Dr. Anton Chuvakin
VP of Product Management, Cisco Security
I have been doing security since the last century, and I mean that literally: this site went up in 1999. Today I lead product management at Cisco Security. Before that, I spent seven years at Google Cloud, eight years as a Gartner analyst, and a long stretch before that as “the log guy” (yes, my title once was Chief Logging Evangelist).
Most of my thinking now lives on my blog: SOC, detection and response, SIEM (still not dead), and AI in security operations.
- site.createdhost=chuvakin.org
- degree.grantedphd=physicsschool="Stony Brook"
- role.startorg=netForensicstitle="Security Strategist"
- book.publishedtitle="Security Warrior"pub=O’Reilly
- role.startorg=LogLogiclater="Chief Logging Evangelist"
- role.startorg=Qualystitle="Director, PCI Compliance Solutions"
- role.startorg="Security Warrior Consulting"title=Principal
- role.startorg=Gartnertitle="Research Director"later="Research VP"
- book.publishedtitle="Logging and Log Management"pub=Syngress
- book.publishedtitle="PCI Compliance"edition=4
- role.startorg="Google Cloud"via=Chronicle
- podcast.startname="Cloud Security Podcast by Google"
- role.startorg="Cisco Security"title="VP, Product Management"
Where I write now
New posts go to Medium first. Everything older is still online.
-
Anton on Securitymedium.com/anton-on-security
My main blog. SOC, detection engineering, SIEM, AI for security operations, and the occasional rant about all of the above.
-
The original blogchuvakin.blogspot.com
Where my blogging started in the mid-2000s, now also a mirror of Anton on Security. Old securitywarrior.org links still land here.
-
Cloud Security Podcast by Googlecloud.withgoogle.com
I co-hosted it from its launch in 2021 until I left Google. The full episode archive lives on the podcast site.
Books
Three books as an author, a few more as a contributor.
-
2014
PCI Compliance4th edition, Syngress
With Branden Williams. How to understand and implement the PCI Data Security Standard, now four editions in. Book site
-
2012
Logging and Log ManagementSyngress
With Kevin Schmidt and Chris Phillips. The concepts behind logging and log management, from collection to analysis to compliance.
-
2004
Security WarriorO’Reilly
With Cyrus Peikari. Know your enemy, from the attacker’s side. Later translated into German, Polish and Japanese.
I also contributed to Know Your Enemy (2nd edition, The Honeynet Project), the Information Security Management Handbook and several other books.
Bio for event organizers
Third person, about 120 words. Use it as is or trim to fit.
Dr. Anton Chuvakin is Vice President of Product Management at Cisco Security. Before Cisco, he spent seven years at Google Cloud, most recently in the Office of the CISO, after arriving through the 2019 acquisition of Chronicle Security; there he also co-hosted the Cloud Security Podcast by Google. From 2011 to 2019 he was a Research VP and Distinguished Analyst at Gartner, covering SIEM, security operations, and detection and response. Earlier, he ran Security Warrior Consulting, led PCI compliance solutions at Qualys, served as Chief Logging Evangelist at LogLogic, and was a security strategist at netForensics. Anton is the author of Security Warrior, PCI Compliance and Logging and Log Management, and writes the Anton on Security blog. He holds a Ph.D. in physics from Stony Brook University.
- What I speak about now
- Modernizing the SOC, detection engineering, AI agents in security operations, cloud security.
- What I have covered for decades
- SIEM, log management and analysis, UEBA, EDR, network traffic analysis, threat intelligence, vulnerability management, incident response, honeypots, PCI DSS.
The archive
Mostly pre-2011 and kept for the record. Some of it has aged better than I expected.
Talks, 2002–2011
| Year | Talks |
|---|---|
| 2002 | 4 |
| 2003 | 5 |
| 2004 | 9 |
| 2005 | 8 |
| 2006 | 14 |
| 2007 | 27 |
| 2008 | 31 |
| 2009 | 10 |
| 2010 | 14 |
| 2011 | 7 |
Papers, physics and the rest
- Security papers and articles, 2002–2011Log management, SIEM, correlation, security data analysis, PCI DSS, incident response.
- Heavy quark production in variable flavor number schemesMy Ph.D. thesis in physics, Stony Brook, 2001 (PDF).
- Physics papers on arXivIncluding “Evolution program for parton densities with perturbative heavy flavor boundary conditions,” with J. Smith, Comput. Phys. Commun. 143 (2002).
- PhotosThe thesis defense, graduation and other old pictures.
- My old links pageA time capsule from the early 2000s web.
Boards, working groups and memberships
- SANS GIAC Advisory Board
- The Honeynet Project
- Information Systems Security journal, editorial board
- MITRE CEE (Common Event Expression) working group
- SANS courseware author, SEC434 log management class
- SANS/FBI Top 20 Most Critical Internet Security Vulnerabilities, contributor (2002–2007)
- CVSS standard working group (former)
- MITRE OVAL advisory board (former)
- GAISP incident management working group (former)
- AVDL standard effort (former)
- ISSA, CSI and InfraGard (former member)
- Advisory boards of nexTier Networks, Savant Protection, Dasient, eGestalt and Securonix (all former)
Contact
The fastest way to reach me is a LinkedIn message.
Email works too: anton at chuvakin dot org.
Based in San Jose, California.