Amit Yoran

Last updated
Amit Yoran
Born1970 (age 5354)
United States
Alma mater United States Military Academy
George Washington University
OccupationCEO of Tenable, Inc.

Amit Yoran (born December 1970) [1] is chairman and chief executive officer of Tenable, Inc., a position held since January 3, 2017. He is also on the board of directors of the Center for Internet Security. [2]

Contents

Early life

Yoran was born in the United States to Israeli emigrants who arrived in the 1960s. [3] He obtained a B.S. in computer science from the United States Military Academy and served as one of the founding members of the US Department of Defense's Computer Emergency Response Team. He received a M.S. in computer security from George Washington University. [2]

Career

In April 1998, during the dot-com bubble, along with his two brothers and Tim Belcher, Yoran co-founded Riptech. It began operations in December 1999 and raised $45 million in venture capital from Columbia Capital, Providence Equity, and Broadview Capital. [4] It was sold to Symantec (now Gen Digital) in August 2002 for $145 million in cash. [3] [2]

In September 2003, he was named director of the newly-created National Cyber Security Division within the United States Department of Homeland Security. There, he oversaw the creation of a cyber alert system that sends out warnings about computer viruses and net attacks. He resigned from the position abruptly in October 2004. [5] [6]

In January 2006, he was named CEO of In-Q-Tel. [7] He resigned in April 2006 after less than four months in the position. [8] At that time, he was also a member of the board of directors of Trust Digital, Guidance Software, and Guardium. [9]

In November 2006, he was named CEO of Netwitness. [10]

In October 2014, Yoran was named president of RSA. [11]

Effective January 2017, he was named CEO of Tenable, Inc. [12]

In August 2023, he accused Microsoft of putting its customers at risk after he revealed the existence of a zero-day vulnerability in Microsoft Azure. [13]

Personal life

Yoran is married and has three children, [8] including a set of twins. [6]

Related Research Articles

<span class="mw-page-title-main">RSA Security</span> American computer security company

RSA Security LLC, formerly RSA Security, Inc. and trade name RSA, is an American computer and network security company with a focus on encryption and encryption standards. RSA was named after the initials of its co-founders, Ron Rivest, Adi Shamir and Leonard Adleman, after whom the RSA public key cryptography algorithm was also named. Among its products is the SecurID authentication token. The BSAFE cryptography libraries were also initially owned by RSA. RSA is known for incorporating backdoors developed by the NSA in its products. It also organizes the annual RSA Conference, an information security conference.

<span class="mw-page-title-main">Dan Geer</span> American computer scientist

Dan Geer is a computer security analyst and risk management specialist. He is recognized for raising awareness of critical computer and network security issues before the risks were widely understood, and for ground-breaking work on the economics of security.

In-Q-Tel (IQT), formerly Peleus and In-Q-It, is an American not-for-profit venture capital firm based in Arlington, Virginia. It invests in companies to keep the Central Intelligence Agency, and other intelligence agencies, equipped with the latest in information technology in support of United States intelligence capability. The name "In-Q-Tel" is an intentional reference to Q, the fictional inventor who supplies technology to James Bond.

The United States Computer Emergency Readiness Team (US-CERT) is an organization within the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Specifically, US-CERT is a branch of the Office of Cybersecurity and Communications' (CS&C) National Cybersecurity and Communications Integration Center (NCCIC).

<span class="mw-page-title-main">National Cyber Security Division</span>

The National Cyber Security Division (NCSD) is a division of the Office of Cyber Security & Communications, within the United States Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. Formed from the Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System, NCSD opened on June 6, 2003. The NCSD mission is to collaborate with the private sector, government, military, and intelligence stakeholders to conduct risk assessments and mitigate vulnerabilities and threats to information technology assets and activities affecting the operation of the civilian government and private sector critical cyber infrastructures. NCSD also provides cyber threat and vulnerability analysis, early warning, and incident response assistance for public and private sector constituents. NCSD carries out the majority of DHS’ responsibilities under the Comprehensive National Cybersecurity Initiative. The FY 2011 budget request for NCSD is $378.744 million and includes 342 federal positions. The current director of the NCSD is John Streufert, former chief information security officer (CISO) for the United States Department of State, who assumed the position in January 2012.

<span class="mw-page-title-main">Gilman Louie</span> American video game designer and venture capitalist (born 1960)

Gilman Louie is an American technology venture capitalist who got his start as a video game designer and then co-founded and ran the CIA venture capital fund In-Q-Tel. With his company Nexa Corporation he designed and developed multiple computer games such as the F-16 Fighting Falcon flight simulator series. His company later merged with Spectrum Holobyte where he was CEO until its acquisition by Hasbro, after which he became Chief Creative Officer and General Manager of its Games.com group. He has served on a number of boards of directors, including Wizards of the Coast, Niantic, Total Entertainment Network, FASA Interactive, Wickr, Aerospike, the Chinese American International School, Markle Foundation, Digital Promise, and Maxar Technologies. He is chairman of the Federation of American Scientists and Vricon. He is a member of the President’s Intelligence Advisory Board and the U.S. Department of State’s Foreign Affairs Policy Board.

<span class="mw-page-title-main">Jeff Moss (hacker)</span> American computer security expert (born 1975)

Jeff Moss, also known as Dark Tangent, is an American hacker, computer and internet security expert who founded the Black Hat and DEF CON computer security conferences.

<span class="mw-page-title-main">Bitdefender</span> Romanian cybersecurity technology company

Bitdefender is a Romanian cybersecurity technology company headquartered in Bucharest, Romania, with offices in the United States, Europe, Australia and the Middle East.

<span class="mw-page-title-main">Howard Schmidt</span> American computer security expert (1949 - 2017)

Howard Anthony Schmidt was a partner with Tom Ridge in Ridge Schmidt Cyber LLC, a consultancy company in the field of cybersecurity. He was the Cyber-Security Coordinator of the Obama Administration, operating in the Executive Office of the President of the United States. He announced his retirement from that position on May 17, 2012, effective at the end of the month.

Riptech was a network security company.

NetWitness is a network security company that provides real-time network forensics automated threat detection, response, and analysis solutions. The company is based in Bedford, Massachusetts. In 2011, NetWitness was acquired by EMC Corporation and in 2020 was acquired by Symphony Technology Group as a stand-alone business unit, part of RSA Security.

The National Cyber Security Hall of Fame, founded by Larry Letow and Rick Geritz, was established in 2012 to recognize the contributions of key individuals in the field of cyber security; its mission statement is, Respect the Past – Protect the Future. According to its website, it is designed to honor the innovative individuals and organizations which had the vision and leadership to create the fundamental building blocks for the cybersecurity Industry. The organization also highlights major milestones in the industry's 40-year history through a timelineArchived 2013-12-30 at the Wayback Machine representation, which includes inductees and their corresponding accomplishments.

Cyren Inc. was a cloud-based Internet security technology company that created security services and threat intelligence to businesses. It offered a range of services including web security, DNS security, anti-spam solutions, phishing detection, ransomware protection, URL filtering, malware detection, and botnet attack prevention. Cyren also provided endpoint protection for mobile devices and Internet of Things (IoT) gateways. Major clients included Microsoft, Google, Check Point, Dell, T-Mobile, and Intel. The company announced its closure in February 2023.

<span class="mw-page-title-main">Iftach Ian Amit</span> Israeli Hacker

Iftach Ian Amit is an Israeli Hacker/computer security researcher and practitioner. He is one of the co-founders of the Tel Aviv DEF CON Group DC9723, the Penetration Testing Execution Standard, and presented at hacker conventions such as DEF CON, Black Hat, BlueHat, RSA Conference. He has been named SC Magazine's top experts and featured at Narratively's cover piece on Attack of the Superhackers and is frequently quoted and interviewed

<span class="mw-page-title-main">RSA Conference</span> Annual cryptography convention

The RSA Conference is a series of IT security conferences. Approximately 45,000 people attend one of the conferences each year. It was founded in 1991 as a small cryptography conference. RSA conferences take place in the United States, Europe, Asia, and the United Arab Emirates each year. The conference also hosts educational, professional networking, and awards programs.

The National Cybersecurity and Communications Integration Center (NCCIC) is part of the Cybersecurity Division of the Cybersecurity and Infrastructure Security Agency, an agency of the U.S. Department of Homeland Security. It acts to coordinate various aspects of the U.S. federal government's cybersecurity and cyberattack mitigation efforts through cooperation with civilian agencies, infrastructure operators, state and local governments, and international partners.

<span class="mw-page-title-main">Eviatar Matania</span>

Eviatar Matania was the founder and Head of the Israel National Cyber Bureau and starting February 2015 also the founder and first Director General of the Israel National Cyber Directorate, that consists of both the National Cyber Bureau and the National Cyber Security Authority, a tenure he concluded in January 2018. Currently, Matania is a professor at the School of Political Science, Government and International Affairs at Tel Aviv University, where he also serves as the head of the MA Security Studies Program, and holds an adjunct professorship at Oxford University’s School of Government. Matania also holds consultancy roles in the fields of cyber, technological policies and strategies, and national security, and is the joint-head of the Smart Systems Initiative.

<span class="mw-page-title-main">Cybersecurity and Infrastructure Security Agency</span> Agency of the United States Department of Homeland Security

The Cybersecurity and Infrastructure Security Agency (CISA) is a component of the United States Department of Homeland Security (DHS) responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government's cybersecurity protections against private and nation-state hackers.

Tenable, Inc. is a cybersecurity company based in Columbia, Maryland. Its vulnerability scanner software Nessus, developed in 1998, is one of the most widely deployed vulnerability assessment solutions in the cybersecurity industry. As of December 31, 2023, the company had approximately 44,000 customers, including 65% of the Fortune 500.

Log4Shell (CVE-2021-44228) is a zero-day vulnerability in Log4j, a popular Java logging framework, involving arbitrary code execution. The vulnerability had existed unnoticed since 2013 and was privately disclosed to the Apache Software Foundation, of which Log4j is a project, by Chen Zhaojun of Alibaba Cloud's security team on 24 November 2021. Before an official CVE identifier was made available on 10 December 2021, the vulnerability circulated with the name "Log4Shell", given by Free Wortley of the LunaSec team, which was initially used to track the issue online. Apache gave Log4Shell a CVSS severity rating of 10, the highest available score. The exploit was simple to execute and is estimated to have had the potential to affect hundreds of millions of devices.

References

  1. "Amit YORAN". gov.uk .
  2. 1 2 3 "Amit Yoran". Center for Internet Security .
  3. 1 2 Sagi-Maydan, Mary (August 22, 2002). "A Big Sale for (U.S.) Military Veterans Elad and Amit" . Haaretz .
  4. "Riptech on frontlines of cybersecurity". United Press International . January 14, 2002.
  5. "US cyber security chief resigns". BBC News . October 4, 2004.
  6. 1 2 "Nation's cybersecurity chief abruptly quits DHS post". ComputerWorld . October 1, 2004.
  7. "IN-Q-TEL ANNOUNCES AMIT YORAN AS NEW CEO" (Press release). In-Q-Tel. January 4, 2006.
  8. 1 2 O'Hara, Terence (April 24, 2006). "Four Months Later, In-Q-Tel Again Needs New CEO" . The Washington Post .
  9. "United States: Amit Yoran" . Indigo Publications . January 13, 2006.
  10. Washkuch Jr., Frank (November 20, 2006). "Former cyberintelligence chief named NetWitness CEO". Haymarket Media Group .
  11. "Amit Yoran Named RSA President; Art Coviello Remains as RSA Executive Chairman" (Press release). PR Newswire. October 28, 2014.
  12. "New Tenable CEO plans to continue high-growth, keep company local". American City Business Journals . December 16, 2016.
  13. Scroxton, Alex (August 3, 2023). "Microsoft attacked over 'grossly irresponsible' security practice". Computer Weekly .