Ryan VanRiper, Technical Staff

RyanMr. VanRiper is a Software Engineer and Security Researcher with 10 years experience in the development of complex security systems. He specializes in building systems that behave in intelligent and autonomous ways applied to computer security. His experience has mostly involved integrating and utilizing high level planning systems, modeling networks and network services, system design allowing modular system collaboration, and self healing techniques to achieve high availability.

At Adventium, Mr. VanRiper's activities include system design and architecture, tool development, and mastery of software implementation in many languages. He was recently involved in the DARPA sponsored Self Regenerative Systems (SRS) project SPDR (spider) interested in detecting and thwarting malicious insiders. His experience with Red Team attack strategies also improved and hardened SPDR allowing it to meet the challenging evaluation metrics DARPA placed on the project. This was recently and successfully demonstrated against a group of red team analysts from SRA International.

In 2005 Mr. VanRiper received GIAC training and certification as a Forensic Response Analyst with SANS and maintains an active interest in computer forensics. He also serves as the System / Network Administrator for the Adventium network. More recently he has completed additional SANS training on penetration testing and incidence response.

As a Research Scientist at Honeywell Laboratories, Mr. VanRiper was the lead software developer and architect for the CORTEX cyber response system sponsored by DARPA's SRS program. He worked on the Scyllarus intrusion detection system and contributed to the ontology used to classify attacks and absorb network sensor information. During this time he also worked on integrating and testing Scyllarus with the CORTEX response system to provide a stream of high quality alerts for low false positive response. Mr. VanRiper also spent time writing software and building attacks to demonstrate the first version of CORTEX called CIRCADIA. This was a DARPA funded project sponsored by ATO within the Cyber Panel program. This project was a great success and was one of the top performers at the Cyber Panel grand challenge. This allowed him an invitation to present the system at the DISCEX II security conference. Towards the end of the time spent at Honeywell Mr. VanRiper was the lead integrator for a security sensor fusion project interested in collecting biometric data on people entering by vehicle into a secured facility. This work was very successful and is currently deployed at a high security location in the US.

 

Education

  • B.S. Computer Science, Michigan Technological University

  • GIAC SANS GCFA Forensic Analyst

 

Published Papers and Reports

 

Contact Information:
Ryan VanRiper
Member, Technical Staff
ryan
dot vanriper at adventiumlabs dot org