As co-chair of the Distributed Management Task Force’s Cloud Auditing Data Federation specification working group, I led a team that developed a comprehensive standard for how cloud services could communicate events, alarms, and status with each other.

In June of 2014 I presented at an ISE Central event on the topic of Advanced Persistent Threats. You can download the deck from within the Schedule of Events (my timeslot was June 11, 11:30 AM, right near the top) but I don’t think there’s a recording of the presentation.

In May of 2011, some of my standards work on normalizing how systems generate security events and alarms was adopted into MITRE’s Common Event Expression Architecture Overview.