Appendix B—The Experts Who Helped Create the Top Ten and Top Twenty Internet Vulnerability Lists

Phil Benchoff, Virginia Tech CIRT

Tina Bird, Counterpane Internet Security Inc.

Matt Bishop, University of California Davis

Chris Brenton, Dartmouth Inst. for Security Studies

Lee Brotzman, NASIRC Allied Technology Group Inc.

Steve Christey, MITRE

Rob Clyde, Symantec

Eric Cole, SANS Institute

Scott Conti, University of Massachusetts

Kelly Cooper, Genuity

Igor Gashinsky, NetSec Inc.

Bill Hancock, Exodus Communications

Shawn Hernan, CERT Coordination Center

Bill Hill, MITRE

Ron Jarrell, Virginia Tech CIRT

Christopher Klaus, Internet Security Systems

Valdis Kletnieks, Virginia Tech CIRT

Clint Kreitner, Center for Internet Security

Jimmy Kuo, Network Associates Inc.

Scott Lawler, Veridian

Jim Magdych, Network Associates Inc.

Dave Mann, BindView

Randy Marchany, Virginia Tech

Mark Martinec “Jozef Stefan” Institute

Peter Mell, National Institutes of Standards and Technology

William McConnell, Trend Consulting Services

Larry Merritt, National Security Agency

Mudge, @stake

Tim Mullen, AnchorIS.com

Ron Nguyen, Ernst & Young

David Nolan, Arch Paging

Stephen Northcutt, SANS Institute

Alan Paller, SANS Institute

Ross Patel, ViaCode Ltd and Afentis Security Team

Hal Pomeranz, Deer Run Associates

Chris Prosise, Foundstone Inc.

Jim Ransome

RAZOR Research—BindView Development

Martin Roesch, Snort

Vince Rowe, FBI, NIPC

Marcus Sachs, JTF-CNO US Department of Defense

Tony Sager, National Security Agency

Bruce Schneier, Counterpane Internet Security Inc.

Gene Schultz, Lawrence Berkeley Laboratory

Greg Shipley, Neohapsis

Derek Simmel, Carnegie Mellon University

Ed Skoudis, Predictive Systems

Gene Spafford, Purdue University CERIAS

Lance Spitzner, Sun Microsystems, GESS Team

Wayne Stenson, Honeywell

Jeff Stutzman

Frank Swift

Bob Todd, Advanced Research Corporation

Jeff Tricoli, FBI NIPC

Viriya Upatising, Loxley Information Services Co.

Laurie Zirkle, Virginia Tech CIRT