CDO Technical Steering Committee

The Technical Steering Committee (TSC) will be responsible for all technical oversight of the open source Project in accordance with project policy and foundational principles.

Chair, Non-profit Participant

Cory Hall

Project VIC International

Cory Hall is a technologist and board member at Project VIC International, a US-based charity that discovers, creates, evaluates, and transitions technologies to the law enforcement community for use to find and rescue children from sexual exploitation (projectvic.org). Formerly he was a Group Leader, Project Leader, and Principal Cybersecurity Engineer at the MITRE Corporation where he led research teams to develop capabilities for cyber-domain analysis, to create machine learning applications for studying cybercrime data, and to develop new digital forensic examination methods. He has an MS in cybersecurity and a BS in information technology. He is a member of several INTERPOL-led digital investigative groups, as well as the American Academy of Forensic Science, the Digital Forensic Research Workshop, and other organizations. Cory previously led several cybersecurity teams at Lockheed Martin, following earlier roles in cybersecurity and systems engineering roles. Cory served as a musician and systems technician in the US Army. Since 2017, Cory’s contributions to this community have centered on governance and resource management, adding new application domain ontologies, and fostering community involvement and adoption initiatives.

Vice-Chair, Gov Participant

Alex Nelson

National Institute of Standards & Technology

Dr. Alex Nelson is a Computer Scientist at NIST, working on research in security automation and contributing to the National Vulnerability Database. Dr. Nelson has a dual B.A./B.S. in Mathematics and Computer Science from The Evergreen State College, and a M.S. and Ph.D. in Computer Science from the University of California, Santa Cruz. Dr. Nelson's research emphasizes foundational measurability of digital forensic processes. Dr. Nelson served as the inaugural CASE Ontology Committee Chair, currently serves as the UCO Ontology Committee Chair, and has had substantial input and experience in the CDO Adoption Committee. Dr. Nelson is a coauthor on multiple CASE publications, and has established many policies to enable the CDO ontologies' release processes and resource development.

Academia Participant

Eoghan Casey

University of Lausanne

Eoghan Casey is professor of Digital Forensic Science and Investigation in the School of Criminal Sciences at the University of Lausanne, and is a partner in Digital Forensics Solutions. He has extensive experience working in digital forensic laboratories in the public and private sectors, and he has analyzed many types of digital evidence to support complex cases. He has consulted globally with many attorneys, agencies, and police departments on a wide range of digital investigations, and he has helped organizations investigate and recover from severe security breaches, including network intrusions with international scope. He has helped develop new capabilities for extracting and analyzing digital evidence, including smartphones and networks. He has delivered expert testimony in civil and criminal matters in the United States, Canada, and international tribunals, and has submitted expert reports and prepared trial exhibits for computer forensic and cyber-crime cases. He is also an active member of the Digital/Multimedia Scientific Area Committee (DMSAC) of the NIST Organization for Scientific Area Committees (OSAC).

Government Participant

Paul Brandt

Dutch Police

MSc. computer science from Delft University of Technology, currently holding positions as Sr. Ontologist / Semantic Architect at Dutch Police and Researcher with the Eindhoven University of Technology TU/e. Conducted research on ophthalmologic instrumentation and magnetic resonance imaging techniques (University Medical Centre Utrecht), on flight test instrumentation, air traffic management and satellite navigation (National Aerospace Laboratory NLR), on (mobile) information provisioning techniques, component based and service oriented architectures, semantic interoperability (TNO). Got interested in semantics in 2000 when XML came around; built expertise in semantic architectures and ontology engineering since 2010 with a part-time PhD research in Semantic Interoperability. Whenever possible teaching guest lectures on universities and stimulating and supporting students in their master graduation and post-master research.
Expertises - Semantic interoperability, semantic web, ontologies and ontology engineering, sensor networks, ICT architectures, service oriented architectures by web services and/or REST, complex event processing, requirements analysis, Scrum master & agile coach.
Question - you know the difference between an otological model and a logic data model? If you want to know the distinction, get in touch!

For-profit Participant

Martin Westman

MSAB

Martin has worked in the mobile device technology field since 1994. Before Martin started working for MSAB in 2004, before that he was working with consumer hardware manufacturers as product manager. During these years, Martin was part of Bluetooth Special Interest Group (SIG) and involved in creating the Bluetooth standard. He was also part of the team creating and implementing the EXIF standard. In 2004 Martin started working for MSAB as a mobile forensic specialist trainer. Having delivered more than a hundred training courses globally, Martin is well recognized in the digital forensic industry. Whilst mobile forensics is his main field of expertise, he has a longstanding awareness of digital and cyber forensics, and the challenges encountered in the industry. Martin has held many roles within MSAB over the last 16 years, bouncing back and forth between sales and development, and he is currently working as TechSales manager. He also oversees the work being done in Research and Development on the physical extraction and decryption capabilities in XRY, along with more specialized products for device penetration. Martin has a long history of leading workshops for government organizations and presenting at forensics conferences and seminars - HTCIA, F3, DC3, Mobile Forensics World, Techno Forensics and the Crimes Against Children Conference, to name a few. Martin is also part of the Interpol Digital Forensics Expert Group and has on several occasions, assisted law enforcement and government agencies in successfully acquiring mobile data from challenging and complex high-profile cases to support major investigations. Martin is also the only known person to have successfully completed a forensic extraction of a phone whilst in freefall. He once combined skydiving with mobile forensics and recorded the moment - to invent a new sport called extreme hexdumping. So far there is only one practitioner.

For-profit Participant

Patrick Maroney

AT&T

Patrick Maroney is a cybersecurity leader and Principal at AT&T, where he focuses on advancing cyber threat intelligence (CTI), knowledge engineering, and large-scale interoperability across security platforms. He is widely recognized as an evangelist and thought leader in the development and adoption of consensus-driven international standards for CTI and cyber data exchange. Patrick has extensive experience designing and operationalizing systems that enable the normalization, correlation, and automated sharing of threat intelligence across heterogeneous environments. His work emphasizes practical, scalable approaches to integrating diverse cybersecurity tools, data models, and workflows. He is an active contributor to multiple OASIS Open standards initiatives, including STIX, TAXII, TAC, and OpenC2, and has played a key role in advancing community-driven approaches to interoperability and machine-readable cyber knowledge representation. His interests include ontology-driven architectures, temporal knowledge graphs, and agentic AI applied to cyber defense. Patrick regularly collaborates across industry, government, and open-source communities to promote the adoption of interoperable frameworks aligned with the Unified Cyber Ontology (UCO) and broader Cyber Domain Ontology (CDO) ecosystem.

Non-profit Participant

Sean Barnum

MITRE

Sean Barnum is a Senior Principal Cyber Strategist at MITRE with over three decades of experience spanning cybersecurity strategy, knowledge architecture, and international standards development. He conceived, architected and led the initial development of the Unified Cyber Ontology (UCO) and the Cyber-investigation Analysis Standard Expression (CASE), and continues to drive their technical evolution, maturation and adoption. Sean also conceived and led the collaborative development of the Structured Threat Intelligence eXpression (STIX) and Cyber Observable eXpression (CybOX) language standards, and played a key role in the design of the Malware Attribute Enumeration and Characterization (MAEC) standard. He has served as a principal technical advisor to the US Cyber Centers through the Enhanced Shared Situational Awareness (ESSA) program and provided strategic input to the development of the MITRE ATT&CK framework. Previously, as Principal Architect for Knowledge Architecture at FireEye, he designed and maintained a comprehensive integrated ontology model and contributed to international standards efforts within OASIS including STIX, TAXII, OpenC2, and CSAF. Earlier in his career, Sean conceived and led the development of the Common Attack Pattern Enumeration and Classification (CAPEC) and the Common Weakness Enumeration (CWE) while at Cigital Federal. He has represented US government interests in numerous international standards bodies including ISO, OMG, OASIS, IETF, and ITU-T, and has extensive experience in knowledge engineering, information architecture, and cyber risk management.

Academia Participant

Vahid Behzadan

University of New Haven

Vahid Behzadan is an Associate Professor in Computer Science and Data Science. He is also the founder and director of the Secure and Assured Intelligent Learning (SAIL) research group, and mentors the University's hacking team. Dr. Behzadan's research is primarily on the safety and security of artificial intelligence and complex adaptive systems. His pioneering work on the security of deep reinforcement learning is recognized as seminal contributions to this growing field of research. Dr. Behzadan's recent work includes publications on the applications of machine learning to security and safety assessment of complex systems, such as driverless cars, unmanned aerial systems, and smart cities. He has presented numerous invited talks on the security of machine learning, and applications of data science in cybersecurity at venues such as the Open Web Application Security Project (OWSAP) foundation, the Black Hat conference, and UK's Transportation Research Laboratory (TRL). His research on the psychopathological approach to AI safety has been featured in national and international news. In 2023, Dr. Behzadan was appointed to the new Connecticut Artificial Intelligence Working Group by Governor Ned Lamont.

For more information on the TSC composition and responsibilities refer to the Community Charter.