debut, pre-publication).
ML/AI, Typographic Design, and the Four “I”s
- Automatic Type Design 3, ANRT, Nancy, France, February 2025.
Security Engineering for Machine Learning
- SecAppDev, Leuven, Belgium, June 2023.
- NC State Leadership in Technology Speakers Series, Raleigh, NC, February 2022.
- CERIAS Security Seminar, Purdue University, May 2021.
- LFCC Tech Bytes, Middletown, VA, January 2020.
Looking Forward and Backwards from BSIMM9
- BSIMM Community Conference, Amelia Island, FL, October 2018.
Four CISO Tribes and Where to Find Them
- BSIMM Europe Community Conference, London, May 2018.
- Segurinfo 2018, Buenos Aires, Argentina, April 2018.
- BSIMM Community Conference, Scottsdale, AZ, October 2017.
Seven Things: Frank Zappa, T. Coraghassen Boyle, and 21 Years in Security
- Qualcomm Mobile Security Summit, San Diego, CA, May 2018.
- AlphaTech, Washington, DC, November 2017.
- OWASP Italy Day, Cagliari, Italia, October 2017.
- Shmoocon, Washington, DC, January 2017.
The Cybersecurity Threat Landscape
- PNC Cyberfest, Pittsburgh, PA, November 2015.
Brief History of Software, Security, and Software Security: Bits, Bytes, Bugs, and the BSIMM
- Daimler Global Technology Conference, Stuttgart, Germany, April 2017.
- University of Virginia, Distinguished Lecture, Charlottesville, VA, March 2017.
- Codenomicon Europe 2017, Nuremberg, Germany, March 2017.
- CTO Forum, San Francisco, CA, February 2017.
- AT&T Cybersecurity Conference, New York, NY, October 2015.
Scaling a Software Security Initiative: Lessons from the BSIMM
- BSIMM Europe Community Conference, London, UK, May 2017.
- OWASP CA, Los Angeles, CA, January 2017.
- ASTQB, Washington, D.C., September 2015.
Technology Transfer: A Software Security Case Study
- Oopsla/SPLASH, Portland, OR, October 2014.
Bug Parades, Zombies, and the BSIMM: A Decade of Software Security
- Genetec ConnectDev16, Montreal, Canada, February 2016.
- Booster, Bergen, Norway, March 2014.
- James Madison University Distinguished Lecture, Harrisonburg, VA, January 2014.
Cyber War, Cyber Peace, Stones and Glass Houses
- Connecticut Information Symposium, Hartford, CT, November 2015.
- CACR Lecture, Indiana University, Bloomington, IN, April 2014.
How do I Secure my Software?
- National Cooperative Grocers Association, Montreal, Canada, October 2014.
The Building Security In Maturity Model (BSIMM)
- EMC Cybersecurity Symposium, Boston, MA, December 2015.
- FFIEC Technology Conference, Washington, DC, August 2014.
Software Security and the BSIMM
- GE Security Forum, Washington, DC, October 2016.
- Flight16, Black Duck Software, Boston, MA, October 2016.
- Digicert Security Summit, Las Vegas, NV, November 2015.
- Software Engineering Symposium, Lincoln Lab, Boston, MA, September 2015.
- CCSC-E, Yorktown, PA, November 2014.
- Rockstars of Cybersecurity, IEEE, Austin, TX, September 2014.
- AppsecUSA, Denver, CO, September 2014.
