SSAC Members

(06/2023)

Merike Kaeo is the Executive Security Advisor and Virtual CISO at Double Shot Security. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives.

Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep-rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought-after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient, and safe digital environments.

In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber-attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future.

She holds a MSEE from George Washington University and a BSEE from Rutgers University. She has been a member of SSAC since 2010 and served as the SSAC's non-voting liaison to the ICANN Board of Directors from 2018-2021.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): Executive Security Advisor / vCISO at Double Shot Security
2. Please identify the type(s) of work performed at #1 above: Review and assess organizational security posture and create comprehensive security startegies for organizations.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary. None
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: None
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years. From July thru September 2022 a contract with ICANN to help faciliate the internal feasibility assessment within ICANN of the DNS Facilitation Initiative Technical Study Group.
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No

(06/2021)

Jacques Latour is the Chief Technology and Security Officer at the Canadian Internet Registration Authority (CIRA). As an expert in developing innovative, leading-edge IT solutions, Jacques has established CIRA as a global leader among country code top-level domain (ccTLD) registries. His 30+ years of experience in the private and not-for-profit sectors afford him a unique perspective, from research and development and software development to IT operations and business development.

Jacques is currently responsible for the mission-critical architecture of the .CA ccTLD. In this role, he provides leadership and direction for the management and security of the .CA registry and its underlying DNS, critical components of Canada's national Internet infrastructure.

As head of CIRA Labs, Jacques focuses on developing innovative solutions for the emerging digital identity trust registries within the DNS, leveraging DNSSEC and DANE technologies. He is a leader in the Pan-Canadian Trust Framework (PCTF) Trust Registry working group within DIACC and a member of the Trust over IP foundation (ToIP) Trust Registry working group, working to create a digital identity ecosystem that all Canadians can trust.

A visionary in the Internet community, Jacques is committed to the development of a new Canadian Internet architecture. Under his direction in 2012, CIRA spearheaded the development of a national, robust network of Internet Exchange Points (IXPs) to diminish Canada's unnecessary dependence on out-of-country infrastructure, enhance domestic Internet performance, and decrease costs.

Jacques has also played a central role in the modernization of the .CA top-level domain. He led the wholesale rewrite of the .CA registry system, updating and simplifying every aspect of the registry from its technological processes to its policies and business practices. In 2014, he implemented DNSSEC at CIRA, enhancing the security of Canada's online identifier. Committed to the development of a resilient Canadian internet architecture, Jacques co-chairs the Internet Resilience Working Group (IRWG) and the Canadian Cyber Resilience Working Group (CCRWG) within ISED's Canadian Forum for Digital Infrastructure Resilience (CFDIR).

Jacques has been active in the ccTLD registry community, the ccNSO and ICANN as a whole. He participates actively in the planning of the ccNSO's 'Tech Day' and the SSAC DNSSEC & Security Workshops, is chair of the ICANN TLD-OPS standing committee. He believes that the SSAC would benefit from his deep knowledge of ccTLD Registry operations, DNS architecture and Internet security and the many relationships that he has developed over the years.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s).
   • Canadian Internet Registration Authority (CIRA), Chief Technology and Security Officer (CTSO)
2. Please identify the type(s) of work performed at #1 above.
   • Provides leadership and direction for the management and security of the .CA ccTLD registry and its underlying DNS, critical components of Canada's national Internet infrastructure.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary.
   • Chair of ccNSO TLD-OPS Standing Committee
   • Co-chair ISED CFDIR Internet Resiliency Working group
   • Member – DIACC PCTF Trust Registry Design Team
   • Member – Trust over IP foundation
4. Please list any financial or other material relationship beyond de minimus stock ownership that you, your employer, or an immediate family member/significant other has with ICANN or with any individual, company, or other entity that to your knowledge has a current or planned financial or other material relationship with ICANN.
   • CIRA is the ccTLD registry for .CA and is an ICANN accredited Registry Services Providers for gTLDs and EBERO services. As a Canadian not-for-profit membership-based corporation, CIRA issues no shares. Neither my family nor I have any financial or material relationships with ICANN. I am unaware of any such financial or material relationships on the part of CIRA.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years.
   • CIRA is the ccTLD registry for .CA and is an ICANN accredited Registry Services Providers for gTLDs and EBERO services. Neither my family nor I have any financial or material relationships with ICANN. I am unaware of any such financial or material relationships on the part of CIRA.
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s)
   • No

(05/2023)

Barry Leiba has been a Director of Internet Standards at Futurewei Technologies since 2009. Before that he was a Senior Technical Staff Member at IBM's Research Division and worked for IBM since 1977. He's worked on email and related technology since the early 1980s, and currently focuses on the "Internet of Things", messaging and collaboration on mobile platforms, security and privacy of Internet applications, and Internet standards development and deployment. Barry has been active in the Internet Engineering Task Force since the mid 1990s; is an author of a number of proposed standards; has chaired many working groups in the Applications and Security Areas; is the IETF liaison to the Messaging Mobile and Malware Anti-Abuse Working Group (M3AAWG); and has served on the Internet Engineering Steering Group (IESG) as Applications Area Director, and on the Internet Architecture Board (IAB). He is Associate Editor-in Chief of IEEE Internet Computing magazine, in charge of departments and columns, including the "Standards" department. He is a member of the Internet Society Board of Trustees.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): Futurewei Technologies, Director, Internet Standards.
2. Please identify the type(s) of work performed at #1 above: Internet technology and standards.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary: I am on the Internet Society Board of Trustees. I am an Associate Editor in Chief of IEEE Internet Computing magazine. I am a Senior Technical Advisor at M3AAWG, and the IETF liaison to M3AAWG.
4. Please list any financial or other material relationship beyond de minimis stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: None.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years. In 2022 I did the RSTEP evaluation when. bank and. insurance added DMARC records. I was also the fiscal sponsor for Tim Wicinski's KINDNS project
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No.

(05/2023)

John R. Levine writes, speaks, and consults on the Internet, electronic mail, cybersecurity, and related topics. He is a Senior Technical Advisor to M3AAWG (the Messaging, Malware, Mobile Anti-Abuse Working Group) and a regular participant in the IETF, the author or co-author of 14 RFC documents.

He's written many books on the Internet and other computer topics. His books range from the best-selling "Internet for Dummies," with over seven million copies of fourteen editions in print in dozens of languages, to books on computer language tools including "Linkers and Loaders" and "flex and bison."

He speaks to many trade, policy, and general groups. He's testified at the Federal Trade Commission Spam Forum on the mechanics of spam, to the U.S. Senate Commerce Committee on spyware, was part of the Industry Canada Task Force on Spam and helped create Canada's Anti-Spam Law. He's provided legal consulting on Internet and software intellectual property cases for many industrial clients, and for the governments of the United States, Canada, and New Zealand.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): Self-employed, doing business as Taughannock Networks and as Standcore LLC
2. Please identify the type(s) of work performed at #1 above: Consulting and software development.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary: President, CAUCE North America (unpaid)
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: I am a small Tucows' domain reseller, and Standcore has done contract R&D for ICANN. I have a fixed-term contract with the IETF LLC as Temporary RFC Series Project Manager. I have a fixed-term contract with the IETF LLC as Temporary RFC Series Project Manager.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years. In 2022 I did the RSTEP evaluation when. bank and. insurance added DMARC records. I was also the fiscal sponsor for Tim Wicinski's KINDNS project
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No.

(05/2023)

Danny McPherson is Executive Vice President, Engineering, Operations and Chief Security Officer (CSO) at Verisign, where he is responsible for all aspects of the company's information systems and services, as well as information and corporate security. Additionally, he represents Verisign in key forums focused on critical infrastructure, engineering, research, security, and online trust. Prior to joining Verisign in 2010, Danny was vice president and CSO at Arbor Networks, where he developed solutions to detect and mitigate cyberattacks. Before that, he held technical leadership positions in architecture, engineering, and operations with Nokia (formerly Amber Networks), Lumen Technologies (formerly Qwest Communications), Genuity, Verizon (formerly MCI Communications) and as a principal in the United States Army Signal Corps (USASC).

Danny has actively participated in internet operations and standardization since the early 1990s. He is currently a member of the Internet Corporation for Assigned Names and Numbers' (ICANN) Security and Stability Advisory Committee (SSAC), as well as the U.S. Federal Communications Commission's (FCC) Communications Security, Reliability and Interoperability Council (CSRIC) and the International Security Management Association (ISMA), and has served on the Internet Architecture Board (IAB), the Internet Research Steering Group (IRSG), the U.S. Department of Homeland Security's Cybersecurity Subcommittee, as well as the Online Trust Alliance (OTA) board of directors. He has chaired an array of Internet Engineering Task Force (IETF) and other working groups and committees in these and related forums. Danny is an active contributor in the network and security operations, and research communities. He has authored and contributed to multiple books, numerous patents and internet protocol standards, and network and security research papers, among other publications.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): VeriSign, Inc., Executive Vice President Engineering, Operations and Chief Security Officer (CSO).
2. Please identify the type(s) of work performed at #1 above: All aspects of information and infrastructure engineering, operations, security, resiliency, cyber security, enterprise risk management, and compliance. Also engaged in Internet standards and research and development activities.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary: Verisign is a contracted party with ICANN. More information about Verisign can be found in its public filings, available at verisign.com. No immediate family member and/or significant others have any financial or other interest in ICANN including any ICANN policy, program, process, or anything related to ICANN or the ICANN community.
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: Verisign is my sole employer. Verisign is a contracted party with ICANN. More information about Verisign can be found in its public filings, available at verisign.com. No immediate family member and/or significant others have any financial or other interest in ICANN including any ICANN policy, program, process, or anything related to ICANN or the ICANN community
5. Verisign, my employer, is a registry operator for .com and other gTLDs and is the root zone maintainer on behalf of ICANN (or its subcontractor) for the IANA root. As such, Verisign, and ICANN (or its subcontractor) engage in business transactions via registry agreements, a letter of intent, and the root zone maintainer services agreement. Some of these agreements have been amended, renewed, or entered within the last 5 years.
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s). No.

(05/2023)

Mr. Mundy has worked in communications, security, and computer networking since the 1970's. His current position is the Principal Networking Scientist at Parsons where he leads a group engineers, researchers and developers whose primary focus is improving the security of Internet infrastructure technologies.

Much of Mr. Mundy's early career was with the U.S. Department of Defense (DoD) where his responsibilities involved many aspects of design, engineering, security and operations of communications and computer networks. Mr. Mundy was involved with the DoD's decision to use ARPAnet technology as the basis for DoD's operational data network. As the first large-scale operational use of technology that is now known as Internet, Mr. Mundy was involved with creation and evolving of DNS, several routing protocols, remote network management as well as sponsoring the fledgling Internet Engineering Task Force (IETF). Mr. Mundy's last position in the DoD was as Chief Scientist for the U.S. DoD's Defense Data Network.

After leaving the U.S. DoD, Mr. Mundy took a position with Trusted Information Systems (TIS) as a senior research scientist where he led and conducted research in the areas of Internet infrastructure security, network security, trusted operating systems and protocol development. The group currently led by Mr. Mundy was initially formed at TIS with the mission of improving the security of the Internet infrastructure. This group has been involved with purchases several times and is now part of Parsons. Mr. Mundy and his group has been involved with most aspects of DNSSEC from its earliest days including writing the first implementation and providing IETF Working Group leadership. Mr. Mundy was also instrumental in creation and standardization of SNMPv3 as the Chair/CoChair of the IETF SNMPv3 Working Group as well as providing two implementations of the protocol. He has also conducted research in the areas of routing security and integration of computing and cryptographic technologies.

Russ has been engaged with a number of ICANN activities for many years including being an original member of SSAC. Some of these activities include being one of the SSAC representatives to the IANA Functions Stewardship Transition Coordination Group, participation in the NomCom, Root Zone Evolution Review Committee (RZERC), ICANN Academy Leadership Program as well as the SSAC Liaison to the Root Server System Advisory Committee (RSSAC). Additionally, he was one of the original organizers of the DNSSEC and Security Workshops that have provided technical education and outreach for the community during ICANN meetings.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s). Employers: Internet Infrastructure Consultancy (IIC)/tislabs. Position: Principal Networking Scientist
2. Please identify the type(s) of work performed at #1 above: IIC provides consultancy services for various activities including occasional work for ICANN and its stakeholders.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary: I do not currently hold any such positions.
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: IIC provides occasional consultant input to ICANN.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years: During the last 5 years, ICANN partially funded a research report titled "The Creation and Administration of Unique Identifiers, 1967-2017" that provides detailed descriptions of early as well as current unique identifiers used by the Internet.
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No.

(05/2023)

Rod Rasmussen is a retired cybersecurity leader, who occasionally performs short-term consulting and research work in cybersecurity. This includes volunteer work for the Anti-Phishing Working Group (APWG) and other industry organizations.

Prior to retirement, Rasmussen co-founded IID and was the company's lead technology development executive. IID was purchased by Infoblox in 2016, and Rasmussen retired in early 2017. He is widely recognized as a leading expert on the abuse of the domain name system by criminals. Rasmussen is co-chair of the Anti-Phishing Working Group's (APWG) Internet Policy Committee and serves as the APWG Industry Liaison, representing and speaking on behalf of the organization at events around the world. Rasmussen is a member of the Online Trust Alliance's (OTA) Steering Committee. He is a member of the FCC's Communications Security, Reliability, and Interoperability Council (FCC CSRIC). Rasmussen is also an active participant in the Messaging Malware Mobile Anti-Abuse Working Group (M3AAWG) and has served as IID's Forum of Incident Response and Security Teams (FIRST) representative. He is a regular participant in DNS-OARC meetings, the worldwide organization for major DNS operators, registries and interested parties, and in ICANN's series of DNS Security, Stability, and Resiliency Symposiums. Rasmussen earned an MBA from the Haas School of Business at UC-Berkeley and holds two bachelor's degrees, in Economics and Computer Science, from the University of Rochester. He has worked in both government (the Congressional Budget Office) and various computer communications and networking companies throughout his career.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): None – retired
2. Please identify the type(s) of work performed at #1 above: N/A
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary: I am on the corporate board and am an investor in CleanDNS, a company that provides services to mitigate DNS Abuse who customers in the domain registration industry, cybersecurity industry and may do work for ICANN from time to time.
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: None.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years: N/A
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)?Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No.

(05/2023)

Doron Shikmoni is co-founder of ForeScout Technologies, Inc., a privately held (previously NASDAQ: FSCT) company providing security solutions for the Enterprise of Things.

He is co-founder and former president of ISOC-IL, the Israeli Internet Association, which, among other things, is the domain name registry for the .il ccTLD and founder and operator of IIX – the Israeli Internet Exchange.

Doron has been involved in cyber security and networking for over 40 years. He has spent many years in the academic networking arena and was one of the networking pioneers in Israel (BITNet/EARN, ARPAnet/Internet) since the early 1980s. In his public service, he provides guidance to the Israeli domain name registry and the Israeli Internet Exchange.

Shikmoni has been providing security and networking consulting for numerous government and private sector entities. Main architect of the Israeli government's Internet operation and secure gateways, instrumental in the Israeli eID scheme, and assisting the Ministry of Justice and the Knesset (parliament) in legislation (e.g., Electronic Signature Law, Spam Law) and various committees, – to name a few. He is a member of various committees in the SII – the Standards Institute of Israel.

Doron has been involved in the ICANN process and has been a member of SSAC since its inception. He served as chair for the ICANN RZ-LGR effort for the Hebrew script.

Disclosure of Interest:

1. Please identify your current employer(s) and position(s): Self Employed; Israel Internet Association (ISOC-IL) – Co-Founder; Adviser to registry and IIX staff (informal, volunteer).
2. Please identify the type(s) of work performed at #1 above: Consultant, mentor, ISOC-IL – Guidance / consultation relating to the .il ccTLD registry and the Israeli Internet Exchange.
3. Please identify any board or committee positions that you hold that might be perceived as influencing your expressed point of view, irrespective of whether they are voluntary. None
4. Please list any financial or other material relationship beyond de minimus stock ownership that you or your employer has with any individual, company, or other entity that to your knowledge has a financial or other material relationship with ICANN: None. ISOC-IL is the registry for the ccTLD for Israel. It makes an annual contribution to ICANN.
5. Please list any business transactions that you, your employer, or an immediate family member/significant other has had with ICANN within the last 5 years. None
6. Is your participation as an SSAC member the subject of any arrangements or agreements between you and any other group, constituency, or person(s)? Please answer "yes" or "no." If the answer is "yes," please describe the arrangements or agreements and the name of the group, constituency, or person(s): No.