Gary McGraw, Cigital, Inc.'s CTO, researches software security and sets technical vision in the area of Software Risk Management. A noted authority on mobile code security, Dr. McGraw chaired the National Infosec Research Council's Malicious Code Infosec Science and Technology Study Group. In addition to consulting with major e-commerce vendors, including Visa, MasterCard, and the Federal Reserve, he has written over sixty peer-reviewed technical publications. Dr. McGraw also functions as principal investigator on grants from Air Force Research Labs, DARPA, National Science Foundation, and NIST's Advanced Technology Program. He serves on the Boards of Counterpane, Finjan, NetCertainty, and Tovaris as well as advising the CS Department at UC Davis. Dr. McGraw is co-author of both Java Security (Wiley, 1996) and Securing Java (Wiley, 1999) with Prof. Ed Felten of Princeton, and Software Fault Injection (Wiley 1998) with Jeffrey Voas. Dr. McGraw holds a dual PhD in Cognitive Science and Computer Science from Indiana University and a BA in Philosophy from UVa. He regularly contributes to popular trade publications and is often quoted in national press articles.