Erik Nørgaard

Education:

• M.Sc. Mathematics, University of Copenhagen, December 2001. I Graduated with a thesis in algebraic topology titled Vector Fields on the Sphere. As part of my master studies I have written two minor papers on the Einstein equation and compact Lie groups.

• B.Sc. Physics, University of Copenhagen, June 1998. I wrote a bachelor project on spherical harmonics, the Dirichlet problem in three dimensions.

Experience:

• Consultant, Forbes Sinclair, 1.2008-3.2008.

  I have been involved in a European project, MASTER, working with risk analisys and security analisys for a use case.

• Consultant, Safelayer, 6.2006-12.2007.

  I worked as technical consultant at Safelayer providing technical support for the integration of Safelayer products. Also I have developed Java applets for integration with the products.

• Senior software developer, Atos Origin, 12.2004-5.2006.

  I have been involved in European projects under the European Community FP6 program developing core security components. I have implemented biometric authentication and digital signatures on Java Card to be integrated on mobile devices supporting PKI. Other projects have been investigation and development of distributed systems to detect and contain security incidents.

• Consultant, freelance, 09.2003-12.2004.

  I have been working on a set of administrative utilities for Linux and FreeBSD in Perl which integrates databases in system administration. Also, I have worked on various security projects and PKI.

• Programmer, Forbrugerinformationen, 01.2002-08.2003.

  I maintained and developed the CMS, PubliCMS (LAMP platform). Also, I improved the server setup, in particular I improved security, installed firewall and name server and prepared the setup for planned expansion.

• Consultant, freelance, 12.2002-01.2003.

  I worked as technical consultant for a client, for which I developed a security solution consisting of firewall based on OpenBSD 3.2 with IP-Filter and anti-spoofing daemon blocking traffic from clients not known to the network.

• Security consultant, UNI-C, 04.2001-01.2002.

  The security department decided to develop a security solution based entirely on Open Source products, OpenBSD with IP-Filter. For this project I developed an system in Perl for maintaining IDS rules for Snort.

• Network administrator, Department of Mathematics, University of Copenhagen, 09.2000-01.2001.

  I had the responsibility of running and maintaining the institutes servers, mainly Digital Unix, common system administration tasks, user support and investing in new hardware.

• Network administrator, Studentergaarden, 1.1998-2.2002 (voluntary work).

  I have developed administrative tools in Perl, configured firewall (IP-chains) and installed DHCP, DNS, web (Apache), mail (Postfix) and database (MySQL) servers.

Technical curriculum:

• Systems: A variety of *NIX's, in particular FreeBSD 4.x, 6.x and 7.x, OpenBSD 3.2, RedHat Linux 6.0-8.0, but also Digital Unix and OSX. I have good experience of system administrative tasks, remote administration and experience planning and completing migration of servers.

• Servers:

  • Web: Apache v. 1.3, 2.0, 2,2 with SSL.
  • SQL: MySQL v. 3.23 - 4.1, PostgreSQL 8.x. I have good knowledge of MySQL and PostgreSQL, which I have used as database back-end for dynamic web pages and for administrative tasks.
  • DNS: BIND v. 9.x, 4.9 and 8.x. I currently run and maintain DNS servers using BIND v. 9.4 on FreeBSD. I have previously used BIND v. 8.2 on Linux and BIND 4.9 on OpenBSD.
  • DHCP: ISC-DHCP v. 2.0 and 3.0. I have migrated a network with more than 100 clients from using static IPs to a setup using DHCP.
  • Mail: Postfix v. 2.x, QMail v. 1.03, Cyrus-IMAP 2.2/2.3. I have good knowledge of setting up Postfix as a replacement for Sendmail. I have migrated from Unix mbox to Cyrus-IMAP.
  • Other: OpenSSH (v. 2.3-4.5), NTP (v. 4.2), CVS (v. 1.10), NFS, Samba (v. 2.0/2.2), INN (v. 2.2/2.4), LPRng (v. 3.8), pure-ftpd (v. 1.0), vsftpd (v. 1.1, 1.2), Cyrus-SASL (v 2.x), OpenLDAP (v. 2.3).

• Security:

  • Security standards: Knowledge of international standard of information security management, ISO-17799:2005, risk management BS 7799-3 and business continuity, BS 25999-1:2000. Knowledge of the MAGERIT methodology.
  • Legislation: Knowledge of EU legislation regarding privacy and data protection, 95/46/EC and 2002/58/EC, digital signatures, 1999/93/EC, e-Commerce, 2000/31/EC, and data retention, 2006/24/EC.
  • PKI: Experience with TrustedX and KeyOne (Safelayer) and OpenSSL.
  • Firewalls: Design and implementation of firewalls based on Packet Filter on FreeBSD 6.x/7.x, IP-Filter v. 3.4 on OpenBSD 3.x and FreeBSD 4.x. Also, experience with IP-chains on RedHat 7.0. I have developed sets of utilities for anti-spoofing, administrating firewall rule sets and traffic accounting.
  • IDS: I have good knowledge of Snort v. 1.7 - 2.3 and developed a system for managing databases of Snort rule signatures as well as customising rule sets to specific networks and systems in order to reduce false alarms.
  • Anti-spoofing: Advanced anti-spoofing on local networks to prevent drive-by hacking. I have developed a program which listens for ARP packets and use these to identify the client. Unknown clients are blocked in the firewall.
  • Security utilities: I have good knowledge of a wide range of security and encryption utilities such as nmap, snort, tcpdump, gnupg and OpenSSL.

• Programming:

  • Perl: Advanced programming in Perl (5.6/5.8), I have made administrative scripts and modules in Perl as well as security and other utilities.
  • Java: Programming for Java Card 2.1/2.2, I have created applets for Java based smart cards. Development of web applets for Java 6.
  • C/C++: Basic knowledge.
  • PHP: Development of web based administrative systems and a wide range of dynamical web pages with integrated use of MySQL databases.
  • Pascal: I have made programs for real-time computing in connection with physical experiments and measurements. Also I have implemented mathematical models to compare against experimental results.
  • Shell: Control scripts for various system administrative tasks.
  • CVS: For all larger projects, I develop under CVS control.
  • Markup: I have knowledge of the markup/macro languages HTML/XHTML/CSS and XML as well as LaTeX.

• Databases:

  • MySQL: I have used MySQL for a wide range of tasks from creating dynamical web pages to system administration.
  • PostgreSQL: I have migrated from MySQL to PostgreSQL.
  • BerkeleyDB: I have used BerkeleyDB as for distributing non related data to independent servers.

Languages:

• Danish: Native.
• English: Fluent writing/speech.
• Spanish: Good writing/speech.
• Italian: Basic.
• German: Basic.

Other:

• X.509v3 Certificate
• Personal web site