Special Contributor

Brian Wotring is the CTO of Host Integrity, Inc. a company that specializes in providing software to help monitor the integrity of desktop and server environments. Brian studied computer science and mathematics at the University of Alaska and the University of Louisiana.

Brian founded and maintains knowngoods.org, an online database of known good file signatures for a number of operating systems. He also is the developer of ctool, an application that provides limited integrity verification for prebound Mac OS X executables. Brian is currently responsible for the continued development of Osiris, an open source host integrity monitoring system.

As a long-standing member of The Shmoo Group of security and privacy professionals, Brian has an interest in secure programming practices, data integrity solutions, and software usability.

Brian is author of Host Integrity Monitoring Using Osiris and Samhain (Syngress, ISBN:1-597490-18-0). And, along with Bruce Potter and Preston Norvell, Brian co-authored the book, Mac OS X Security. Brian has presented at CodeCon and at the Black Hat Briefings security conferences.

Appendix A is excerpted from Brian’s book Host Integrity Monitoring Using Osiris and Samhain.