Biography:Ian Coldwater

From HandWiki
Short description: American computer security specialist
Ian Coldwater
Coldwater, wearing a black parka and beanie hat
Ian Coldwater
OccupationComputer security specialist and speaker
EmployerTwilio
OrganizationKubernetes SIG Security, Open Source Security Foundation

Ian Coldwater is an American computer security specialist, hacker, and speaker specializing in Kubernetes and cloud native security.[1][2] They are a security architect at Twilio, and co-chair the Kubernetes special interest group Kubernetes SIG Security.[3][4][5]

Career

Coldwater started working in tech in their thirties, starting in DevOps before focusing on security.[6] They began specializing in hacking and hardening Kubernetes containers, working as an independent penetration tester before joining Heroku as a lead platform security engineer.[6][7] As of 2021, they work as a security architect at Twilio.[8] Along with Tabitha Sable, they co-chair the Kubernetes special interest group, Kubernetes SIG Security.[3][4] They are also on the governing board of the Open Source Security Foundation.[9]

Coldwater has spoken at conferences including DEF CON,[10] Black Hat,[11] KubeCon and CloudNativeCon,[5] RSA Conference,[12] Velocity,[13] and devopsdays.[14][15] In 2020, they received the Top Ambassador award from the Cloud Native Computing Foundation for spreading interest in the area.[15]

Hacking Kubernetes, published by O'Reilly Media, credits Coldwater and Duffie Cooley for co-developing the "canonical offensive Kubernetes one-liner".[16] In 2020, Coldwater and Brad Geesaman presented a talk at RSA 2020 titled "Advanced Persistence Threats – The Future of Kubernetes Attacks",[17] in which they demonstrated bypassing Kubernetes audit logs and other attacks.[16] In 2021, Coldwater, with expertise from Chad Rikansrud, became the first person in history to escape a container on a mainframe.[10][18]

Personal life

Coldwater lives in Minneapolis, Minnesota.[12] Politically, they identify as an anarchist.[19] Coldwater is non-binary, and uses they/them pronouns.[20]

See also

References

  1. Kennedy, Maddy (April 18, 2019). "100 women you should invite to speak at your next Twin Cities tech event". American City Business Journals. https://www.bizjournals.com/twincities/news/2019/04/18/100-women-you-should-invite-to-speak-atyour-next.html. 
  2. Menn, Joseph (September 9, 2021). "Microsoft warns Azure customers of flaw that could have permitted hackers access to data" (in en). https://www.reuters.com/technology/microsoft-warns-azure-customers-flaw-that-could-have-permitted-hackers-access-2021-09-08/. 
  3. 3.0 3.1 Sharma, Mayank (December 4, 2020). "Docker support is being deprecated in Kubernetes - but not just yet". TechRadar. https://www.techradar.com/news/docker-support-is-being-deprecated-in-kubernetes-but-not-just-yet. 
  4. 4.0 4.1 Coldwater, Ian; Sable, Tabitha; Raghunathan, Savitha; Small, Aaron (May 14, 2021). Get In Containerds, We're Going Securing: Kubernetes SIG Security is Here! (Video). Cloud Native Computing Foundation. Event occurs at 0:10. Archived from the original on July 23, 2021. Retrieved July 23, 2021.
  5. 5.0 5.1 "Ian Coldwater". 2020. https://kccnceu20.sched.com/speaker/ian420. 
  6. 6.0 6.1 Coldwater, Ian (August 6, 2019). "Attacking and Defending Kubernetes, with Ian Coldwater". Kubernetes Podcast (Interview). Interviewed by Adam Glick; Craig Box. Google. Archived from the original on July 23, 2021. Retrieved July 23, 2021.
  7. Combs, Veronica (May 1, 2021). "5 weird, cool things I learned from attending Deserted Island DevOps on Animal Crossing". TechRepublic. https://www.techrepublic.com/article/5-weird-cool-things-i-learned-from-attending-deserted-island-devops-on-animal-crossing/. 
  8. Lima, Cristiano (September 16, 2021). "Why Democrats are rallying around creating a new FTC privacy bureau to police Big Tech". The Washington Post. https://www.washingtonpost.com/politics/2021/09/16/why-democrats-are-rallying-around-creating-new-ftc-privacy-bureau-police-big-tech. 
  9. "Governing Board" (in en-US). https://openssf.org/about/governing-board/. 
  10. 10.0 10.1 "DEFCON29 Speakers". 2021. https://defcon.org/html/defcon-29/dc-29-speakers.html#coldwater. 
  11. "Speaker: Ian Coldwater". https://www.blackhat.com/us-19/speakers/Ian-Coldwater.html. 
  12. 12.0 12.1 "Ian Coldwater". https://www.rsaconference.com/experts/ian-coldwater. 
  13. "Speaker: Ian Coldwater" (in en). 2019. https://conferences.oreilly.com/velocity/vl-ca/public/schedule/speaker/318057.html. 
  14. "Ian Coldwater" (in en-us). https://devopsdays.org/events/2021-minneapolis/speakers/ian-coldwater/. 
  15. 15.0 15.1 Cloud Native Computing Foundation (November 20, 2020). "Cloud Native Computing Foundation Announces 2020 Community Awards Winners". https://www.prnewswire.com/news-releases/cloud-native-computing-foundation-announces-2020-community-awards-winners-301178231.html. 
  16. 16.0 16.1 Martin, Andrew; Hausenblas, Michael (2021). Hacking Kubernetes : threat-driven analysis and defense (First ed.). Sebastapol, CA: O'Reilly Media. ISBN 978-1-4920-8170-8. OCLC 1276934473. https://www.worldcat.org/oclc/1276934473. 
  17. Geesaman, Brad (March 2, 2020). "Advanced Persistence Threats - The Future of Kubernetes Attacks" (in en). https://darkbit.io/blog/future-kubernetes-attacks-rsa-2020. 
  18. "Container Breakout: Cybersecurity Lessons Learned" (in en-US). SHARE. https://blog.share.org/Article/container-breakout-cybersecurity-lessons-learned. 
  19. "@IanColdwater on Twitter". https://twitter.com/IanColdwater/status/1351958584800677888. 
  20. Fee, Nočnica (March 24, 2021). "Inspiring Women in Tech You Should Be Following" (in en). https://newrelic.com/blog/nerd-life/women-in-tech. 

External links

  • {{Twitter}} template missing ID and not present in Wikidata.