Photo - Nicolas Fischbach Nicolas FISCHBACH
CTO - Forcepoint

nico@securite.org - http://www.securite.org/nico/

PGP Key ID : 0x833D0D24
PGP Key Fingerprint :
E805 286E 58EA 62D0 AC93
C7A3 9A98 8F6F 833D 0D24
            
 EXPERIENCE  
 
Forcepoint Zürich Depuis 2017
 Global CTO
   Depuis 10/17 
 Cloud CTO    01/17-09/17 
 
Colt (ex-COLT Telecom) Zürich 2000-2016
 Director, Strategy, Architecture & Innovation
   05/14-12/16
 Director, Product Portfolio Programme    05/14-09/14
 Director, Network & Platform Strategy and Architecture    05/12-05/14
 Director, Network Strategy and Architecture    01/11-05/12
 Director, Network Architecture    05/09-12/10
 Snr Mgr, Network Development & Product Engineering Security    07/06-05/09
 Snr Mgr, European IP Security Engineering    12/02-07/06
 Manager, IP Engineering    12/01-12/02
 Senior IP & Security Engineer, Professional Services Team    04/01-12/01
 Senior IP Engineer, IP Engineering Team    02/00-04/01
 
Adelis La Walck 1999 - 2000
 Responsable systèmes, réseaux et sécurité
 
ADEC La Walck 1996 - 1999
 Administrateur systèmes et réseaux
 FORMATION  
 
INSEAD Fontainebleau 2010
Executive Education :
 Strategic R&D Management (SRDM)
 
UPMC - P6 LIP6 Paris 1998 - 1999
Université Pierre et Marie Curie - Paris 6 - Lip6 :
 DESS Téléinformatique (Réseaux et Applications Distribuées) [Mention Bien]
 UFR Informatique (Systèmes et Réseaux) - Module "Architecture de Réseaux"
 
ITIN Cergy Pontoise 1996 - 1998
Institut des Techniques Informatiques :
 Chargé de Projet - Intégrateur système - Option SAP R/3 [Mention Très Bien]
 
URS Strasbourg 1994 - 1996
Université Robert Schuman - IUT Strasbourg-Sud :
 DUT Informatique et génie informatique
 
LEGT Bouxwiller 1991 - 1994
Lycée de Bouxwiller - Baccalauréat série C
 ACTIVITES  
 
Sécurité.Org www.securite.org 1997-2010
 Co-fondateur de Sécurité.Org, un site web francophone qui traite de sécurité
 informatique, de cryptographie, des technologies réseaux et des OS libres.
 
eXperts experts.securite.org 2001-2006
 Co-fondateur d'eXperts, un groupe informel de spécialistes en sécurité
 informatique.
 
The Honeynet Project www.honeynet.org depuis 2002
 Membre du Honeynet Project
 Co-fondateur du chapitre français du Honeynet Project (2003-2007)
 
mystique mystique.securite.org depuis 2004
 Fondateur du réservoir de compétences et du groupe de réflexion (think tank)
 sur la sécurité des technologies de l'information et de la communication
 
Cours, articles et présentations depuis 1999
 - Infrastructure ISP (MSI IECS Strasbourg,
   DESS Commerce Electronique URS)
 - Kerberos 5 (CanSecWest/core01)
 - La sécurité et les services managés (HEC - Université de Genève)
 - Kerberos V en environnement ISP (OSSIR, SwiNOG-3)
 - Forensic Readiness (John Tan - @stake)
 - L'approche sécurité d'un grand opérateur télécom
   (Diplôme Sécurité Informatique - UniGe)
 - Protection de l'infrastructure réseau IP: routeurs et
   commutateurs Cisco (Black Hat Briefings, OSSIR,
   Eurosec 2002, SwiNOG-4, CanSecWest/core02)
 - M.I.S.C Magazine
   . 01: Sécurisation de routeurs et de commutateurs
   . 02: Les protocoles de la couche liaison de données
   . 03: Les protocoles de routage et MPLS
   . 04: Les dénis de service réseaux
   . 05: L'autopsie de routeurs
   . 06: IPv6 et IP anycast
   . 09: BGP, DNS, reconnaissance distribuée et vers
   . 10: VPN IPsec via un concentrateur avec authentification forte
   . 11: Tests de pénétration automatisés - CORE IMPACT
   . 16: Dossier télécom - la voix sur IP
   . 17: Les flux réseaux (Netflow)
   . 19: Dossier DDoS - la vision de l'opérateur
   . 22: Dossier Supervision de la sécurité
   . 29: Protéger son coeur de réseau IP
   . 37: Dénis de service contre une plate-forme de VoIP
   . 54: DPI chez un opérateur
   . 60: Aspects réseau du cloud
 - Configuration d'un réseau face aux dénis de service (JSSI 2002)
 - La détection d'intrusion (ITIN)
 - Tunnels et réseaux privés virtuels (ITIN)
 - Security in large service provider networks (Libre Software Meeting 2002)
 - IP Backbone Security (Blackhat USA 2002)
 - Layer 2 protocols and router forensics (Defcon X)
 - (Distributed) denial of service: attacks, detection, protection (SwiNOG-5)
 - Les sociétés face aux risques liés à l'Internet
   (Association des Responsables de la Sécurité des Banques
   et Etablissements Financiers)
 - Le cycle de vie d'une vulnérabilité (Eurosec 2003)
 - Dénis de service et autopsie de routeurs (Eurosec 2003)
 - Core Network hardening (CISCO SP Security Deployment Forum)
 - Cisco Router forensics and DDoS/worms update (CanSecWest/core03)
 - DDoS Mitigation and Analysis at the Infrastructure Level
   (Blackhat Europe 2003)
 - MPLS based Traffic Shunt (NANOG 28, RIPE 46)
 - Chairman, session Réseau (SSTIC03)
 - DoS Detection and Mitigation with Open Source tools (LSM 2003)
 - Network Service Provider Infrastructure Security BoF (nsp-security)
 - Relecteur "PKI Open Source: Déploiement et Administration" (O'Reilly)
 - Infrastructure Security and DDoS Mitigation (SwiNOG-7)
 - Secure Network Infrastructure Deployment (pacsec.jp)
 - Honeypot Technologies in SP Networks (kontaki.net, CESG workshop)
 - ISP Infrastructure Security (ZISC - ETH Zürich Information Security Center)
 - Experience in fighting DDoS attacks (Cisco SP Security, SwiNOG 9,
   AusCERT 2005)
 - Cisco Router Forensics (Cisco SP Security, Crédit Suisse IRT Workshop)
 - Sécurité des réseaux IP (FrNOG #4)
 - Coordinateur et modérateur, session "Pots de Miel" (EUROSEC 2004)
 - Table ronde "Attaques virales, rôle des différents acteurs" (EUROSEC 2004)
 - Internet Legal Issues panel (CanSecWest/core04)
 - Update on DDoS and worms (CanSecWest/core04)
 - Les FAI facent aux virus et aux vers (JSSI 2004)
 - Building an Early Warning System in a Service Provider Network
   (BlackHat Briefings Europe 2004, FrNOG #5, SyScAN 04)
 - (In)sécurité de la voix sur IP (VoIP) (SSTIC 2004)
 - Tutorial "Fighting Internet diseases: DDoS, worms and miscreants"
   (FIRST, AusCERT 2005)
 - Infrastructures télécoms: menaces et protections (Ecole d'été CEA-EDF-Inria)
 - Keynote - "How to avoid being roadkill on the information highway" (T2)
 - Voice over IP security (pacsec/core04)
 - Best known methods for detecting security anomalies in
   global networks (pacsec/core04)
 - Le facteur humain dans la sécurité: retour d'expérience centre de
   supervision sécurité (CELAR - DGA)
 - Voice over IP security chapter (Hacking Exposed 5)
 - Reviewer: Know your Enemy - Tracking Botnets (Honeynet Project)
 - Sécurité de la Voix sur IP (EUROSEC 2005)
 - Evolution des dénis de service et du phishing (EUROSEC 2005)
 - Network flows and security (Black Hat Briefings Europe 2005, SwiNOG-X)
 - Reviewer: The Zombie Roundup - Understanding, Detecting,
   and Disrupting Botnets (Internet Motion Sensor Project)
 - Network flows and security (CanSecWest/core05)
 - Dojo: Applied network security and advanced anomaly detection using
   state-of-the art honeypots and netflow/NIDS (CanSecWest/core05)
 - LINX BGP BCP for IXes (London Internet Exchange)
 - Flux réseau et sécurité (JSSI 2005)
 - DDoS and Bots panel (AusCERT 2005)
 - Protocoles réseau: grandeur et décadence (SSTIC 05)
 - The real ROI of DDoS detection and mitigation (Arbor SP Summit)
 - Filtering and blocking of illegal sites (Cisco SP Security Forum 2005)
 - Reviewer (IPSI-2005 - Slovenia)
 - Cisco Security Notice: AAA command authorization by-pass and
   TCL VTY binding issue (Cisco PSIRT)
 - Clean Internet Pipes - Accès Internet "propre" et "sûr" ? (CLUSIS)
 - DDoS detection and mitigation (WebSec 2006)
 - Botnets: detection and how to respond to an infestation (WebSec 2006)
 - Panel: Top challenges in VoIP security and management (IEEE VoIP MaSe)
 - Carrier VoIP security (CanSecWest/core06, BlackHat Briefings USA 2006,
   T2'06, JSSI 2006 - CELAR/DGA, Norwegian Network Operators Group)
 - Workshop: Running large online events (Arbor SP Security)
 - Panel: Bridging the Law Enforcement and Technical Community (INTERPOL)
 - Network Response to DDoS Attacks (TERENA Networking Conference 2006)
 - La Voix sur IP chez un opérateur (JSSI 2006)
 - Panel: Internet Wars 2006 (Defcon 14)
 - In SPace nobody can hear you scream (Hack.LU 2006)
 - Infrastructure ACLs: real world usage and experience
   (Cisco Service Provider Security 2006)
 - VoIP Security DoJo (CanSecWest 2007 and 2008)
 - NGN - Next Generation Networks (err... Nightmare) ? (CanSecWest 2007,
   NorCERT)
 - Schutz vor den Angriffen von morgen (heise Security Konferenz)
 - Sécurité Telco 2.0 (JSSI 2007 - OSSIR)
 - Next Generation Networks Security (EUROSEC 2007)
 - Reviewer: Virtual Honeypots - From Botnet Tracking to Intrusion Detection
   (Niels Provos and Thorsten Holz)
 - Protecting the Converged Network (Arbor SP Summit)
 - Reviewer: Know your Enemy - Fast-Flux Service Networks (Honeynet Project)
 - Reviewer: Know Your Enemy - Malicious Webservers (Honeynet Project)
 - Technical and legal aspects of DDoS mitigation, DPI and Traffic Analysis
   (ENISA / CERT/CC Workshop on Mitigation of Massive Cyberattacks)
 - Architecture et sécurité d'une infrastructure de VoIP
   (Techniques de l'Ingénieur)
 - NGN/NGS Security (5th Cisco SP Security Workshop)
 - Cybercrime - New threats in cyber space (RACVIAC and UNICRI seminar)
 - Reviewer: Know Your Enemy Lite - Proxy (Honeynet Project)
 - DDoS, SPs and Law Enforcement, NGN (CESG workshop)
 - Panel: SPs and Law Enforcement (INTERPOL - BTF7)
 - Panel: Experience in building an MSSP (Arbor Customer Summit)
 - In the cloud protection of Next Generation Services (Arbor Customer Summit)
 - Know your enemy : SP 2008 update (CERT-EE)
 - Building a Security Operations Center (MEITSEC)
 - IPv6 security (CanSecWest 2009 DoJo)
 - Telco 2.0 : Security of Next-Gen Telecom Services (SOURCE Barcelona)
 - Reviewer: Arbor Internet Observatory Report 2009 (NANOG 47)
 - IPv6 security (CanSecWest 2010 DoJo)
 - L1/L2/L3 integration (SwiNOG #20, Juniper CEWC workshop)
 - Layer 2/Layer 3 integration (Packet Transport Networks)
 - Contributor: Botnet Detection and Mitigation (ENISA)
 - Contributor: Resilience of the Interconnection Ecosystem (ENISA)
 - Next-Generation Data Center I/O (Carrier Ethernet World Congress)
 - Hybrid Networks for Business Network Services
   (Carrier Ethernet World Congress)
 - Hybrid Networks Security (Cisco SP Security Workshop, RIPE 61, INEX 15)
 - Network Security for the Cloud (Cisco Service Provider Security Workshop)
 - Panel: Network Complexity (RIPE 61)
 - Challenges (and solutions) in building networks that support
   cloud services (PTN 2011)
 - Building a cloud-centric network (IIR Telecom Cloud Services)
 - Contributor: Network Modernization in the Era of All-IP Networks
   (Heavy Reading Whitepaper)
 - Keynote: Service Providers of Tomorrow, at the Crossroads of Network
   and Compute (Arbor Customer Summit)
 - Colt's IPv6 Deployment: Lessons Learned and Outlook
   (IPv6 World Congress)
 - Colt blog:
   - IPv6: the sky is not falling
   - IPv6: 5 tips for CIOs
   - Wondering which drivers will boost future IPv6 developments?
   - Our journey towards Network Programmability
   - CPE: From Customer Premises Equipment to Cloud Powered Experience
   - My first facebook post... over IPv6
   - Transforming Colt's network architecture - the journey so far
 - Panel: 100G and beyond (IIR WDM and NextGen Optical)
 - Transport Networks Evolution and Cloud Centricity (Broadband World Forum)
 - Software Driven Networking (Juniper CEWC workshop)
 - Ethernet and the Cloud panel (Carrier Ethernet World Congress)
 - Reviewer: Internet Infrastructure Security (IEEE Security&Privacy)
 - Light Reading webinar: Delivering Performance-Assured Ethernet
 - Panel: Performance Assured Ethernet (Ethernet Expo Europe 2012)
 - Colt's Network and Managed IT services architecture (Telecom Cloud 2012)
 - 10 ans de SSTIC (SSTIC 2012)
 - Panel: The 100G Optical Reboot (IIR WDM 2012)
 - 10 years of DDoS mitigation: history and outlook (SWITCH CERT)
 - Where Will Cloud And SDN Take Carrier Ethernet
   (Carrier Ethernet World Congress)
 - Network and Cloud Innovation using SDN (SDN & OpenFlow World Congress)
 - Network and Platform Architecture: what's next ? (SwiNOG 25, LINX 79)
 - Virtual CPE in "Implementing the Innovative Edge for Cloud-Based
   Services" (Heavy Reading / Juniper)
 - Next Generation Access and Transport: Colt's vision (Juniper Tech Club)
 - Research Note: SDN and NFV (Infonetics Research)
 - SDN/Virtualization - Reshaping the Services and Networking Landscape
   (Light Reading Ethernet Expo EU)
 - 2013 Industry Analysts Event (Juniper)
 - Modular Carrier Ethernet: from idea to go-live (Ethernet World)
 - Colt SDN and NFV use cases (SDN & NFV Summit)
 - SDN and NFV panel (Cisco Network Architecture Geeks)
 - SDN Progress and Challenges panel (NFV SDN Summit 2014)
 - Security in 2014 and beyond (Arbor Networks Customer Summit)
 - Colt's journey towards a software-defined data centre (Network Virtualization
   and SDN World)
 - Panel: What are the SDDC opportunities (NV and SDN World)
 - Chair: Virtualization 100 roundtable on SDN/NFV (NV and SDN World)
 - Colt's virtual IP CPE journey (Juniper Cable/MSO Advisory Board)
 - Panel: Transforming the Telco network (NetEvents)
 - The Future of Data Centre Interconnects (Infinera)
 - NFV. Lessons: learned. Challenges: ahead (Layer123 SDN)
 - Roundtable: the Third Network (Metro Ethernet Forum)
 - Panel: Service Provider's Perspective on Implementing SDN
   (Metro Ethernet Forum)
 - Roundtable: Network Management in the Virtualized Platform Environment
   (Layer123 SDN)
 - Panel: IP & Optical Convergence and Carrier SDN use-cases (Layer123 SDN)
 - Harnessing the potential of the SDDC (Broadband World Foum)
 - La sécurité chez un opérateur en 2014 (Swiss AppSec Forum)
 - Panel: Innovation and co-create/co-development (Juniper)
 - Panel: OSS in the era of SDN and NFV (Light Reading OSS event)
 - Is Ethernet the future of video transport ? (WBU ISOG)
 - Sécurité et innovation chez un opérateur en 2015 (LORIA)
 - Webinar: SDN in the WAN - SP Opportunities and Challenges (Light Reading)
 - Panel: Embracing Open Source to Speed Virtualization (The New IP)
 - Panel: The New Generation of Stakeholders in the LSO-SDN-NFV Era (MEF)
 - Panel: What Have We Learned from NFV PoCs (SDN NFV Summit 2015)
 - NFV - from lab to PoC to go-live (Layer 123 NFV)
 - SDN/NFV: focus on customer experience (Network Virtuaization & SDN World)
 - Panel: New Virtual Networks Demand New Business Strategies (Big Telecom
   Event)
 - Panel: Improving Customer Experience - The Critical Role of Service
   Management in a Virtualized World (Big Telecom Event)
 - Panel: Taking Control of the Control Plane (Big Telecom Event)
 - What's next in Metro (Infinera Insight)
 - vCPE and NFV, what's next ? (Layer123 SDN)
 - SDN and NFV: hype or reality ? (Capacity Europe)
 - 15 ans d'attaques DDoS (OBS GATES2)
 - Podcast: les dénis de service (
No Limit Secu)
 - An NFV SDN Architecture Vision(MPLS SDN NFV World Congress)
 - Podcast: les arcanes de BGP (No Limit Secu)
 - Podcast: NFV (No Limit Secu)
 - NOVITAS / Colt OnDemand (TM Forum)
 - SDWAN: From Prototype to Commercial Service (SDWAN Summit)
 - SDWAN: Lessons Learned (L123 SDN)
 - Panel: How must today's CSPs evolve ? (Lightreading 2020)
 
Comité de Programme   depuis 2003
 - SSTIC (Symposium sur la Sécurité des Technologies de l'Information
   et des Communications):
   . 2003-2004: Comité de programme
   . 2005-2008: Comité d'organisation et de programme
   . 2009-: Steering committee
 - BCS (Bellua Cyber Security Asia):
   . 2005-2008: Program committee
 - Program committee (CYBER-FRAUD 2007)
 - ICIMP (International Conference on Internet Monitoring and Protection)
   . 2008-2016: Program committee
 - CSW (CanSecWest, PacSec, EuSecWest, BA-con)
   . 2005-2012: Program committee
 - hack.lu (Hack.LU)
   . 2006-2007, 2011: Program committee
 - IEEE S&P (IEEE Security&Privacy Magazine)
   . 2005, 2011: Reviewer
 - IIR (Telecom and Technology Conferences)
   . 2011, 2013: CEWC Advisory Board
   . 2012: CEWC EMEA and CEWC APAC Awards Judge
   . 2012-2013: IIR WDM Advisory Board
 - L123 (Layer 123 Conferences)
   . 2012-2016: SDN/NFV Advisory Board
 
Expertise et Conseil   depuis 2003
 - Advisory Boards:
  . Arbor Networks
  . The New IP (Light Reading)
  . Brocade
  . Versa Networks
 - Board of Directors: The New IP Agency
 - Programmes Recherche et Technologies (DGO6)
 - Diverses sociétés (Internet et sécurité)
 - Divers fonds d'investissements (VCs)
 
Presse   depuis 2000
 - New IP Agency: Talking Network Disruption With Colt's Nico Fischbach
 - Light Reading: Colt Goes Greenfield With Its OSS
 - Light Reading: AT&T, Colt Claim Major SDN Advance
 - Telecom TV: Will existing BSS/OSS systems be fit-for-purpose
   in the virtualised network?
 - Telecom TV: Is SD-WAN another OTT threat to service providers?
 - Light Reading: Colt Says NIA Can Help Speed Up NFV Rollout
 - Light Reading: Colt Exec Joins NIA Board
 - Telecom TV: Some NFV ecosystems are bound to fail - and probably
   the sooner the better
 - Infinera (PR): DTN-X XTC2 Launch
 - VMWare (PR): NFV Proof-of-Concept
 - Telecom TV: So many vendors and groups to choose from:
   how to cope with the velocity problem
 - The New IP: Radio Show: Seeking the New IP
 - The New IP: Colt's View of the New IP
 - The New IP: Colt: Cautious on Open Source
 - Telecom TV: Colt offers IoT providers flexible and dynamic network services
 - Telecom TV: Transforming Colt's business to deploy complex SDN
   and NFV solutions
 - The New IP: Colt Sheds Light on Next-Gen OSS and the live interview
 - Light Reading: Juniper Searches for Virtual Growth
 - Juniper (PR): Carrier Grade Virtual Router
 - Light Reading: SDN & NFV: No Going Back
 - Light Reading: Colt Preps Next-Gen OSS for NFV, SDN
 - Informatique News: Les opérateurs seront le coeur du cloud en 2020
 - Juniper: Virtual CPE case study and video
 - Networking+: Why you should care about SDN
 - SDN Central: Real world SDN and NFV in SPs
 - Capacity Magazine: Networks of the future (Yearbook 2013)
 - Computer Weekly: Software-defined datacentres demystified
 - Juniper Guest Blog: CPE: From Customer Premises Equipment
   to Cloud Powered Experience
 - Capacity Magazine: Analysis: Software-Defined Networking (Sep'12 edition)
 - IIR Telecoms: The future of optical platforms (video interview)
 - Usine Nouvelle: Passage à l'IPv6 : les industriels doivent-ils faire évoluer
   leurs équipements ?
 - Accedian Networks (PR): Colt's high performance Ethernet services
   and Modular MSP strategy
 - Financial Times Connected Business: Industrial IT espionage
 - Dark Reading: Do You Need a Security Operations Center?
 - IIR Telecoms: Future of Ethernet & Network+Cloud services (video interview)
 - Juniper (PR): Openflow and Network Programmability
 - Broadband World Forum: FTTH, IPv6, Cloud, ICT and 2012 challenges
 - Total Telecom Plus: IP Multimedia Subsystems: Multi Tasking
 - IIR Telecoms: WDM, 100G and beyond (video interview)
 - Arbor Networks (PR): Cloud Signaling
 - CRN: Opportunity knocks for channel with IPv6
 - Global Security Mag: IPv6, 10 conseils aux DSI
 - Light Reading: The Ugly Side of IPv6: Carrier-Grade NAT
 - Computer Business Review: IPv6: Top 10 tips for CIOs
 - ZDnet (FR): IPv6 : une migration entre promesses et craintes
 - Techniques de l'ingénieur: Le passage à l'IPV6 n'est pas la fin du monde
 - eWeek: IPv6: Leave It To Service Providers
 - 01 Informatique: Internet verrouille sa toile (DNSSEC)
 - Dark Reading: Attack of The Mini-Botnets
 - 01 Informatique: Internet: la faille de l'été (DNS) n'est pas colmatée
 - IDG News: Cisco routers again take spotlight at Black Hat
 - InformationWeek: Cisco IOS Rootkit Demonstrated
 - Dark Reading: Report: Web 'Mean Streets' Pervasive
 - Silicon (DE): IPv6 kämpft mit Sicherheitslücken
 - Dark Reading: Five Security Flaws in IPv6
 - eWeek: IPv6 Headers Problem Revealed
 - Dark Reading: Telcos at Risk of Web Bugs
 - Dark Reading: Battling Bots, Doing No Harm
 - Dark Reading: VOIP More Vulnerable
 - JDN: Phishing : les banques ont-elles pris la mesure du danger ?
 - Network World: NAC, VoIP security draw questions at Black Hat
 - Arbor Networks (PR): Colt Management Networks and Arbor Peakflow X)
 - FCW: Pentium computers vulnerable to cyberattack
 - Washington Post Security Fix: Some Highlights from CanSecWest
 - Cisco: COLT IP Guardian (DDoS Protection) case study and video
 - ZDnet: Le gratin de la sécurité en France ausculte les risques
   de l'informatique mobile
 - SecuObs: Les attaques DDoS visent de plus en plus l'infrastructure
 - CNET: Open-source team fights buffer overflows
 - The Register: IDS users swamped with false alerts
 - The Register: Cisco IOS loadable modules pose hacker risk
 
Photos de Conférences   1999 - 2003
 Quelques photos de :
 - The 1999 CCC Camp (Berlin)
 - CanSecWest/core00, core01, core02 et core03 (Vancouver)
 - Black Hat Briefings 2000 et 2001 (Amsterdam)
 - Black Hat Briefings 2002 et Defcon X (Las Vegas)
 - Hackers at large 2001 (Twente)