Josh Corman
More info
- Founded
- I Am The Cavalry (2013)
- Known for
- Rugged Software, "HD Moore's Law"
The security figure who shifted the debate from data breaches to vulnerabilities that can hurt people: pacemakers, cars and infusion pumps.
Corman co-wrote the Rugged Software manifesto in 2010, an attempt to get developers to treat resilient code as a quality of their own work rather than an edict from the security team. In 2013 he founded I Am The Cavalry, a grassroots effort whose name says most of it: when it comes to connected cars and medical devices, nobody else is riding to the rescue. It pushed guidelines for connected safety-critical products at manufacturers and lawmakers alike.
He coined "HD Moore's Law", after H. D. Moore: if your defences can't stand up to what's in Metasploit, they can't stand up to anyone. He served on the US Health and Human Services task force on healthcare cybersecurity in 2016–2017, and during the pandemic was chief strategist for CISA's COVID-19 task force.