Jonathan Carter

Jonathan has been working in the IT industry for the past 20 years. During this time, he has participated in a large number of diverse projects within Canada, the United States, and Australia and posses a broad range of technical and leadership skills. First, he earned a Bachelors of Computer Engineering and a Masters in Computer Science with a major in Artificial Intelligence. Within Artificial Intelligence, he developed models of trust within computer security. He has many patents and publications relating to his research within the field. Since then, Jonathan has participated in many different aspects of application / product security. These include: ethical penetration testing; secure code reviews; seminar development; application framework development; risk management projects, training delivery with clients, defining security roadmaps, etc. Within Fortify, Jonathan posses a deep technical knowledge of Fortify's Source Code Analysis tools. Jonathan has made significant contributions towards the intellectual property surrounding the Fortify 360 product line. Routine engagements involve training, deployment, risk management, and source code auditing (both manual and automated). Market sector experience: Government (State), Commercial, Banking, Finance, and Online Services. Specialties: + Advanced Secure Coding & Design (.NET, VB, VB.NET, C++, C#, C, Java, JavaScript, AJAX, HTML, ASP.NET) + Secure Framework development + Application Penetration testing + Security Training + Extensive Windows Platform security-related development (Layered service providers (LSP’s)), DLL Injection, API Hooking, reverse engineering Front-end compiler optimization to prevent reverse engineering + Extensive knowledge of Windows Internals architecture