Curriculum Vitae

Name: Risto Vaarandi
Nationality: Estonian
Date and place of birth: September 18, 1972, Tallinn, Estonia
Languages: Estonian (first language), English (fluent), Russian (reading), Finnish (reading)
Office address: Tornimäe 2, 15010 Tallinn, Estonia
Office phone: +3726655451
E-mail: rvaarandi at YAH00 d0t C0M

2000-2005 PhD student of Computer Engineering, Tallinn University of Technology, Estonia
1994-1997 MSc student of Computer Science, University of Tartu, Estonia
1990-1994 undergraduate student of Computer Science, University of Tartu, Estonia
1979-1990 High School No. 21 of Tallinn, Estonia

Since April 1998 Union Bank of Estonia, IT development engineer
Development and maintenance of a system and network management framework (based on HP OpenView and a number of open source tools) which includes solutions for monitoring applications, servers, network devices, etc.; for event correlation and event log monitoring; for gathering SNMP and NetFlow statistics from servers, routers, and probes; for intrusion detection; etc.
March 1997 - April 1998 Estpak Data Ltd., network administrator
Administration of Cisco and Bay Networks routers, development and maintenance of a network management system (based on Tivoli NetView), administration of UNIX servers (Linux and AIX)
August 1994 - March 1997 Tartu County Government, IT specialist
Administration of UNIX servers (Linux and AIX), PC-workstation maintenance and user support

Risto Vaarandi. Real-time Classification of IDS Alerts with Data Mining Techniques. Proceedings of the 2009 IEEE MILCOM Conference, 7 pp., 2009
Risto Vaarandi. Mining Event Logs with SLCT and LogHound. Proceedings of the 2008 IEEE/IFIP Network Operations and Management Symposium, pp. 1071-1074, 2008
Risto Vaarandi. Simple Event Correlator for real-time security log monitoring. Hakin9 Magazine 1/2006 (6), pp. 28-39, 2006
Risto Vaarandi. Tools and Techniques for Event Log Analysis. PhD Thesis, Tallinn University of Technology, 2005
Risto Vaarandi. A Breadth-First Algorithm for Mining Frequent Patterns from Event Logs. Proceedings of the 2004 IFIP International Conference on Intelligence in Communication Systems, LNCS Vol. 3283, pp. 293-308, 2004
Risto Vaarandi. A Data Clustering Algorithm for Mining Patterns From Event Logs. Proceedings of the 2003 IEEE Workshop on IP Operations and Management, pp. 119-126, 2003
Risto Vaarandi. SEC - a Lightweight Event Correlation Tool. Proceedings of the 2002 IEEE Workshop on IP Operations and Management, pp. 111-115, 2002
Risto Vaarandi. Platform Independent Event Correlation Tool for Network Management. Proceedings of the 2002 IEEE/IFIP Network Operations and Management Symposium, pp. 907-910, 2002
Risto Vaarandi. Platform Independent Tool for Local Event Correlation. Acta Cybernetica 15(4), pp. 705-723, 2002

Experience with network management systems and applications: Simple Event Correlator (the author), HP OpenView NNM and Operations, Tivoli NetView, Nagios, Net-SNMP, RRDtool, MRTG, Snort, Ntop, Fprobe, Flow-tools, etc.
Experience with programming languages and database systems: Perl, C/C++, PHP, MySQL, Bourne shell, Prolog, assembler (i86), Pascal, BASIC
Sysop experience: Linux, HP-UX, AIX, Cisco IOS