### Scott Campbell

#### Unix/Security Engineer

**510-652-1470**

**[Skills Overview]{.underline}**: 9 years TCP/IP Networking, Unix
Administration and Network Security.

# Software 

+-----------------+----------------------------------------------------+
| ##              | BRO IDS; SunScreen Firewall; Snort IDS; SecureID   |
| Security Tools: | Server; TIS Toolkit; Tripwire; IPFilter; TACACS+;  |
|                 | TCP Wrappers; OpenSSL; ModSSL; OpenSSH; pcap;      |
|                 | Nmap; Nessus                                       |
+-----------------+----------------------------------------------------+
| **Operating     | Solaris 8.0; HPUX 10.2, 11.0; Red Hat ; FreeBSD;   |
| Systems:**      | Cisco IOS                                          |
+-----------------+----------------------------------------------------+
| **Language:**   | C; C++; Java; Shell scripting; awk, sed, Perl      |
+-----------------+----------------------------------------------------+
| **Protocol:**   | TCP/IP, UDP, IPSec, SKIP, SSL, SMB, NIS, LDAP, DNS |
+-----------------+----------------------------------------------------+
| **M             | Sun Cluster 2.2; Oracle Parallel Server; Veritas   |
| iscellaneous:** | Volume Manager/File System; DNS; ATG Dynamo; Disk  |
|                 | Suite; iPlanet Directory Server (LDAP); Jumpstart; |
|                 | Apache; gnuplot                                    |
+-----------------+----------------------------------------------------+

# Hardware 

+-----+----------------------------------------------------------------+
| #   | Ultra Enterprise 4500/5500; Netra T1, X1 servers; Ultra        |
| # S | Workstations; Fibre Channel Storage Area Networks; Crypto      |
| un: | accelerator card                                               |
+-----+----------------------------------------------------------------+
| ##  | 2500-7500 model routers; Cat 29XX, 3508, 3548 and 5000         |
| Cis | ethernet switches;(Altiga) VPN Concentrator; (Arrowpoint)      |
| co: | Content Switch, Local Director                                 |
+-----+----------------------------------------------------------------+
| ##  | HP9000 series, including T520 and K420, EMC 3500, Fore         |
| Oth | ASX-1000 and ES-3810 ATM and ATM to ethernet switches          |
| er: |                                                                |
+-----+----------------------------------------------------------------+

**[Employment]{.underline}**

**Lawrence Berkeley National Laboratory**

**National Energy Research Scientific Computing (NERSC)**

**Network Security Analyst, Networking and Security Group (NAST)**

**Employed April 2001 - Current**

NERSC operates all aspects of networking and security for the largest
non-classified supercomputer in the United States. Duties include
operational security monitoring, incident response, providing consulting
for other working groups, and developing new security applications and
methodology for the center. Specific duties and accomplishments include:

-   Design and develop security infrastructure for distributed computing
    systems using certificate/ssl based authentication.

-   Development and implementation of network security applications and
    test tools, including port scanning, host compromise, network
    anomaly detection and ad-hoc modifications/reporting for production
    security systems.

-   Development of network traffic profiling tool and database back end.

-   Providing incident response and cyber security advice and education
    for the NERSC center.

-   Research and development for high speed intrusion detection systems
    (\>OC-48).

-   Network and Security research as seems appropriate.

-   Interaction with LBNL (and other DOE) security personal for large
    scale problem analysis and solution.

**Oakley Networks**

**Network Security Consultant**

Oakley Networks creates security solutions for corporate and
governmental clients. Specific duties include the following:

-   Design and implementation of Solaris Jumpstart infrastructure for
    highly secured network appliance. Design included all operating
    system hardening, built in autoconfiguring firewall, auditing and
    application engine.

-   Research for intrusion evasion within the Linux environment.

**McGraw-Hill Publishing**

**Technical Editor**

**Employed July 2003 -- November 2003**

Was the technical editor for a book \"Intrusion Detection & Prevention\"
which is due out early next year. Duties include checking all chapters
for factual consistancy, and making sure that all examples in the book
actuall work as shown.

**Assentive Solutions, San Francisco**

**Senior Unix Security Engineer**

##  Employed July 1999 - March 2001

Assentive Solutions is an ASP providing solutions for secure data
sharing and management for manufacturing and supply chain clients.
Duties include overall systems/network design, prototype, security and
implementation. Development of systems and security applications as
needed. Analysis of complex problems and team mentoring.

-   Analysis, design, and implementation of companies network of
    routers, firewalls and intrusion detection systems. This includes
    analysis for all above data.

-   Design and develop hardware based security device for deployment on
    client LANs. Device includes remote operating system, process and
    network traffic analysis and monitoring.

-   Develop applications including:

    -   Application proxy using cryptographic authentication (Java).

    -   Snort IDS plugin for DNS protocol checking and state management
        (C).

    -   Firewall log converter to change proprietary format to standard
        pcap (C).

    -   Prototype encryption/decryption file streamer (C).

-   Tools for firewall log analysis and representation.

-   Detailed analysis and troubleshooting for most problems involving
    networking and complex systems interaction.

-   General research and development for networking, security and
    systems.

-   Designer and principle developer of highly available production
    environment integrating web servers, load balancers, application
    servers, database servers, firewalls and network services.

**Digital Courier, San Francisco**

**Senior Systems Administrator**

**Employed March 1998 - July 1999**

Digital courier provided weather data and credit card transaction
processing for such companies as Netscape and Excite. Duties included
lead systems and network design engineer. Manage systems administrators.
Develop solutions for changing business models using limited resources.

-   Specification, design, and building fault tolerant application, web
    and database servers for services to clients such as Netscape and
    Excite.

-   Direct supervision of four Systems Administrators.

-   Designed and rebuilt the network and security infrastructure for the
    data center and connected facilities. This included firewalls,
    intrusion detection systems and an all-over hardening of all
    production/development hosts and routers.

-   Handle all major systems and performance tuning, configuration,
    monitoring, upgrading and hardware diagnostics.

**Whittman-Hart Consulting, San Francisco**

**Network Administrator**

##  Employed July 1997 - March 1998

-   Design, implement and run new and existing computer systems.
    Organize and consolidate servers into a centralized location.

-   Build and maintain a web based tool for resume searching and marking

-   Redesign IP networking, mail services, and infrastructure placement.

**San Francisco State University**

##  Computing Services

**Network Analyst**

**Employed February 1994 - June 1997**

Provide basic networking and systems administration for campus
facilities.

-   The maintenance, configuration and refurbishment of campus wide
    administrative network. Duties include account and resource
    management, routing, backup and restoration of files, and system
    maintenance and repair.

-   Help redesign and rebuild whole building infrastructure for Campus
    Library, moving from 10Base2 to switched 100BaseFX/100BaseT.

-   Install, configure and troubleshoot cisco routers and other
    networking equipment in campus infrastructure of approximately 25
    routers.

# Education

San Francisco State University

Bachelors Degree Physics

Classes in:

Unix System Programming in C - City College San Francisco, Spring 1999

Unix Systems Administration - City College San Francisco, Spring 1997

Advanced Cisco Router Configuration - American Research Group, April
1997

Introduction to Oracle - Oracle Training, June 1996

References available upon request.