Los Alamos National Laboratory Los Alamos, NM 87544, USA

http://www.eax.com http://resume.eax.com

Work : Cluster Research
Awards : R&D 100, see http://www.eax.com
keywords:
linuxbios,kexec
clustermatic,bproc,bjs, fair share scheduling
via epia, pse
bk, xen, virtual clusters

I have described here in more details the lanl job.

Going boldly where no man has gone before.
 
keywords:
OS:Linux, OpenBSD, FreeBSD
HW:PC/104, PcCard, Prizm2, Access Point, 802.11 Wireless, IBM ThinkPad, SIS630
HW Protocols: ATA-3, PCI Rev2.1
HW Tools: DATA I/O ChipWriter, American Arium ECM-20 In-Target Probe, EmuTec Inc PROMJet In-Circuit Emulator (rom emulator), PCI POST Code PORT-80 Card, VMETRO PBT-515 PCI Analyzer & Exerciser
BIOS:LinuxBIOS, SEBOS, EtherBOOT, BOCHS-BIOS
PROTO:EAP,LEAP,EAP/TLS,RADIUS,TLS/SSL,802.1x,802.11, MultiBoot
SW:ELF,FreeRADIUS,XSupplicant,Ethereal,OpenSSL
 
For the list of recent project and papers see http://www.eax.com

I work here as researcher working on implementing Mobile Ad-hoc Networks (manet). Duties include implementing manet components inside of Linux kernel as well in userland on Linux system. I am also researching on what would be most optimal way to implement those, and suggest changes to manet protocol which might result in better implementation and/or performance and which will subsequently go into Internet's RFC.

Security. Trying to detect crackers trying to do break-ins on campus-wide scale (like port-scans etc). Write software to assists in detection of such attacks (like looking for specific "signatures" in traffic of the uplink pipe to the university which attacks would cause). Other duties would include writing software to present data gathered by various network monitors, for our LAN's and WAN's, on web in visual form.

I have planned, setup and then maintained database client-server system. First, this involved design and selection of optimal hardware and software to run a high-reliability Linux server for Auditory Neuroethology Lab. Next, I have setup the hardware and software to serve www, printing, database and coexist with Linux and Windows workstations using Novel, and generally ensure the setup is secure. Finally, I had been doing maintenance work, on the system once it was setup. This would include security audits, software udates, resolving problems and finally enchance setup as needs would grow.

I have managed 700 hosts (plus 650 hosts at associated site) with around 1700 accounts spread over multiple architectures of unix. Duties included everything what standard system administrator job would include. Some examples, but not limited to, would be software debugging and software fixes, computer troubleshooting and repair network troubleshooting and repair. Intrusion detection and in case of break-in blocking of attacker and assessment of break-in. Solving computer science researchers and computer science professors problems related to our system.

I have managed of a computer network consisting of 150 hosts and around 350 accounts over various unix architectures. Duties included answering questions and solving problems researchers would have with our installed system. Systems maintenance what would include everything ranging form account installation / deletion, through backup on software upgrades and hardware upgrades.

University of New Mexico, ( http://www.unm.edu)
• Graduate (PhD) program in Computer Science

University of Maryland, College Park ( http://www.maryland.edu)
• Bachelor in Computer Science (December 2003)
• Mostly self financed education by working.

Walt Whitman High School, Bethesda ( http://www.waltwhitman.edu )

• Software
• Operating Systems
• Linux 1.2.x-2.6.x, FreeBSD 2.2.x-4.6.x, NetBSD 1.3.x-1.6.x, OpenBSD 2.x-3.x,
  and other.
• Languages
• C, C++, Java, x86 Assembler, BASH shell scripts, Perl, and other.
• Software
• Numerous Unix software packages (2'500 programs or so)
• Apache (web); inn (news); Samba, nfs (network file systems); sendmail, qmail (e-mail), dns (domain).
• Networks
• Protocols:
• Layer 1 (link): ARP, RARP, basic ethernet
• Layer 2 (network): IPv4, ICMP
• Layer 3 (transport): UDP, TCP
• Layer 4 (application): Ping , Telnet , FTP, SMTP, TFTP, BOOTP, SNMP
• wrote network clients and server daemons in c and java.
• wrote packet sniffers, packet spoofers (to fix "broken" hardware -- see 'bootfix' below)
• implemented TCP-like reliable transport protocol
• Internet domain
• registration, management
• own domain http://www.eax.com
• configuration of Internet/Intranet IP based networks
• security of hosts on the Internet
• network level protection of hosts (firewalling, proxying, masquerading)
• Network Address Translation (Masquerading, NAT)
• Routers: Cisco 7507, Cisco 7513, Cisco 12012, ForeRunner ASX-1000
• Internet 2 : Abilene, very high performance Backbone Network Service (vBNS)
• Hardware
• Platforms
• Sun, PC, Alpha, SGI, Mac, IBM (RS/6000),
• complete life cycle
• deployment, upgrade, repair, debugging, retirement
• building PC's from scratch.
• "regular" desktops
• sub $500 number crunches
• computer clusters
• "headless" pc's as firewalls or routers.
• computer networks.
• planning, deployment, troubleshooting, expansion
• Ethernet, PPP, PLIP, ATM
• Network media: Base-2, Base-T, Fibrechannel, serial, parallel, phone.
• speeds: 10mbps, 100mbps, 144mbps, gigabit.
• multi-processor systems
• Security

Unix
• Intrusion prevention
• security fixes, home-brew security enhancements, firewalling "weak" OS'es, only-needed-services, the-less-the-better, ssh, s/key, password crack.
• Intrusion detection
• home-brew security software, check pointing, check-in's
• Intrusion
• stealth assessment of break-in , blocking out attacker, assessment of damage, looking for booby traps, looking for backdoors
• Post Intrusion issues
• security audit, analysis of weakness, lessons learned, security enhancements
• my own domain
• never had a break-in (last 3 years or so)
• uptime 600+ days
Cryptography
• Wrote software implementing symmetric cipher IDEA and CBC.
• Analysis of DES, IDEA, RSA: how they work, their strengths and weakness, and applicability
• Various autentication protocols using Public Key Algorithms via KDC. Implemented variant of Needham-Schroeder autentication via KDC.
• Wrote chat client which supports user autentication via KDC (Key Distribution Center), and encrypts all communication between KDC, Chat Server, and Chat Clients.
• Software Maintenance (bug fixes, new features, enhancements):
• Linux Kernel
• Various contributions, ranging from network TCP/IP engine, to auxiliary scripts.
• XFree86
• Have made contributions to it.
• GNU Compiler Collection (GCC), Java support (GCJ)
• Helping develop libgcj which is library supporting the java compiler itself

• Association For Computer Machinery (ACM) - Maryland Chapter, 1995 - present
• Treasurer (elected) 1996
• Vice President (elected) 1997
• University Of Maryland Linux User Group ( UMLUG), 1996 - present
• The Systems Administrators Guild (DC-SAGE) - Washington D.C. Area, 1999 - present
• Washington D.C. Linux User Group (DCLUG), 1999 - present

• Linux Gazette ( improvements to kernel updating mechanism )
• Linux Weekly News ( an Project to patch kernel on a "live" system )
• The Inquirer (The Open Source Stackable BIOS)
• Slashdot (The Open Source Stackable BIOS)
• Slashdot (XRender Guide)

• Linux in a Corporate Environment
work / school, feasibility study, on-line
• Unix Security issues
work / bugtraq, assorted selection
• Unix Introduction / Usage
tutoring, tutorial

• Linux3000 -- a project to port Linux to DEC3000 Alpha with a TurboChannel bus.
• LKPK (Live Kernel Patching Kit) -- fix urgent problems in mission-critical systems without need to shutdown system.
• BootFix -- a program to fix broken netbooting on DEC3000.

Mountain biking, body building, computers. I am looking for a job that will allow me to pursue my interests as I continue to improve my computer skills.