Clem Skorupka

About Clem Skorupka

Clem Skorupka is a Principal Cybersecurity Engineer and Analyst at the MITRE Corporation. His work has spanned both operations and research, focusing on bringing new techniques and technologies to bear on problems in cyber security. He is co-developer of the CORA Cyber Operations Rapid Assessment methodology, which is used to help organization improve how they collect, share, and utilize cyber threat information. Of late he has been involved in ATT & CK-Based SOC Assessments, and has applied the ATT & CK framework to modeling cyber threats in the financial services sector. He is the principal investigator on a research project applying natural language processing to help automate common cyber threat analyst tasks. Co-author for is a co-author of NIST\'s Special Publication 800-150 \"Guide to Cyber Threat Information Sharing\" http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-150.pdfHe has worked extensively in computer security operations for MITRE, DoD and Intelligence Community environments, and more recently for civilian government sponsors, with a focus on threat intelligence operations, intrusion detection, event response, and perimeter security. Other interests have included log analysis, malware analysis, automation standards for security, and design flaws in software.Clem holds B.S, M.S, and Ph.D. in Physics, and is the recipient of an Office of Naval Technology Postdoctoral Fellowship.Also:Editor in Chief of \"The Regular Expression\", a periodical dedicated to bringing normalization and backtracking to patterns in cyber security news.

Experience

1. Principal Cyber Security Engineer

   MITRE

   Jul 2000 — Present · Bedford, MA, US

   Have worked in a variety of roles in support of cybersecurity engineering and operations.Interested in threat intelligence, and what helps and hinders threat information sharing.Co-PI for CORA Cyber Operations Rapid Assessment.Co-PI for the INCYTE (Intelligent Cyber Threat/Text eXtraction) project, aimed at automating the extraction of cyber indicators and other information from free text, to aid automation and analysis.Have also done my share of grepping.SOC assessmentsThreat IntelligenceATT & CKATT & CK-based SOC assessmentsNow a MITRE ATT & CK Defender (MAD) instructor!

Education

• Clemson University

  PHD, Physics

  1983 — 1989

• Lafayette College

  BS, Physics

  1979 — 1983

• Naval Research Laboratory

  Postdoc, Nonlinear Dynamics of Solid State Systems

  1989 — 1991

Skills

• Intrusion Detection
• Research
• Computer Security
• System Administration
• Malware Analysis
• Mysql
• Network Security
• Tcp/Ip
• Vulnerability Assessment
• Unix
• Information Security
• Security Engineering
• Sql
• Linux
• Matlab
• Analysis
• Physics
• Security
• Enterprise Architecture
• Adult Education
• Requirements Analysis
• Firewalls
• Security Architecture Design
• Operating Systems