Michal Trojnara

Current

• Penetration Tests Specialist at ABN AMRO

Past

• Technology Risk Analyst at ABN AMRO
• IT Security Expert at PTK Centertel (Orange Poland)
• System Engineer at Daewoo Dacom Communications

see less...

Education

• Politechnika Warszawska
• Politechnika Warszawska
• Politechnika Warszawska

see less...

Recommended

22 people have recommended Michal

Connections

272 connections

Industry

Computer & Network Security

Websites

• My Website
• stunnel home page

Michal Trojnara’s Summary

Security Management: ISO 27001 Lead Auditor qualification
Cryptography: protocols (SSL/TLS, IPsec, SSH, PGP) and algorithms (DES, AES, RSA, DH, EC)
Networking: expert knowledge of TCP/IP internals, firewalls (FireWall-1, IOS Firewall, iptables), routing (OSPF, EIGRP), GSM-related protocols (GTP, UCP)
System Administration: HP-UX, Solaris, MacOS X, Linux, Cisco IOS
Network Servers: Apache, Squid, Postfix, Sendmail, Qmail, Bind, FreeRADIUS, INN
Programming: C/C++, Assembler, Perl, PHP, Python, Shell
Languages: Polish - native, English - fluent - TOEIC 945/990 (gold), Spanish - basic, Russian - basic

Michal Trojnara’s Specialties:

IT security organization and technology, the author of stunnel encrypting proxy

Michal Trojnara’s Experience

• Penetration Tests Specialist

  ABN AMRO

  (Public Company; ABN; Banking industry)

  January 2008 — Present (2 years 1 month)

  Penetration testing of online banking systems worldwide: web applications, client-server applications, network services, operating systems, network infrastructure.
  Reverse engineering: machine code, Java SE/EE, Flash ActionScript.
  Source code review: Java, JavaScript, PHP.

• Technology Risk Analyst

  ABN AMRO

  (Public Company; 10,001 or more employees; ABN; Banking industry)

  November 2006 — December 2007 (1 year 2 months)

  Performed Technology Risk Analyst tasks in Technology Risk Accreditation Process: defined the scope of risk assessments, identified technology risks, and designed cost-effective changes to mitigate identified risks to an acceptable level.
  Performed Operational Risk Assessment of FX/MM applications worldwide including EBS, Reuters and Bloomberg interfaces.
  Co-authored global ABN AMRO IT security strategy: Public Key Infrastructure, Enterprise Identity and Access Management.

• IT Security Expert

  PTK Centertel (Orange Poland)

  (Privately Held; 5001-10,000 employees; Telecommunications industry)

  November 1998 — October 2006 (8 years )

  Developed IT Security Policy based on ISO 17799 standard.
  Designed identity management system, user accountability system and strong authentication solution based on SecurID tokens.
  Designed and implemented a FreeRADIUS module for SMS-based strong authentication.
  Designed security architecture for new systems including GPRS, WAP, Prepaid, Voicemail, SMSC, Lawful Interception (had Top Secret security clearance), Billing, CRM and Self-Care.
  Worked on IT security audit (including penetration testing), incident management and forensics.

• System Engineer

  Daewoo Dacom Communications

  (Privately Held; 51-200 employees; Information Technology and Services industry)

  June 1996 — October 1998 (2 years 5 months)

  Supervised deployment and operations of LAN/WAN for Daewoo car sales in Poland (WAN based on Cisco routers, Frame Relay and VSAT/X.25 links).
  Managed 10 HP-UX/PA-RISC and Solaris/SPARC servers, Informix databases.
  Designed and implemented network perimeter security architecture for the whole Daewoo Corporation in Poland.

Michal Trojnara’s Education

• Politechnika Warszawska

  PhD , Cryptography , 2007 — 2011 (expected)

  PhD thesis in progress on cryptographic hash functions, including SHA-3 competition candidate - StreamHash.

• Politechnika Warszawska

  MSc , Computer Science , 2004 — 2005

  MSc thesis on stunnel cryptographic proxy has won Enigma competition for best thesis in cryptography and information security, 2005.

  Activities and Societies:

  WO@PW

• Politechnika Warszawska

  BSc , Information Systems and Decision Support , 1992 — 2004

Additional Information

Michal Trojnara’s Websites:

• My Website
• stunnel home page

Michal Trojnara’s Interests:

Free Software, Go, photography, Bible

Michal Trojnara’s Groups:

PKN KT182 (national equivalent of ISO/IEC JTC1/SC27) member
FSF (Free Software Foundation) member
FFII (Foundation for a Free Information Infrastructure) member
IEEE (Institute of Electrical and Electronics Engineers) Computer Society member

•    Certified Information Systems Security Professionals (CISSP)
•    ISO-27001
•    PTK Centertel employees (and former ones)
•    ABN AMRO Bank
•    KT Friends & Associates
•    Black Hat
•    Information Security Community
•    VaGla.pl users community group
•    Open Source Universe
•    PaulDotCom Security Weekly
•    Orange Connection
•    Royal Bank of Scotland Group (RBS)
•    E&IT at the Warsaw University of Technology
•    No More Free Bugs
•    Infosecurity magazine - information security community

Michal Trojnara’s Honors:

(ISC)2 Certified Information System Security Professional (CISSP), 2007
ISO 27001 Lead Auditor qualification, 2007
Check Point Certified Security Expert Plus NG (CCSE Plus NG), 2003
RSA Certified Systems Engineer - SecurID (RSA/CSE - SecurID), 2000

Winner of Enigma competition for best thesis in cryptography and information security, 2005
Finalist of Trophées du Libre, 2005