135 East 50th Street, Apt. 9D New York, NY 10022 ALEKSANDR YAMPOLSKIY Phone: 917-747-1821 E-mail: yampolskiy@gmail.com EDUCATION Yale University Ph.D. in Computer Science Thesis: “Efficient Cryptographic Tools for Secure Distributed Computing”, Advisor: James Aspnes New Haven, CT 2006 M.Phil. in Computer Science (2004), M.S. in Computer Science (2003) New York University B.A. in Mathematics and Computer Science (GPA: 3.907/4.00) (Summa Cum Laude, Phi Beta Kappa, Departmental Honors in Computer Science) New York, NY 2001 TECHNICAL SKILLS Languages: Java, C/C++, C\#, JavaScript, Perl, Python, Pascal, Basic, Assembler (x86, MIPS), SETL2, SQL, XML, UML, SML/NJ, various UNIX scripts (SED, AWK, SH). Operating Systems: MS DOS, Linux, UNIX, Windows 2000/NT/XP. Applications: Eclipse, ANT, Clover, Product Studio, CoreXT/NT, Orca, Spy++, gcc, Flash, MatLab, EMacs, VI, LaTeX, MS Office, Visual Studio .NET. Other: Cryptography, distributed computing, OOP design patterns, high-performance XML processing, SAX/DOM, database design, LDAP, J2EE container security, EJB, Mbeans, servlets, JMX, JDBC, testing methodologies (Junit, etc.). PROFESSIONAL EXPERIENCE October 2007 – present Senior Security Engineer / Associate, Goldman Sachs (Security Engineering) Developing firmwide authentication/authorization infrastructure. May 2006 – October 2007 Senior Member of Technical Staff, Oracle Corporation (Identity Management & Security). Responsible for developing identity management and security software, focusing on security, authentication and federated identity protocols (e.g., SAML, Liberty Alliance and WS-Security). Added support in the Oracle Identity Federation server for X509 attribute mapping/filtering (Java). Implemented JMX MBeans to remotely provision users/roles in the LDAP data store used by Oracle's JAZN (authorization/policy provider) (Java). Improved performance of Oracle crypto toolkits and made them compliant with Sun JCE standards (Java, C++). Developed a QA suite of JUnit and regression tests for ASCTL (a scripting language used to configure Oracle Application Server) (Java, Jython). September 2001– February 2006 Graduate Researcher, Yale University. Analyzed various security problems from combined economic and cryptographic points of view. Designed a mechanism to spread signals furtively across the network. Proposed a game-theoretic model for containment of viruses in a network. Invented a way of protecting documents from a malicious storage provider by entangling them together. June 2003 – August 2003 Software Design Engineer Intern, Microsoft Corporation (Windows Live OneCare). Responsible for backup functionality in Windows Live OneCare safety scanner: Implemented a COM module for disaster recovery from backup CDs (C++). Developed an AUTORUN application that launches when a user inserts a backup CD into the computer (C/C++). Interacted with other developers, program managers, and the client UI team to integrate AUTORUN component with the rest of the product (C#). Created a UI for the disaster recovery module, which displays a list of backed up files in a tree-like structure (C#). July 2000 – September 2000 Research Assistant, Distributed and Parallel Systems Group. Investigated migration of process states across arbitrary networks. Developed API to intercept Win32 function calls using MS Detours library (C). Implemented a fault-tolerant replicated state machine simulator (Java, Perl). PUBLICATIONS (authors listed alphabetically) Yevgeniy Dodis, Aleksandr Yampolskiy, Moti Yung: Threshold and Proactive Pseudo-Random Permutations. Third Theory of Cryptography Conference (TCC 2006), February 2006, pp. 542-560. James Aspnes, Zoë Diamadi, Kristian Gjøsteen, René Peralta, Aleksandr Yampolskiy: Spreading Alerts Quietly and the Subgroup Escape Problem. 11th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 2005), December 2005, pp. 253-272. Yevgeniy Dodis, Aleksandr Yampolskiy: A Verifiable Random Function With Short Proofs and Keys. Eighth International Workshop on Theory and Practice in Public Key Cryptography (PKC 2005), January 2005, pp. 416-431. Winner of the Best Paper Award. James Aspnes, Kevin Chang, Aleksandr Yampolskiy: Inoculation Strategies for Victims of Viruses and the Sum-ofSquares Partition Problem. Sixteenth Annual ACM-SIAM Symposium on Discrete Algorithms (SODA 2005), January 2005, pp. 43-52. James Aspnes, Joan Feigenbaum, Aleksandr Yampolskiy, Sheng Zhong: Towards a Theory of Data Entanglement. Ninth European Symposium on Research in Computer Security (ESORICS 2004), September 2004, pp. 177-192. AWARDS AND HONORS 2005 2001-2002 2000 1997 Best Paper Award in Public Key Cryptography (PKC 2005) conference. Awarded fellowship by Yale University. Winner of Pan-American intercollegiate blitz chess championship. Character Traits Award, Achievement for Effort Award. PROFESSIONAL ACTIVITIES Invited reviewer for “The Handbook of Information Security” (John Wiley & Sons, Inc.) Reviewer for top computer security conferences like CCS 2005, DISC 2005, EUROCRYPT 2005. Volunteer administrator for Internet Chess Club (chessclub.com). Liaison with Russian-speaking users. President of Yale's Russian club with over 200 members (2005-2006). Organizer of Yale Entrepreneurial Society – New York Chapter (theyaleentrepreneur.org). LANGUAGES Fluent in Russian. Reading skills in German and Hebrew.