Computer Security Resource Center, for which he has been the lead author of
several Special Publications (SP), including SP 800-95, the Guide to Secure Web
Services. He has provided support to the DISA Application Security Program,
where he was a primary author of the Java 2 Enterprise Edition Security