Ellensburg, Washington, United States
I recently retired from being a cyber-security consultant and I taught data communications and cybersecurity at Central Washington University. I am a systems person who has substantial technical depth. I have worked as both a network architect and as an information assurance (IA; i.e., cybersecurity) architect together with virtually every constituent part of those domains including protocol design and development. I have led groups of hundreds of people. I used to be periodically tasked to rescue “at risk” programs, projects, or high-profile tasks. I often represented my employers to external entities (customers, standards bodies, consortia, governments). I have worked in high assurance computing. My primary area of research is in securing safety systems, network security (e.g., policy-based routing, digital provenance), integrity assurance, and identity and access management. I have 3 patents, 34 publications, 300+ technical papers, and have been a conference speaker at 14+ national or international conferences. I have been a participant in international standards committees (IETF, ISO, others). Core Skills: Information Assurance and Cyber Security defense designs, Securing Safety System designs, Data Communications Protocols, Network Architecture Design, Systems, Systems Analysis, Electronic Commerce, Network Centric Operations, Application Integration (middleware). CISSP. http://www.cwu.edu/it-management/eric-fleischman
Cyber-security consulting for the MicroSystems Automation Group (MSAG). Working on a contract to create a security risk analysis process for the US Federal Aviation Administration (FAA) that integrates with existing civil aviation safety processes, procedures, and laws. The immediate goal of this process is to create security analysis data that will assist the FAA to define policy to safely secure commercial aircraft. This contract ends in mid-June. I am available to do other cyber-security consulting work after that.
2011-2014: Technical Fellow in Boeing’s IT Information Security organization. Made security architectures and designs to defend Boeing against cyber attack. Also performed Information Assurance (IA; security) analysis; project/program security consulting; and security reviews of programs.Technical Integrator for Boeing’s Security Information and Event Management System (SIEM). Collaborated in multiple security pilots of a US government entity. Worked issues related to device identity and integrity; identity management and federation; and compound claims and distributed access management. Helped found the Cybersecurity Research Alliance (CSRA). Represented Boeing to several national and international cyber security communities (e.g., TSCP, TCG, various US government). 1998-2011: Applied research in data communications and cyber security, primarily researching the overlap between data communications and security. Did program designs and was the technical lead in the data communications and/or security/IA domains for 12+ major military programs. Worked all aspects of security with a particular emphasis on communications security (COMSEC). Also did security consulting to Boeing Commercial Airplanes. Also volunteered to rescue 5+ failing projects or programs. Researched issues and mechanisms to secure safety systems (e.g., commercial airplanes, factories, power grids, etc.). In 2009 was a co-chair of the US Government’s (OSTP and NITRD) National Cyber Leap Year Summit, providing leadership in digital provenance. In 2006 I was the Principal Investigator for a contract with the Federal Aviation Administration (FAA) to recommend extensions to FAA certification processes and procedures to address onboard security and safety issues arising from emerging highly networked airplane environments. This included writing two books found on the FAA’s website as well as speaking at FAA conferences.
Microsoft's first electronic commerce architect. Designed and built Microsoft's secure web environment which supported Microsoft’s Electronic Commerce relationships with Microsoft's ~80K business partners (e.g., OEMs, ARs, DSPs, SSBs, etc) and conveyed a significant percentage of Microsoft’s total corporate revenue. Also was a program manager in building Microsoft's NetShow (Media Server) product (i.e., distributed multimedia presentation/broadcast system). Responsible for the Advanced Streaming Format (ASFv1 and ASF) multimedia file format, which allegedly was a cornerstone of Microsoft’s corporate multimedia strategy. Led the definition of ASF via creating and leading an international consortia involving more than 180 companies and institutions within the context of severe contractual constraints. Secondary responsibilities included representing NetShow’s interests at the IETF and ISO (MPEG-4) and indirectly at the SMPTE and the EBU standards bodies