Application Security for Every Scale
my.defence
Cloud computing was not designed for security, although organizations such as Cloud Security Alliance (CSA) and Open Web Application Security Project (OWASP) are making great strides in helping the industry solve the myriad security problems confronting cloud computing. The benchmark guidelines established by the CSA in the document, Guidance for Critical Areas of Focus in Cloud Computing, is a great first step. This white paper is intended to pick up where the CSA guide left off in terms of defining what a distributed web application firewall (dWAF) should look like in order to meet the standards set within the CSA document.
Georg Hess, PhD, CEO and cofounder of art of defence. In charge of sales, marketing and financial affairs.
Post-graduate with a doctor's degree in physics and mathematics, in 1996 he became a cofounder and the director of a leading IT service company with focus on web-based IT projects. Due to an increase in capital, in 1999 the company was able to change the business-model into the production of web-based software products.
Even though the company was also affected by the dotcom crisis, Hess was able to sell the company to a Fortune 500 company in the United States in 2003 successfully. He remained in charge of marketing and distribution until the founding of the company art of defence Inc.
Alexander Meisel, CTO and cofounder of art of defence. In charge of product development, professional services and support.
Already in his thesis in CIS he was engaged in avoiding and reconstructing denial-of-service attacks. He worked for a Swiss IT service provider as a Web security expert; later he joined LINX (London Internet Exchange), European's largest Internet junction, where he supervised members in questions of network safety.
After working for three years as a senior consultant in charge of design and implementation of large Web farms, including security audits with a leading producer of Web servers, Meisel switched to the same Fortune 500 company as Hess, where he was the main project manager for Web application solutions in the SAP area.
Richard Wieneke, Head of Sales
He has many years of experience in the area of Web security. Before he joined art of defence Inc., he was in charge of IT services for the business section of a service and consulting company in Regensburg (Germany). His responsibility was to advise medium size companies during the implementation of security solutions; he also supervised the realization of these projects.
Prior to this assignment, Wieneke worked for a software company in Munich (Germany) where he was in charge of marketing for office automation, project management and of the recruitment and support of large customer projects. Another one of his responsibilities was to establish a nationwide distribution system through sales representatives.
In April 1992, Wieneke founded the company transgraphikon where, among other things, he was in charge of customer support for electronic projects by the local branch of the German telephone company Deutsche Telekom, the division for commercial vehicles of MAN in Munich, as well as for Audi AG. Wieneke started his career in 1988 with the development of the computer business WOC (World of Computers).
Mirko Dziadzka, Chief Software Architect
Dziadzka has been working in the IT field since 1993. His many years of experience in product development and IT security contribute to the high standards in functionality and security that classify the products of art of defence Inc.
Dziadzka worked for several years as a research associate and assistant professor at the University of Applied Sciences Furtwangen where he was working with Meisel. He has published several books and articles about Linux Kernel and IT security.
He developed critical Web applications (eBanking, credit application software) for a Swiss IT service provider for the Swiss banking and pharmaceutical industries.
As technical expert in charge of IT security for the company Accenture Services AG, he was responsible for the design and implementation of internal IT security standards as well as for the implementation of security components in large customer projects.
