Joji Montelibano

Software Engineering Institute

Joji Montelibano is the Technical Manager of the Vulnerability Analysis Team within the CERT® Program at the Software Engineering Institute (SEI), a unit of Carnegie Mellon University in Pittsburgh, PA. He has over 15 years' experience in the fields of software development and network engineering. He began his career developing software for the petroleum and chemical industries, where he created customized simulation programs for companies such as Shell Oil, Sunoco, and Foster Wheeler. Prior to joining CERT, Joji was a Senior Information Security Analyst for the RAND Corporation, where his main projects focused on securing and ensuring the availability of military networks and communications. He holds an undergraduate degree in Chemical Engineering from Stanford University, and Master's degrees from Harvard University and the University of Southern California. He is co-author of three books dealing with military communications - Bits on the Ground: Closing the Gaps in Defense of the Army's Networks (RAND, 2010), Navy Network Dependability: Models, Metrics, and Tools (RAND, 2010), and Finding Services for an Open Architecture (RAND, 2011). Joji holds numerous certifications, including the CISSP, CCNP (Cisco), ACSA (ArcSight), and CSTE (Quality Assurance Institute).

Publications by Joji Montelibano

How We Discovered Thousands of Vulnerable Android Apps in 1 Day

August 18, 2015 • Presentation

Joji Montelibano Will Dormann

In this presentation, we will describe our methodology in discovering these vulnerabilities, and recommend mitigation strategies for both developers and users.
read
NIST Catalog of Security and Privacy Controls, Including Insider Threat

April 24, 2012 • Podcast

Ron Ross (NIST)Joji Montelibano Julia H. Allen

In this podcast, participants discuss why security controls, including those for insider threat, are necessary to protect information and information systems.
learn more
Insider Threat Security Reference Architecture

April 01, 2012 • Technical Report

Joji Montelibano Andrew P. Moore

In this report, the authors describe the Insider Threat Security Reference Architecture (ITSRA), an enterprise-wide solution to the insider threat.
read
Insider Threat Control: Using Centralized Logging to Detect Data Exfiltration Near Insider Termination

October 01, 2011 • Technical Note

Michael Hanley Joji Montelibano

In this report, the authors present an insider threat pattern on how organizations can combat insider theft of intellectual property.
read
Combat IT Sabotage: Technical Solutions From The CERT Insider Threat Lab

February 14, 2011 • Presentation

Dawn Cappelli Joji Montelibano

In this presentation, the authors discuss crime profiles and countermeasures related to insider IT sabotage.
read
An Analysis of Technical Observations in Insider Theft of Intellectual Property Cases

February 01, 2011 • Technical Note

Michael Hanley Tyler Dean Will Schroeder

In this report, the authors provide an overview of techniques used by malicious insiders to steal intellectual property.
read