Richard Johnson is a computer security specialist with a focus on software vulnerability analysis. Currently the Director of Security Research for Oracle Cloud Infrastructure and owner of Fuzzing IO, a research and development company offering professional training services, Richard offers 20 years of professional expertise and leadership in the information security industry. Professional responsibilities include defining and executing on a proactive offensive security research strategy for a world leading cloud infrastructure and development team at Oracle. This work encompasses all parts of the cloud stack including hardware validation on third party components; zeroday research on hypervisors, kernels, and third-party code; and deep dives on the proprietary services offered to end users.
Prior to Oracle, Richard led the security research efforts for the Talos Security Intelligence and Research Group at Cisco Systems, Inc. Previous research focused on the development of advanced fuzzing and crash analysis technologies facilitating automation of the vulnerability triage and discovery process. Richard has delivered training and presented annually at top-tier industry conferences worldwide for over 15 years and is an invited speaker and trainer at several leading events. Richard was also co-founder of the Uninformed Journal and has sat on the committees for the USENIX Workshop on Offensive Technologies (WOOT) and the Toorcon and RECON security conferences.