Marcus J. Ranum
|Marcus J. Ranum|
5 November 1962 |
New York City
|Alma mater||Johns Hopkins University|
|Employer||Tenable Network Security|
|Known for||Computer and Network Security Innovator|
Marcus J. Ranum (born November 5, 1962 in New York City, New York, USA) is a computer and network security researcher. He is credited with a number of innovations in firewalls, including building the first Internet email server for the whitehouse.gov domain, and intrusion detection systems. He has held technical and leadership positions with a number of computer security companies, and is a Faculty member of the Institute for Applied Network Security.
Marcus Ranum was born in New York City, and graduated from Gilman School in Baltimore, Maryland before attending Johns Hopkins University where he obtained a Bachelor of Arts in Psychology in 1985.
Ranum helped design and implement Digital Equipment Corporation's Secure External Access Link (SEAL) (later AltaVista firewall), regarded as the first commercial bastion host firewall, in 1990. He left DEC to work for Trusted Information Systems (TIS) as chief scientist and development manager for Internet security products. It was at TIS that Ranum became responsible for the whitehouse.gov Internet email site. Once charged with that responsibility, Ranum advocated that the whitehouse.com domain be registered as well. Despite his advice, it was not registered by the government, but was later registered for an adult entertainment provider. At TIS, he developed the TIS Internet Firewall Toolkit (fwtk) under a grant from DARPA. After TIS, he worked for V-One as chief scientist, and was extensively involved in that company's IPO. Three months after that IPO, Ranum formed his own company, Network Flight Recorder (NFR), and served as CEO for three years before stepping into a CTO role. Ranum later left NFR to consult for TruSecure, before joining Tenable Network Security as CSO.
Ranum has spoken to USENIX audiences at LISA 1997, 1999 (tutorial) LISA 2000 (keynote), 2002, and 2003 (tutorial). He spoke out against full disclosure at the Black Hat Security Briefings in 2000. More recently, Ranum has spoken at Interop in 2005 and 2007, CanSecWest in 2010, and Secure360 in 2011.
- TISC "clue" award, 2000.
- Inducted into the ISSA hall of fame, 2000 or 2001.
- Techno-Security Professional of the Year, 2005.
- Ranum, Marcus (1999-11-01). "Selling Security: Fear Leads to . . . the Dark Side". ;Login: Special Issue on Security. USENIX.
- Ranum, Marcus (2000-02-01). "The Network Police Blotter". ;Login: Vol 25., No. 1. USENIX.
- Ranum, Marcus (2000-04-01). "The Network Police Blotter". ;Login: Vol 25., No. 2. USENIX.
- Ranum, Marcus (2000-06-01). "The Network Police Blotter". ;Login: Vol 25., No. 3. USENIX.
- Ranum, Marcus (2000-10-01). "The Network Police Blotter". ;Login: Vol 25., No. 6. USENIX.
- Ranum, Marcus (2000-12-01). "The Network Police Blotter". ;Login: Vol 25., No. 8. USENIX.
- The Myth of Homeland Security ISBN 978-0-471-45879-1
- Host Intrusion Monitoring Using Osiris and Samhain with Brian Wotring and Bruce Potter. ISBN 978-1-59749-018-4
- Web Security Sourcebook with Aviel D. Rubin and Dan Geer. ISBN 978-0-471-18148-4
Currently, Ranum lives in Morrisdale, Pennsylvania. His hobbies include photography and firearms. He maintains an active stock photography account on DeviantArt, and he wrote an essay for Oleg Volk's pro-firearms site. www.a-human-right.com. Marcus Ranum was also interviewed by digital artist Brandon Pence for the NWFLAA which can be read in 2 parts: Part 1 and Part 2.
- "Who's Who in Infosec: Marcus Ranum". Information Security Magazine. 2003-06-17. Retrieved 2008-06-07.
- ZDNet - Security Q&A: the father of firewall
- "Comments: Interview with Marcus Ranum". 2005-06-28. Retrieved 2008-06-07.[dead link]
- Avolio, Frederic (1999-06-01). "Firewalls and Internet Security, the Second Hundred (Internet) Years". The Internet Protocol Journal. Cisco Systems. Retrieved 2008-06-07.
- Miller, Sandra Kay (2006-12-01). "A Contrarian's Viewpoint". Retrieved 2008-06-11.
- "December letter from a White House counsel to the operator of the "whitehouse.com" adult site". CNet. 1997-12-08. Retrieved 2008-06-11.
- "NFR Intrusion Detection Appliance Version 4.0 Released". Business Wire. 1999-10-14. Retrieved 2008-06-08.
- "Cisco and Sourcefire Achieve Enterprise-Level NIDS Certification from ICSA Labs". Business Wire. 2003-04-21. Retrieved 2008-06-08.
- "Marcus J. Ranum Joins Tenable Network Security as Chief Security Officer". Business Wire. 2004-10-04. Retrieved 2008-06-08.
- "NFR Security Adds Leading Security Industry Experts to Technology Advisory Board". Business Wireaccessdate=2008-06-08. 2004-02-02.
- "Protego Networks 2.5; Industry Icon Marcus Ranum Joins Protego Networks' Advisory Board". Business Wire. 2004-06-01. Retrieved 2008-06-08.
- "Technical Advisory Board". Fortify. Retrieved 2008-06-08.
- "USENIX Summaries: Eleventh Systems Administration Conference (LISA '97)". USENIX. Retrieved 2008-06-07.
- "Tutorial Instructors". USENIX. Retrieved 2008-06-07.
- "USENIX LISA-NT 2000". USENIX. Retrieved 2008-06-07.
- "2002 USENIX Technical Conference". USENIX. Retrieved 2008-06-07.
- "USENIX — Security '03 Tutorials". USENIX. Retrieved 2008-06-07.
- Lemos, Robert (2000-10-09). "CERT to disclose software flaws". ZDNet.co.uk. Retrieved 2008-06-07.
- Avolio, Fred (2005-05-23). "The Same Old Drum Beat". Retrieved 2008-06-08.
- "Tenable CISO Workshops during Interop 2007 New York Now Open for Registration". Retrieved 2008-06-08.
- "Falling on the sword of 'Need to Publish'". Secure360. Retrieved 2011-05-12.
- "SANS Institute — Certified Instructors". Retrieved 2008-06-07.
- 5,606,668, 5,623,601, 5,826,029, 5,870,562, 6,173,407, 6,601,233, 6,704,873, 6,834,310, 6,950,868, 7,016,951, 7,100,195, 7,224,778, 7,290,288, 7,313,812, and 7,360,244
- "TISC to honor Marcus Ranum, Internet security pioneer". Business Wire. 2000-04-17. Retrieved 2008-06-07.
- "Award Honorees". ISSA. Retrieved 2008-06-07.
- "NFR Security Founder Selected for International Security Association Hall of Fame". Business Wire. 2006-06-12. Retrieved 2008-06-08.
- "Tenable Network Security Executive Named 2005 Techno-Security Professional of the Year". Business Wire. 2005-06-07. Retrieved 2008-06-07.
- "Articles by Author: Bruce Schneier and Marcus Ranum". Information Security Magazine. Retrieved 2008-06-07.
- "SANS NewsBites". Retrieved 2008-06-07.
- Ranum, Marcus. "The Aesthetics of the Gun Debate". Retrieved 2008-06-07.
- Marcus Ranum's personal website
- Ranum interview with RationalSecurity (2007-06-25)
- Security Solutions profile of Ranum (2006-12-01)
- Ranum interview with IEEE Security and Privacy magazine (2006-09-01)
- Ranum interview with SecurityFocus (2005-06-21)
- Ranum's DeviantArt website (stock)
- Ranum's DeviantArt website (portfolio)
- DojoSec Lecture — March 2009 — Ranum's discussing the failure of the notion of Cyber-warfare