Verisign Labs

Talented, Collaborative and Dedicated

The Verisign Labs team brings a tremendous breadth of expertise and talent.

Danny McPherson

Danny McPherson

Senior Vice President and Chief Security Officer


Biography

As senior vice president and chief security officer, Danny McPherson is responsible for all aspects of security at Verisign, which includes corporate strategy, infrastructure evolution and product direction. Additionally, he represents Verisign in key forums focused on critical infrastructure, network evolution, intelligence and availability. With over 20 years of experience in the Internet network operations, security and telecommunications industries, McPherson brings tremendous technical leadership and operational expertise to the company.

Prior to joining Verisign, McPherson was vice president and CSO at Arbor Networks where he helped lead the company's overall strategy and product architecture. He has also held technical leadership positions in architecture, engineering and operations with Amber Networks, Qwest Communications, Genuity, MCI Communications and the U.S. Army Signal Corps.

McPherson has actively participated in Internet operations and standardization since the early 1990s and has served multiple terms on the Internet Architecture Board (IAB) and the Internet Research Steering Group (IRSG), and has chaired an array of Internet Engineering Task Force (IETF) and other working groups and the IETF’s Nominations Committee. He also serves on the ICANN Security and Stability Advisory Committee (SSAC) and the FCC's Communications Security, Reliability, and Interoperability Council (CSRIC), and regularly speaks at network operations and security forums.

Additionally, McPherson is active in the network and security operations and research communities and has authored several books, an array of Internet protocol standards, network and security research papers and other publications related to Internet and critical infrastructure, routing and networking protocols, cyber security, Internet governance, Internet identifiers and network operations.

Publications

Eric Osterweil, Danny McPherson, Lixia Zhang
The Shape and Size of Threats: Defining a Networked System's Attack Surface. NPSec '14
2014
Publications / Papers
Danny McPherson
Architectural Considerations in Smart Object Networking (I-D wip)
2014
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Route Leak Attacks Against BGPEC (I-D wip)
2014
Requests for Comments (RFC) / Internet Drafts
Aziz Mohaisen, Omar Alrawi, Matt Larson, Danny McPherson
A Methodical Evaluation of Antivirus Scans and Label. WISA 2013
2013
Publications / Papers
Danny McPherson
Architectural Considerations of IP Anycast
2013
Requests for Comments (RFC) / Internet Drafts
Eric Osterweil, Danny McPherson
IPsec’s Appeal: Protecting DNS Under the Covers. Verisign Labs Technical Report
2013
Publications / Papers
Danny McPherson
OSPF Stub Router Advertisement
2013
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Source Address Validation Improvement (SAVI) Threat Scope
2013
Requests for Comments (RFC) / Internet Drafts
Eric Osterweil, S Amante, Danny McPherson
TASRS: Towards a Secure Routing System Through Internet Number Resource Certification, Verisign Labs Technical Report
2013
Publications / Papers
Eric Osterweil, Danny McPherson, L Zhang
The Shape and Size of Threats: Defining Attack Surface. Verisign Labs Tech Report
2013
Publications / Papers
Eric Osterweil, D Massey, Danny McPherson, L Zhang
Verifying Keys through Publicity and Communities of Trust: Quantifying Off-Axis Corroboration. IEEE
2013
Publications / Papers
Jong Han Park, Pei-chun Cheng, Shane Amante, Dorian Kim, Danny McPherson, Lixia Zhang
A Comparative Study of Architectural Impact on BGP Next‐hop Diversity. Computer Communications Workshops (INFOCOM WKSHPS), 2012 IEEE
2012
Publications / Papers
Eric Osterweil, Danny McPherson, Lixia Zhang
A Quantitative Comparison Between X. 509 CA Verification and DANE Via Attack. Verisign Labs Technical Report
2012
Publications / Papers
JH Park, R Oliveira, S Amante, Danny McPherson, L Zhang
BGP Route Reflection Revisited. IEEE Communications Magazine
2012
Publications / Papers
Eric Osterweil, Danny McPherson, Steve DiBenedetto, Christos Papadopoulos, Dan Massey
Behavior of DNS' Top Talkers, a .com/.net View. PAM 2012
2012
Publications / Papers
Danny McPherson
Distribution of Diverse BGP Paths
2012
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
IRR and Routing Policy Configuration Considerations (I-D wip)
2012
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Improving DNS Service Availability by Using Long TTL Values (I-D wip)
2012
Requests for Comments (RFC) / Internet Drafts
Eric Osterweil, Burt Kaliski, Matt Larson, Danny McPherson
Reducing the X.509 Attack Surface with DNSSEC’s DANE. SATIN 2012
2012
Publications / Papers
Danny McPherson
Secure Inter-domain Routing BGPSEC Simple Leak Attack (I-D wip)
2012
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Defining the Role and Function of IETF Protocol Parameter Registry Operators
2011
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Dissemination of Flow Specification Rules for IPv6 (I-D wip)
2011
Requests for Comments (RFC) / Internet Drafts
C Labovitz, S Iekel-Johnson, Danny McPherson, J Oberheide, F Jahanian
Internet Inter‐Domain Traffic. ACM SIGCOMM Computer Communication Review 41
2011
Publications / Papers
Eric Osterweil, Danny McPherson, Lixia Zhang
Operational Implications of the DNS Control Plane. IEEE Reliability Society Newsletter
2011
Publications / Papers
JH Park, P Cheng, S Amante, D Kim, Danny McPherson, L Zhang
Quantifying i-BGP Convergence inside Large ISPs. UCLA
2011
Publications / Papers
Eric Osterweil, Shane Amante, Danny McPherson, Dan Massey
The Great IPv4 Land Grab: Resource Certification for the IPv4 Grey Market. Proceedings of HotNets-X
2011
Publications / Papers
Danny McPherson
The Great IPv4 Land Grab; Resource Certification For the IPv4 Grey Market. HotNets‐X ACM Workshop
2011
Publications / Papers
Danny McPherson
Trends in Web Applications and the Implications on Standardization (I-D wip)
2011
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Unique Origin Autonomous System Numbers (ASNs) per Node for Globally Anycasted Services
2011
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Arbor’s Security Engineering and Response Team (ASERT) Blog
2010
Publications / Papers
Danny McPherson
Availability in the Face of Evolving Internet Threats. IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
2010
Presentations / Panels
C. Labovitz, S. Iekel-Johnson, Danny McPherson, J. Oberheide, F. Jahanian
Internet traffic and content consolidation, Proceedings of the Seventy Seventh Internet Engineering Task Force Meeting
2010
Publications / Papers
JH Park, D Jen, M Lad, S Amante, Danny McPherson, L Zhang
Investigating Occurrence of duplicate updates in BGP announcements. Passive and Active Measurement
2010
Publications / Papers
Danny McPherson
Towards a Systematic Understanding of Route Reflection. UCLA Technical Report #100006
2010
Publications / Papers
JH Park, R Oliveira, S Amante, Danny McPherson, L Zhang,
Towards a systematic understanding of route reflection. UCLA Technical Report 100006
2010
Publications / Papers
C Labovitz, S Iekel-Johnson, Danny McPherson, J Oberheide, F Jahanian, Manish Karir
Atlas Internet Observatory 2009 Annual Report
2009
Publications / Papers
Danny McPherson
BGP Scalability Considerations. NANOG 46
2009
Publications / Papers
Danny McPherson
Dissemination of Flow Specification Rules
2009
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Dynamic Hostname Exchange Mechanism for OSPF
2009
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Remote Triggered Black Hole Filtering with Unicast Reverse Path Forwarding (uRPF)
2009
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Simplified Extension of Link State PDU (LSP) Space for IS-IS
2009
Requests for Comments (RFC) / Internet Drafts
Danny McPherson, S Amante, L Zhang
The Intra-domain BGP Scaling Problem. RIPE 58
2009
Publications / Papers
Danny McPherson
Tracking the IPv6 Migration. Arbor Networks Technical Report
2009
Publications / Papers
H Ringberg, C Labovitz, Danny McPherson, S lekel-Johnson
A One Year Study of Internet IPv6 Traffic
2008
Publications / Papers
Danny McPherson
Dynamic Hostname Exchange Mechanism for IS-IS
2008
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
IPv4 Exhaustion:Trading Autonomy For Security. Arbor Blog
2008
Publications / Papers
Danny McPherson
ISP Route Filtering: Responsibilities and Technical Challenges. NANOG 43
2008
Publications / Papers
Danny McPherson
The Intra‐domain BGP Scaling Problem. GROW WG of IETF 73
2008
Publications / Papers
Danny McPherson, C Labovitz, M Hollyman, J Nazario, GR Malan
Worldwide Infrastructure Security Report
2008
Publications / Papers
Danny McPherson
AS Confederations for BGP (RFC 5065)
2007
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
BGP MULTI_EXIT_DISC (MED) Considerations
2006
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Deployment Experience with BGP Flow Specification. NANOG 38
2006
Publications / Papers
Danny McPherson
Experience with the BGP-4 Protocol (RFC 4277)
2006
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
PWE3 Control Word for use over an MPLS PSN (RFC 4385)
2006
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Protecting the Infrastructure. EuSecWest/CanSecWest
2006
Publications / Papers
Danny McPherson
Pseudowire Emulation Edge-to-Edge (PWE3) Control Word for Use over an MPLS PSN
2006
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
BGP Security Techniques. APRICOT 2005
2005
Publications / Papers
Danny McPherson
Infrastructure Attack Detection & Mitigation Methodologies. ACM SIGCOMM
2005
Publications / Papers
E Cooke, F Jahanian, Danny McPherson
The Zombie Roundup: Understanding. Detecting. and Disrupting Botnets. Proceedings of the USENIX SRUTI Workshop
2005
Publications / Papers
Danny McPherson
Customer‐triggered Real‐Time Blackholes. NANOG 30
2004
Publications / Papers
Russ White, Danny McPherson, Srihari Sangli
Practical BGP
2004
Publications / Papers
Danny McPherson
Recommendations for Interoperable IP Networks using IS‐‐IS (RFC 3787)
2004
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Recommendations for Interoperable Networks Using IS-IS (RFC 3719)
2004
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Requirements for Pseudo-Wire Emulation Edge-to-Edge (PWE3)
2004
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Sinkhole Networks. CanSecWest
2004
Publications / Papers
E Cooke, M Bailey, ZM Mao, D Watson, F Jahanian, Danny McPherson
Toward Understanding Distributed Blackhole Placement. Proceedings of the 2004 ACM Workshop on Rapid Malcode
2004
Publications / Papers
M Bailey, E Cooke, T Battles, Danny McPherson
Tracking Global Threats with the Internet Motion Sensor. NANOG 32
2004
Publications / Papers
Danny McPherson
Good MEDs Gone Bad! NANOG 29
2003
Publications / Papers
Danny McPherson
Border Gateway Protocol (BGP) Persistent Route Oscillation Condition
2002
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
IS-IS Transient Blackhole Avoidance (RFC 3277)
2002
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Intermediate System to Intermediate System (IS-IS) Transient Blackhole Avoidance
2002
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
L2TP Differentiated Services Extension (RFC 3308)
2002
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Layer Two Tunneling Protocol (L2TP) Differentiated Services Extension
2002
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Autonomous System Confederations for BGP
2001
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Bolstering IP Routers for High Availability. Communication System Design
2001
Publications / Papers
Danny McPherson
OSPF Stub Router
2001
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
VLAN Aggregation for Efficient IP Address Allocation
2001
Requests for Comments (RFC) / Internet Drafts
Sam Halabi, Danny McPherson
Internet Routing Architectures
2000
Publications / Papers
Danny McPherson
Using 31-Bit Prefixes on IPv4 Point-to-Point Links
2000
Requests for Comments (RFC) / Internet Drafts
Danny McPherson
Providing next generation internet services, Aerospace Conference IEEE
1999
Publications / Papers

团队介绍