About
I’ve spent decades as a security architect that focuses on helping secure software, data and infrastructure. You might say I’ve been on and led Blue and Red Teams well before it was even a thing. I’ve built and sold several software companies focused on securing the ever changing landscape of IT, both on-premises and in the cloud. I’ve been the founder and CTO of small startups with a handful of developers all the way to managing teams with hundreds of developers from all around the world.
Through all of that, what drives me is making sure information and information resources are kept secure. No matter what the size of the organization. Nor who is ultimately responsible for managing it. As both a Microsoft Regional Director and a Microsoft Security MVP for over 18 years, I spend a great deal of time on security (de)engineering in the cloud.
Lately I’ve challenged myself to be more on Purple team, shifting more on my offensive tradecraft to help developers and IT administrators see the demonstrable impact of exploitation on vulnerabilities in their work.
As the world of hybrid computing shifts more IT resources away from the office, its clear more effort is needed to educate both administrators and developers on how to build safe, decoupled systems in the cloud. I help people find and fix vulnerabilities in their apps and architecture before their adversaries do.
It’s time we put thoughtfulness into the attitudes around development and administration in the cloud and I’m up for the challenge. Who else is walking this path? Let's connect.
Articles by Dana
-
Why security research in the MSP space is abysmal, and how Huntress is going to have a hard uphill battle
Why security research in the MSP space is abysmal, and how Huntress is going to have a hard uphill battle
By Dana Epp
-
Today 30% of all Windows systems became less secure. When will we learn?
Today 30% of all Windows systems became less secure. When will we learn?
By Dana Epp
Activity
-
APIsec University is 2 year old today!!! What better way to celebrate than with a song. And some giveaways. For the rest of the week we're cutting…
APIsec University is 2 year old today!!! What better way to celebrate than with a song. And some giveaways. For the rest of the week we're cutting…
Liked by Dana Epp
-
We just realized that OCEANSIDE A is a frikkin huge room! Yall better get to our talk on Thursday when we drop our super sick tool certainly and…
We just realized that OCEANSIDE A is a frikkin huge room! Yall better get to our talk on Thursday when we drop our super sick tool certainly and…
Liked by Dana Epp
-
Let's look at Tracfone's $16 million settlement with the FCC to understand why API security testing matters. #apisecurity #apihacking
Let's look at Tracfone's $16 million settlement with the FCC to understand why API security testing matters. #apisecurity #apihacking
Shared by Dana Epp
Experience
-
-
-
-
-
-
-
-
-
-
-
Licenses & Certifications
Volunteer Experience
-
Director
OWASP Vancouver
- Present 3 years 8 months
Science and Technology
I sit on the Board of Directors for OWASP Vancouver to help promote application security in Western Canada.
Honors & Awards
-
Microsoft Developer Security MVP
Microsoft MVP Award Program
I have been recognized with the 2022 Microsoft MVP Award for my outstanding contributions to the technical community in application security. This is my 17th year winning this award.
-
Microsoft Regional Director
Microsoft Regional Director Program
I have been recognized as a Microsoft Regional Director for my outstanding contributions to the business community who leverage public cloud computing using Microsoft Azure. This is the 8th year that I received this distinction.
Languages
-
English
-
Recommendations received
9 people have recommended Dana
Join now to viewMore activity by Dana
-
Let me show you how to map MITRE CAPEC attack patterns to STRIDE threat model categories and improve your approach to security testing.
Let me show you how to map MITRE CAPEC attack patterns to STRIDE threat model categories and improve your approach to security testing.
Shared by Dana Epp
-
🔍 Discovering hidden API parameters can reveal vulnerabilities that developers didn't anticipate. Tools like Burp Suite's Param Miner automate…
🔍 Discovering hidden API parameters can reveal vulnerabilities that developers didn't anticipate. Tools like Burp Suite's Param Miner automate…
Liked by Dana Epp
-
Covert Data Exfiltration via JSON in an #API via Dana Epp https://lnkd.in/eM-vydTG
Covert Data Exfiltration via JSON in an #API via Dana Epp https://lnkd.in/eM-vydTG
Liked by Dana Epp
-
This is a big deal in the API security world. The FCC has just fined telco carrier, Tracfone, $16M for a multi-year API breach. Tracfone is also…
This is a big deal in the API security world. The FCC has just fined telco carrier, Tracfone, $16M for a multi-year API breach. Tracfone is also…
Liked by Dana Epp
-
Let me show you how to conduct covert data exfiltration within JSON payloads of an API response. #apihacking #apisecurity
Let me show you how to conduct covert data exfiltration within JSON payloads of an API response. #apihacking #apisecurity
Shared by Dana Epp
Other similar profiles
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More