Edward Chiu

Cybersecurity Strategist & Distinguished Engineer Chevron

Research on emerging security technologies, including

- Post-quantum cryptography

- Authored whitepaper "Preparing Enterprises for the Quantum Computing Cybersecurity Threats" by Quantum Safe Security Working Group, Cloud Security Alliance

- Contributed to whitepaper "A Day Without Safe Cryptography" by Quantum Safe Security Working Group, Cloud Security Alliance

- Presented "Impact of General-Purpose Quantum Computers on Cryptography" at ISSA South Texas Chapter

- Blockchain - Conducted proof-of-concept leveraging Ethereum on deals settlement

- IoT security, including security hardened micro-controller units

- Applications of Secure Multi-Party Computation and Homomorphic Encryption

- Evaluation of open source software security management tools

- Support development and recruiting of cybersecurity talents

- Enterprise-wide Application Security Program, including

- Strategy to secure web, non-web, cloud and mobile applications

- Secure SDLC processes, enforcement and governance

- Static/Dynamic Application Security Testing, and remediation coaching

- Authoring of secure coding standards of several programming languages

- Security-related technical standards and controls

- Securing open source software

- Organization capability

- Application security assurance through contracts and terms - etc

. - Software and Web Security Standards and Technologies

- OWASP Top 10

- WASC - SANS Top 25

- Web services security (Web APIs and SOAP)

- Cryptography, PKI and Identity Access and Management

- Symmetric and asymmetric cryptography applications (secure email, digital signatures, secure hashing, and RNG)

- Public key infrastructure with multi-factor authentication

- Credential and key life cycle management

- Authentication and authorization schemes such as Kerberos, SAML, OpenID, OAuth, etc. - Mobile Application Development, Methodology and Architecture

- Software Design and Development

- Enterprise Application Architecture, Development and Integration

- Proficient in C/C++, C#, ASP.Net Objective-C, Java, JavaScript