Troy Hunt

Troy Hunt
Hunt in 2010
Born Troy Adam Hunt[1]
Residence Gold Coast, Queensland, Australia
Citizenship Australia
Known for

Have I Been Pwned?

Courses on Pluralsight
Spouse(s) Kylie Hunt
Awards See Awards and achievements
Website troyhunt.com

Troy Hunt is an Australian web security expert known for public education and outreach on security topics. He created Have I Been Pwned?, a data breach search website that allows non-technical users to see if their personal information has been compromised. He has also authored several popular security-related courses on Pluralsight, and regularly presents keynotes and workshops on security topics.[2] He also is the creator of ASafaWeb, a tool that performs automated security analysis on ASP.NET websites. Starting in 2011, Hunt was named a Microsoft Most Valuable Professional (MVP) in Developer Security,[3] and was recognized as a Microsoft MVP of the Year in 2011.[4] He was also named a Microsoft Regional Director in 2016.[5]

Data breaches

As part of his work administering the Have I Been Pwned? (HIBP) website, Hunt is frequently involved in the publication of data breaches, and is often cited by journalists as a data breach expert.[6]

As of June 2018, HIBP contains more than 5 billion compromised user accounts. Governments of Australia, United Kingdom[7] and Spain use the service to monitor their official domains. Popular services, such as 1Password,[8] Eve Online, Okta[9] or Kogan have integrated HIBP into their account verification process.

In August 2015, following the Ashley Madison data breach, Hunt received many emails from Ashley Madison members asking for help. He criticized the company for doing a poor job informing its userbase.[10]

In February 2016, children's toy maker VTech, who had suffered a major data breach months earlier, updated its terms of service to absolve itself of wrongdoing in the event of future breaches. Hunt, who had added the data from VTech's breach to the databases of Have I Been Pwned?, published a blog post harshly criticizing VTech's new policy, calling it "grossly negligent."[11] He later removed the VTech breach from the database, citing that only two people besides himself had access to the data and wishing to reduce the chance of its spread.[12]

In February 2017, Hunt published details of vulnerabilities in the Internet-connected children's toy, CloudPets, which had allowed access to 820,000 user records as well as 2.2 million audio files belonging to those users.[13][14]

In November 2017, Hunt testified before the United States House Committee on Energy and Commerce about the impact of data breaches.[15]

Also in November 2017, Hunt joined Report URI, project launched in 2015 by Scott Helme, which allows real time monitoring of CSP and HPKP violations on a website. He will be bringing funding and his expertise to the project.[16][17]

Education

Hunt speaking about application security at OWASP's AppSec EU conference in 2015.

Hunt is known for his efforts in security education for computer and IT professionals. He has created several dozen courses on Pluralsight, an online education and training website for computer and creative professionals. He is one of the primary course authors for Pluralsight's Ethical Hacking path, a collection of courses designed for the Certified Ethical Hacker certification.[2]

Additionally, Hunt works in education by speaking at technology conferences and running workshops. His primary workshop, titled Hack Yourself First, aims to teach software developers with little security background how to defend their applications by looking at them from an attacker's perspective.[18][19]

Awards and achievements

  • 2011–present : Microsoft MVP for Developer Security [20]
  • 2016–present : Microsoft Regional Director [21]
  • 2018 : AusCERT's Individual Excellence in Information Security award [22]
  • 2018 : Grand Prix Prize for the Best Overall Security Blog, The European Security Blogger Award[23]

References

  1. ↑ https://www.troyhunt.com/content/images/2016/12/Business-name-registered-under-my-name.png
  2. 1 2 "Troy Hunt - Ethical Hacking Author - Pluralsight". Pluralsight. Retrieved 20 September 2016.
  3. ↑ "Most Valuable Professional: Troy Hunt". Microsoft. Retrieved 21 March 2016.
  4. ↑ Microsoft MVP Award Program Blog (7 March 2012). "Congratulations MVPs of the Year—Two for the Third Time!". Microsoft. Retrieved 21 March 2016.
  5. ↑ Hunt, Troy (3 March 2016). "Microsoft Regional Director". Troy Hunt. Retrieved 10 January 2017.
  6. ↑ Coz, Joseph (10 March 2016). "The Rise of 'Have I Been Pwned?', an Invaluable Resource in the Hacking Age". Vice. Retrieved 18 March 2016.
  7. ↑ "The Government Uses 'Have I Been Pwned' to Keep Tabs on Data Breaches". Retrieved June 1, 2018.
  8. ↑ "1Password now lets you see if your password has been leaked". Retrieved June 1, 2018.
  9. ↑ "Okta's PassProtect checks your passwords with 'Have I Been Pwned'". Retrieved June 1, 2018.
  10. ↑ Price, Rob (24 August 2015). "Ashley Madison not communicating with customers: Troy Hunt". Business Insider. Retrieved 21 March 2016.
  11. ↑ Murdock, Jason (9 February 2016). "VTech hack: Microsoft security researcher Troy Hunt slams 'grossly negligent' security approach". International Business Times. Retrieved 21 March 2016.
  12. ↑ Hunt, Troy (8 April 2016). "Have I been pwned, opting out, VTech and general privacy things". Retrieved 28 June 2016.
  13. ↑ "Children's messages in CloudPets data breach". BBC News. 28 February 2017. Retrieved 6 August 2017.
  14. ↑ Hern, Alex (28 February 2017). "CloudPets stuffed toys leak details of half a million users". The Guardian. ISSN 0261-3077. Retrieved 6 August 2017.
  15. ↑ "IDENTITY VERIFICATION IN A POST-BREACH WORLD". Retrieved June 1, 2018.
  16. ↑ "I'm Joining Report URI!". Retrieved July 25, 2018.
  17. ↑ "The next steps for Report URI". Retrieved July 25, 2018.
  18. ↑ Computerworld staff (August 5, 2015). "FREE COURSE: Hack yourself first (before the bad guys do)". Computerworld. IDG Communications. Retrieved April 4, 2018.
  19. ↑ Hunt, Troy. "Troy Hunt: Workshops". Troy Hunt. Retrieved April 4, 2018.
  20. ↑ "Troy Hunt". Retrieved June 1, 2018.
  21. ↑ "Troy Hunt". Retrieved June 1, 2018.
  22. ↑ "AusCERT 2018 - Awards". Retrieved June 1, 2018.
  23. ↑ "#Infosec18: European Blogger Awards Winners Announced". Retrieved June 11, 2018.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.