Stephen Quinn is a senior computer scientist at the National Institute of Standards and Technology (NIST). He is the program manager of the interagency and interdepartmental Information Security Automation Program (ISAP) and co-originator of the Security Content Automation Protocol (SCAP) http://nvd.nist.gov/scap.cfm with his NIST colleague Peter Mell. Steve also oversees the NIST National checklist program located at http://checklists.nist.gov.
Prior to joining NIST, Steve worked as consultant to the Department of Defense and large commercial outsourcings with Wall Street banking firms and insurance companies. Specifically, he comes from an operational background, having owned a company that provided services offering for vulnerability assessments, designing security architectures, code development, C&A, and ST&Es. His research experience includes computer viruses, intrusion detection systems (IDSs), vulnerability/misconfiguration identification, categorization, and remediation.