Amit Yoran

Last updated
Amit Yoran
Amit Yoran (54020527457).jpg
Yoran in 2024
BornNovember 1970 (age 53)
United States
Alma mater United States Military Academy
George Washington University
OccupationCEO of Tenable, Inc.

Amit Yoran (born December 1970) [1] is chairman and chief executive officer of Tenable, Inc., a position held since January 3, 2017. He is also on the board of directors of the Center for Internet Security. [2]

Contents

Early life

Yoran was born in the United States to Israeli emigrants who arrived in the 1960s. [3] He obtained a B.S. in computer science from the United States Military Academy and served as one of the founding members of the US Department of Defense's Computer Emergency Response Team. He received a M.S. in computer security from George Washington University. [2]

Career

In April 1998, during the dot-com bubble, along with his two brothers and Tim Belcher, Yoran co-founded Riptech. It began operations in December 1999 and raised $45 million in venture capital from Columbia Capital, Providence Equity, and Broadview Capital. [4] It was sold to Symantec (now Gen Digital) in August 2002 for $145 million in cash. [3] [2]

In September 2003, he was named director of the newly created National Cyber Security Division within the United States Department of Homeland Security. There, he oversaw the creation of a cyber alert system that sends out warnings about computer viruses and net attacks. He resigned from the position abruptly in October 2004. [5] [6]

In January 2006, he was named CEO of In-Q-Tel. [7] He resigned in April 2006 after less than four months in the position. [8] At that time, he was also a member of the board of directors of Trust Digital, Guidance Software, and Guardium. [9]

In November 2006, he was named CEO of Netwitness. [10]

In October 2014, Yoran was named president of RSA. [11]

Effective January 2017, he was named CEO of Tenable, Inc. [12]

In August 2023, he accused Microsoft of putting its customers at risk after he revealed the existence of a zero-day vulnerability in Microsoft Azure. [13]

Personal life

Yoran is married and has three children, [8] including a set of twins. [6]

Related Research Articles

<span class="mw-page-title-main">RSA Security</span> American computer security company

RSA Security LLC, formerly RSA Security, Inc. and trade name RSA, is an American computer and network security company with a focus on encryption and decryption standards. RSA was named after the initials of its co-founders, Ron Rivest, Adi Shamir and Leonard Adleman, after whom the RSA public key cryptography algorithm was also named. Among its products is the SecurID authentication token. The BSAFE cryptography libraries were also initially owned by RSA. RSA is known for incorporating backdoors developed by the NSA in its products. It also organizes the annual RSA Conference, an information security conference.

<span class="mw-page-title-main">Dan Geer</span> American computer scientist

Dan Geer is a computer security analyst and risk management specialist. He is recognized for raising awareness of critical computer and network security issues before the risks were widely understood, and for ground-breaking work on the economics of security.

In-Q-Tel (IQT), formerly Peleus and In-Q-It, is an American not-for-profit venture capital firm based in Arlington, Virginia. It invests in companies to keep the Central Intelligence Agency, and other intelligence agencies, equipped with the latest in information technology in support of United States intelligence capability. The name "In-Q-Tel" is an intentional reference to Q, the fictional inventor who supplies technology to James Bond.

The United States Computer Emergency Readiness Team (US-CERT) was a team under the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security.

<span class="mw-page-title-main">National Cyber Security Division</span>

The National Cyber Security Division (NCSD) is a division of the Office of Cyber Security & Communications, within the United States Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. Formed from the Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System, NCSD opened on June 6, 2003.

<span class="mw-page-title-main">Gilman Louie</span> American video game designer and venture capitalist (born 1960)

Gilman Louie is an American technology venture capitalist who got his start as a video game designer and then co-founded and ran the CIA venture capital fund In-Q-Tel. With his company Nexa Corporation he designed and developed multiple computer games such as the F-16 Fighting Falcon flight simulator series. His company later merged with Spectrum Holobyte where he was CEO until its acquisition by Hasbro, after which he became Chief Creative Officer and General Manager of its Games.com group. He has served on a number of boards of directors, including Wizards of the Coast, Niantic, Total Entertainment Network, FASA Interactive, Wickr, Aerospike, the Chinese American International School, Markle Foundation, Digital Promise, and Maxar Technologies. He is chairman of the Federation of American Scientists and Vricon. He is a member of the President’s Intelligence Advisory Board and the U.S. Department of State’s Foreign Affairs Policy Board.

The Institute for Law, Science and Global Security in the Department of Government at Georgetown University was established to promote teaching and research in the area of intersection between international law and international relations. The Institute sponsors undergraduate and graduate courses and runs a Master's Program in International Law and Global Security. The Institute seeks to inform the public policy debate about the nature, role and importance of international law as it connected to issues of science and global security. To this end, it sponsors a series of specific programs including the Program on Non-Proliferation Law and Policy, which is jointly run with the James Martin Center of the Monterey Institute of International Studies.

<span class="mw-page-title-main">Bitdefender</span> Romanian cybersecurity technology company

Bitdefender is a Romanian cybersecurity technology company headquartered in Bucharest, Romania, with offices in the United States, Europe, Australia and the Middle East.

<span class="mw-page-title-main">Howard Schmidt</span> American computer security expert (1949 - 2017)

Howard Anthony Schmidt was a partner with Tom Ridge in Ridge Schmidt Cyber LLC, a consultancy company in the field of cybersecurity. He was the Cyber-Security Coordinator of the Obama Administration, operating in the Executive Office of the President of the United States. He announced his retirement from that position on May 17, 2012, effective at the end of the month.

NetWitness is a network security company that provides real-time network forensics automated threat detection, response, and analysis solutions. The company is based in Bedford, Massachusetts. In 2011, NetWitness was acquired by EMC Corporation and in 2020 was acquired by Symphony Technology Group as a stand-alone business unit, part of RSA Security.

The National Cyber Security Hall of Fame, founded by Larry Letow and Rick Geritz, was established in 2012 to recognize the contributions of key individuals in the field of cyber security; its mission statement is, Respect the Past – Protect the Future. According to its website, it is designed to honor the innovative individuals and organizations which had the vision and leadership to create the fundamental building blocks for the cybersecurity Industry. The organization also highlights major milestones in the industry's 40-year history through a timelineArchived 2013-12-30 at the Wayback Machine representation, which includes inductees and their corresponding accomplishments.

Cyren Inc. was a cloud-based Internet security technology company that provided security services and threat intelligence services to businesses. It offered a range of services including web security, DNS security, anti-spam solutions, phishing detection, ransomware protection, URL filtering, malware detection, and botnet attack prevention. Cyren also provided endpoint protection for mobile devices and Internet of Things (IoT) gateways. Major clients included Microsoft, Google, Check Point, Dell, T-Mobile, and Intel. The company announced its closure in February 2023.

Absolute Software Corporation is an American-Canadian company that provides products and services in the fields of endpoint security and zero trust security. It was publicly traded company on the Toronto Stock Exchange (TSX) and Nasdaq until it was acquired by Crosspoint Capital Partners in July 2023.

<span class="mw-page-title-main">Iftach Ian Amit</span> Israeli Hacker

Iftach Ian Amit is an Israeli Hacker/computer security researcher and practitioner. He is one of the co-founders of the Tel Aviv DEF CON Group DC9723, the Penetration Testing Execution Standard, and presented at hacker conventions such as DEF CON, Black Hat, BlueHat, RSA Conference. He has been named SC Magazine's top experts and featured at Narratively's cover piece on Attack of the Superhackers and is frequently quoted and interviewed

<span class="mw-page-title-main">RSA Conference</span> Annual cryptography convention

The RSA Conference is a series of IT security conferences. Approximately 45,000 people attend one of the conferences each year. It was founded in 1991 as a small cryptography conference. RSA conferences take place in the United States, Europe, Asia, and the United Arab Emirates each year. The conference also hosts educational, professional networking, and awards programs.

The National Cybersecurity and Communications Integration Center (NCCIC) is part of the Cybersecurity Division of the Cybersecurity and Infrastructure Security Agency, an agency of the U.S. Department of Homeland Security. It acts to coordinate various aspects of the U.S. federal government's cybersecurity and cyberattack mitigation efforts through cooperation with civilian agencies, infrastructure operators, state and local governments, and international partners.

<span class="mw-page-title-main">Eviatar Matania</span>

Eviatar Matania was the founder and Head of the Israel National Cyber Bureau and starting February 2015 also the founder and first Director General of the Israel National Cyber Directorate, that consists of both the National Cyber Bureau and the National Cyber Security Authority, a tenure he concluded in January 2018. Currently, Matania is a professor at the School of Political Science, Government and International Affairs at Tel Aviv University, where he also serves as the head of the MA Security Studies Program, and holds an adjunct professorship at Oxford University’s School of Government. Matania also holds consultancy roles in the fields of cyber, technological policies and strategies, and national security, and is the joint-head of the Smart Systems Initiative.

<span class="mw-page-title-main">Cybersecurity and Infrastructure Security Agency</span> Agency of the United States Department of Homeland Security

The Cybersecurity and Infrastructure Security Agency (CISA) is a component of the United States Department of Homeland Security (DHS) responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government's cybersecurity protections against private and nation-state hackers.

Tenable, Inc. is a cybersecurity company based in Columbia, Maryland. Its vulnerability scanner software Nessus, developed in 1998, is one of the most widely deployed vulnerability assessment solutions in the cybersecurity industry. As of December 31, 2023, the company had approximately 44,000 customers, including 65% of the Fortune 500.

Log4Shell (CVE-2021-44228) is a zero-day vulnerability in Log4j, a popular Java logging framework, involving arbitrary code execution. The vulnerability had existed unnoticed since 2013 and was privately disclosed to the Apache Software Foundation, of which Log4j is a project, by Chen Zhaojun of Alibaba Cloud's security team on 24 November 2021. Before an official CVE identifier was made available on 10 December 2021, the vulnerability circulated with the name "Log4Shell", given by Free Wortley of the LunaSec team, which was initially used to track the issue online. Apache gave Log4Shell a CVSS severity rating of 10, the highest available score. The exploit was simple to execute and is estimated to have had the potential to affect hundreds of millions of devices.

References

  1. "Amit YORAN". gov.uk .
  2. 1 2 3 "Amit Yoran". Center for Internet Security .
  3. 1 2 Sagi-Maydan, Mary (August 22, 2002). "A Big Sale for (U.S.) Military Veterans Elad and Amit" . Haaretz .
  4. "Riptech on frontlines of cybersecurity". United Press International . January 14, 2002.
  5. "US cyber security chief resigns". BBC News . October 4, 2004.
  6. 1 2 "Nation's cybersecurity chief abruptly quits DHS post". Computerworld . October 1, 2004.
  7. "In-Q-Tel Announces Amit Yoran as New CEO" (Press release). In-Q-Tel. January 4, 2006.
  8. 1 2 O'Hara, Terence (April 24, 2006). "Four Months Later, In-Q-Tel Again Needs New CEO" . The Washington Post .
  9. "United States: Amit Yoran" . Indigo Publications . January 13, 2006.
  10. Washkuch Jr., Frank (November 20, 2006). "Former cyberintelligence chief named NetWitness CEO". Haymarket Media Group .
  11. "Amit Yoran Named RSA President; Art Coviello Remains as RSA Executive Chairman" (Press release). PR Newswire. October 28, 2014.
  12. "New Tenable CEO plans to continue high-growth, keep company local". American City Business Journals . December 16, 2016.
  13. Scroxton, Alex (August 3, 2023). "Microsoft attacked over 'grossly irresponsible' security practice". Computer Weekly .