My
consulting experience is fairly varied. I have a background as a
technical deal screener for M&A work, and have carried out contracts
that involve "one off" penetration testing (that is, penetration testing
of specific systems, rather than simply penetrating a network). In
addition, some of my work involves carrying out design review from a
security perspective.
In the last few years, the bulk of my consulting work has been as an Expert witness. I have testified before, as well as been deposed. Over the last twenty years, I have amassed a huge collection of archival material in the computer security and anti-malware space, including hard-to-find conference proceedings and actual computer software. As such, I am well-positioned to act as an expert in security/anti-malware related IP issues.
As a consultant, I am not content with selling my services to a client the first time, but with establishing a long term relationship that will benefit both parties. Getting one project with a customer is easy; getting ten is much harder
I have tremendous flexibility in
how I can engage with a client. Contracting vehicles have included
grants to the University, direct contracting, or working through the
University's consulting arm. Typically, the choice of vehicle depends on
the nature of the engagement and the needs of the client.
My rates vary depending on the job; I have done pro bono work in the past, and am open to limited time projects that are for the general good. For expert witness work, I bill at a flat hourly rate; for other types of consulting, work is typically billed hourly, or for short term contracts, by the day or half-day. To inquire about retaining me on a project, please contact me by email.