b'Lars Strand\nContact\nInformation\n\nEducation\n\nAddress: Frydenlundbakken 12, 3474 A\xcc\x8aros, Norway\nMobile: +47 9288 6333\nEmail: lars.strand@gnist.org\nBorn:\n16. December 1978\nWWW: Private: http://www.larsstrand.no/\nMarital Status: Married\nChildren: Marius (b. 2012)\nAugust 2007 \xe2\x80\x93 July 2011\nPh.D. in Computer and Network Security\nNorwegian Computing Center / University of Oslo\nResearch fellow for a PhD degree at Norwegian Computing Center (at 75% capacity), within the research\narea of network security and VoIP, with special focus on the SIP protocol. Thesis title: \xe2\x80\x9dAdvancement\ntowards secure authentication in the Session Initiation Protocol\xe2\x80\x9d.\nJanuary 2003 \xe2\x80\x93 November 2004\nM.Sc. in Computer Security\nUniversity of Oslo\nI completed a M.Sc. at the Department of Informatics, University of Oslo, Norway. In my thesis I focused\non network security and implemented a distributed firewall in close cooperation with the Norwegian Defence\nResearch Establishment (FFI). Full title: \xe2\x80\x9dAdaptive distributed firewall using intrusion detection\xe2\x80\x9d.\nAugust 2000 \xe2\x80\x93 December 2002\nB.Sc. in Programming and Computer Networks\nUniversity of Oslo\nI completed a B.Sc. at the University of Oslo with courses in computer networks and programming.\nAugust 1997 \xe2\x80\x93 May 2000\nMinor degree in Philosophy\nUniversity of Oslo\nI completed a minor degree in philosophy with two years philosophy and one year political science. In my\nthesis I compared Buddhist ethics with western consequentialism. Full title (Norwegian): \xe2\x80\x9dEr buddhistisk\netikk konsekvensialistisk?\xe2\x80\x9d.\n\nWork Experience\nRemunerated\n\nJanuar 2012 \xe2\x80\x93 present\nChief Project Manager ICT\nNofas AS\nResponsible for evaluation of our clients R&D projects and describing the new technology in applications\nor project plans. My client portfolio consist of innovative R&D companies within the ICT industry. I also\nhave the professional responsibility for our ICT group at Nofas.\nSeptember 2013 \xe2\x80\x93 present\nBoard Member\nBoard member elected by the employees of the company.\nJanuar 2012 \xe2\x80\x93 present\nOwner/Consultant\nVarious freelance/consulting work.\n\nNofas AS\n\nStrand Konsulenttjenester\n\nSeptember 2008 \xe2\x80\x93 December 2011\nSenior System Consultant\nRedpill Linpro AB\nSenior technical free and open source (Linux) consultant and course instructor. Core member of both\nNetwork and Security Technical Excellence Area (TEA) groups. Worked at 25 % capacity while taking my\nPhD.\nApril 2006 \xe2\x80\x93 May 2008\nBoard Member\nBoard member elected by the employees of the company.\n\nLinpro AS\n\nNovember 2004 \xe2\x80\x93 August 2008\nSystems Consultant\nLinpro AS\nTechnical free and open source (Linux) consultant and course instructor. I was responsible for keeping\nseveral sysadmin courses up to date and created several courses from scratch. I worked with the network and\ninfrastructure (Linux) for customers like \xe2\x80\x9cThe Government Pension Fund of Norway\xe2\x80\x9d, \xe2\x80\x9cSiemens Business\nServices\xe2\x80\x9d and \xe2\x80\x9cErgo\xe2\x80\x9d.\n1\n\nUpdated: 10. August 2014\n\n\x0c2003 \xe2\x80\x93 2004\nResearch Assistant (summer internship)\nThales Communications AS\nDevelopment of a prototype for authentication of nodes in a ad-hoc network using 802.1X, 802.11i, OSLR\nand MobilIPv6 in a Linux environment.\nSeptember 2000 \xe2\x80\x93 November 2004\nSystem Administrator (20 % part time)\nUniversity of Oslo\nI worked on the Linux/Unix systems at the University of Oslo on a part time basis. Programming in PHP,\nMySQL and scripting.\nJune 2000 \xe2\x80\x93 July 2001\nSupport Engineer (40 % part time)\nTelenor Nextra AS\nI worked part time as a support engineer solving customer problems related to Internet connection and\npopular Internet services.\nVoluntary\n\n2000 \xe2\x80\x93 present\nFTP System Administrator\nUniversity of Oslo\nI\xe2\x80\x99m member of the sysadmin team responsible for maintaining Norway largest public ftp server ftp.\nuninett.no/ftp.uio.no.\nJune 2003 \xe2\x80\x93 August 2004\nAuthor\nLinux Documentation Project\nAs part of the Linux Documentation Project, I wrote and maintained the Mobile IPv6 HOWTO, Optimized\nLink State Routing Protocol (OLSR) IPv6 HOWTO and the 802.1X Port-Based Authentication HOWTO.\nApril 2002 \xe2\x80\x93 Januar 2003\nBoard Member\nFounding member, and board member of OLUG.\n\nOslo Linux User Group (OLUG)\n\n1998 \xe2\x80\x93 2004\nStudent Activities\nUniversity of Oslo\nI was involved in various student activities/societies on all levels of my higher education. Both professional\nand social.\nTeaching\nExperience\n\nApril 2014\nGuest Lecturer\nUniversity of Oslo\nI gave a guest lecture at the master course \xe2\x80\x9cINF5050 \xe2\x80\x93 Protocols and routing in the internet\xe2\x80\x9d on the topic\nVoIP using SIP.\n2007 \xe2\x80\x93 2011\nCourse Instructor\nI created and teached numerous courses during my years in Linpro/Redpill Linpro.\n\nLinpro\n\nAutumn 2003 and 2004\nTeaching Assistant and examiner\nUniversity of Oslo\nI worked as a teaching assistant and examiner at a programming course in Python, Perl and shell scripting.\nMarch 2003\nGuest Lecturer\nUniversity of Oslo\nI gave a two-hour guest lecture on free and open source software and its consequences for government\nadministration at a Department of Political Science master course.\nJuly 2001\nLecturer\nTelenor Internett\nI created and held a two day course in Linux and Linux networking for the technical staff at Telenor\nInternett.\nCertifications\n\nMySQL Core Certification, http://www.mysql.com\nMySQL Professional Certification, http://www.mysql.com\nRed Hat Certified Technician (RHCT), http://www.redhat.com\nRed Hat Certified Engineer (RHCE), http://www.redhat.com\nLinux Professional Institute level 1 (LPIC1), http://www.lpi.org\n\n2\n\nUpdated: 10. August 2014\n\n\x0cSkills\n\nI\xe2\x80\x99ve been in interested in computers as long as I can remember. I vividly remember when I bought my\nfirst computer in 1993. I stumbled across Linux in the late 90ies and have used it daily ever since. I will\nclaim my Linux and network skills are thorough. My programming experience are primarily Perl, Python\nand Bash.\nLanguages: Norwegian, English.\n\nPublications\n\nAll conference papers were presented and defended at the respective scientific conference.\n\n2011\n\nLars Strand and Wolfgang Leister. \xe2\x80\x9dAdvancement towards secure authentication in the Session Initiation\nProtocol\xe2\x80\x9d International Journal on Advances in Security, ISSN 1942-2636. vol. 4, no. 3&4, 2011.\nLars Strand, Wolfgang Leister and Alan Duric. \xe2\x80\x9dMigration towards a more secure authentication in the\nSession Initiation Protocol\xe2\x80\x9d Accepted for publication at The 5th International Conference on Emerging\nSecurity Information, Systems and Technologies, (SECURWARE2011), Aug 2011, Nice, France.\nAwarded best paper.\nLars Strand, Josef Noll and Wolfgang Leister. \xe2\x80\x9dGeneric Security Services API authentication support\nfor the Session Initiation Protocol\xe2\x80\x9d The 7th Advanced International Conference on Telecommunications\n(AICT2011), Mar 2011, St. Maarten, The Netherlands Antilles.\nLars Strand and Wolfgang Leister. \xe2\x80\x9dImproving SIP authentication\xe2\x80\x9d The 10th International Conference on\nNetworks (ICN2011), Jan 2011, St. Maarten, The Netherlands Antilles.\n\n2010\n\nLars Strand. \xe2\x80\x9dVoIP lab as a research tool in the EUX2010SEC project\xe2\x80\x9d Norwegian Computing Center\nTechnical Report DART/08/10, April 2010.\nLars Strand and Wolfgang Leister. \xe2\x80\x9dA Survey of SIP Peering\xe2\x80\x9d NATO ASI \xe2\x80\x93 Architects of secure Networks\n(ASIGE10), May 2010, Genova, Italy.\nInvited paper.\nAnders Moen Hagalisletto and Lars Strand. \xe2\x80\x9dDesigning Attacks on SIP Call Setup\xe2\x80\x9d International Journal\nof Applied Cryptography, ISSN 1753-0563, Volume 2, Number 1, July 2010.\n\n2009\n\nLothar Fritsch, Arne-Kristian Groven, Lars Strand, Wolfgang Leister and Anders Moen Hagalisletto. \xe2\x80\x9dA\nHolistic Approach to Open Source VoIP Security: Results from the EUX2010SEC Project\xe2\x80\x9d International\nJournal on Advances in Security, ISSN 1942-2636, vol. 2, no. 2&3, 2009.\nElin Sundby Boysen and Lars Strand. \xe2\x80\x9dSecurity analysis of the SIP Handover Extension\xe2\x80\x9d The 2nd Norwegian\nInformation Security Conference (NISK2009), Nov 2009, Trondheim, Norway.\nAnders Moen Hagalisletto, Lars Strand, Wolfgang Leister and Arne-Kristian Groven. \xe2\x80\x9dAnalysing Protocol\nImplementations\xe2\x80\x9d The 5th Information Security Practice and Experience Conference (ISPEC2009), Apr\n2009, Xi\xe2\x80\x99an, China.\nLothar Fritsch, Arne-Kristian Groven and Lars Strand. \xe2\x80\x9dA holistic approach to Open-Source VoIP security: Preliminary results from the EUX2010SEC project\xe2\x80\x9d The 8th International Conference on Networks\n(ICN2009), Mar 2009, Cancun, Mexico.\nAwarded best paper.\n\n2008\n\nAnders Moen Hagalisletto and Lars Strand. \xe2\x80\x9dFormal modeling of authentication in SIP registration\xe2\x80\x9d\nThe 2nd International Conference on Emerging Security Information, Systems and Technologies (SECURWARE2008), Aug 2008, Cap Esterel, France.\n\nTalks\n\nI have given several talks over the years, with topics ranging from computer and network security, free and\nopen source software, software quality, network protocols and databases. For a selection, please consult:\nhttp://larsstrand.no/index.php?action=writings\n\nProfessional\nActivities\n\nTechnical Program Committee, The International Conference on Networks (ICN), 2010, 2011, 2012, 2013.\nTechnical Program Committee, The International Conference on Emerging Security Information, Systems\nand Technologies (SECURWARE), 2009, 2010, 2011, 2012, 2013.\nSession chair, The 8th International Conference on Networks (ICN), 2009, 2011.\nSession chair, The 2th International Conference on Emerging Security Information, Systems and Technologies (SECURWARE), 2008.\n\n3\n\nUpdated: 10. August 2014\n\n\x0cInterests\n\nWhen I\xe2\x80\x99m not in front of my computers, I like to exercise cycling and running. I try to attend several\ncycling and running competitions each year, including \xe2\x80\x9cGrenserittet\xe2\x80\x9d, \xe2\x80\x9cOslos Bratteste\xe2\x80\x9d, \xe2\x80\x9cLandfallhytta\nopp\xe2\x80\x9d. My newest challenge this year was competing in \xe2\x80\x9c\xc3\x98stfold Triatlon\xe2\x80\x9d.\nWhenever I have the time, I blog about my technical experiences here http://blog.larsstrand.no/. I\nalso brew a considerate amount of wine each year.\nI\xe2\x80\x99m also interested in philosophy of mind and -religion. But most of all, I enjoy spending time with my\nwife and son.\n\nReferences\n\nAvailable on request.\n\n4\n\nUpdated: 10. August 2014'