Avatar

Graham Holmes

Director

Advanced Security Initiatives Group

Graham Holmes joined Cisco Systems in 1997 and has had a distinguished career that has included over twenty years of technical management experience. As Senior Director of the Advanced Security Initiatives Group, Graham is responsible for leading Cisco security assessment teams that focus on identifying and mitigating product and services security weaknesses and vulnerabilities, defining the requirements for secure development in Cisco, and for performing forensic analysis of Cisco products as part of customer incident response efforts. His team focuses on Cisco products, systems, and cloud offerings through attack focused evaluations, red-teaming, and pen-testing efforts. They develop novel methods to discover and enumerate weaknesses efficiently and effectively in order to stay ahead of emerging threats in the cyber realm. In addition, he leads teams defining the technologies, requirements, and processes that Cisco uses to develop secure products (Cisco Secure Development Lifecycle).

Prior to his current role, Graham worked as Director of the Cisco Research Center, led Business Development efforts focused on National Research Networks, and was a Product Line Manager for Enterprise Network Management products.

Graham served as a Naval Officer from 1984 to 1993. He graduated from Purdue University with a Bachelors of Science in Political Science and went on to complete his Masters degree in Systems Technology from the Naval Postgraduate School.

Articles

November 2, 2015

SECURITY

Trustworthy Systems: A Peek Behind the Curtain

4 min read

In a recent post, “Evolution of attacks on Cisco IOS devices”, we discussed how threats against network devices have evolved. There was no evidence that a remote attack vector or vulnerability in Cisco IOS was related to these attacks. This reinforces the value of creating more hardened and resilient systems. The strategy for creating more […]

October 8, 2015

SECURITY

Evolution of attacks on Cisco IOS devices

7 min read

While “SYNful Knock” is the latest identified malware targeting Cisco devices running Cisco IOS, we have identified and investigated six other malware incidents during the last four years that target Cisco devices running Cisco IOS. The nature of threats is evolving and Cisco will continue to adapt technology delivering trustworthy solutions that our customers can […]