edward bonver

OWASP LA Chapter was winner of 2013 Global OWASP WASPY Awards in Best Chapter Leader category. Globally one of the most active OWASP chapters. One of core AppSecCali conference organizers. Primarily responsible for inviting speakers and for the Call for Presentations (CFP) process. AppSecCali is one of OWASP’s most successful regional conferences, organized by multiple California OWASP chapters.

As an active board member, participated in key decisions influencing organization’s evolutionary path to raise software security bar for the software industry. As technical lead, championed and fostered tech exchange between member organizations, actively participated in a number of technical working groups, co-authored whitepapers, blog entries, and CBT training modules, reviewed all other publications. Represented SAFECode at various public events in the US and in Europe to promote software security best practices. https://safecode.org/

Software Security Group. Worked with developers and QA professionals across Symantec in order to improve the company's software security practices, including methodologies, procedures, and tools. Taught secure coding and security testing classes; performed a variety of security-related activities on the end products, including security code reviews, architectural risk assessment and vulnerability analysis. Founded, and actively lead Symantec QA Security Task Force to teach Symantec QA professionals how to perform security testing on end products.

Core Technologies. Was an active senior member of Common Client/Behavior Blocking team in Security Technologies Group. Provided software services to the rest of Symantec Windows-family products in the form of behavior blocking technologies, and other shared software components. Performed design and code reviews, extensive white and black box testing of Win32 kernel and user mode software components. Championed security testing, including risk assessment, threat modeling and vulnerability analysis.

Developed, implemented and ported IP Multicast networking protocols such as IGMPv3 and IGMP+ for a new Layer 2/3/4 networking switch. Extensively used C/C++ in UNIX and WindowsNT environments.

Was an active member of a software development team responsible for a state-of-the-art router/switch. Designed and implemented Command Line Interface which included identification, authentication and authorization mechanisms. Ported networking protocols: OSPF, RIP, IRDP, UDP and BOOTP relay, IGMPv1/v2, DVMRP, plus PPP protocols. Implemented agent-side SNMP code for many proprietary parts of the system. Participated in design of many other areas of the system. Solely designed, implemented and integrated, from scratch, the following protocols: PPP/CHAP, PPP/PAP and IGMPv3 plus IGMP/PIM interaction. Extensively used UNIX and WindowsNT environments and C/C++ programming languages.

Embedded and Real-time software engineering. Participated in design and implementation of a distributed real-time operating system, which would replace WindowsNT core in order to make WindowsNT a hard real-time OS. Tested the VAXELN real-time operating system for Year 2000 related bugs. Designed and implemented a WindowsNT DCOM demo, which has demonstrated weaknesses of the real-time aspects of the WindowsNT operating system. Debugged the VAXELN operating system for TCP/IP related problems. Tested run-time libraries of VxWorks operating system. Extensively used UNIX, VMS and WindowsNT environments.

Embedded and Real-time software engineering. Programmed tests for tape drivers. Fixed bugs in VAXELN operating system in order to produce new release of the system. Evaluated different software packages. Based on those evaluations manager of the group decided whether to purchase the packages for the group. Was in charge of E-mail distribution using VAXVMS operating system. Designed, developed and maintained World Wide Web pages for the whole Embedded and Real-time Software Engineering department.