599 Lexington Avenue
Suite 2300
New York, NY 10022
Tel: 212 745 1133
Fax: 212 319 2808

January 5, 2000

Secretary
Federal Trade Commission
Room H — 159
600 Pennsylvania Avenue, NW
Washington, DC 20580

Re: "Advisory Committee on Online Access and Security — Nomination, P004807"

Pursuant to the Federal Register notice on December 21, 1999, I am writing to nominate Dr. Salvatore Joseph Stolfo, Chief Technology Officer of iPrivacy, L.L.C., to be a member of the Advisory Committee on Online Access and Security ("Advisory Committee").

Dr. Stolfo has been immersed in many of the issues surrounding consumer privacy and e-commerce. iPrivacy, a company that Dr. Stolfo co-founded, created a service (patent pending) that will offer consumers the capability to shop, purchase, and receive the delivery of goods privately — from any merchant — over the Internet. It will allow consumers to use credit cards tied to an iPrivacy identity to complete such transactions. The system will function by utilizing standard credit card transactions with major banks and credit card issuers, and pre-arranged agreements with major shipping companies. IPrivacy allows consumers to purchase and receive delivery of goods bought over the internet without disclosing any personal information to the on-line merchant.

Dr. Stolfo is an accomplished researcher, publisher and teacher of computer theory and practice. An expert in Internet privacy issues, he earned a Ph.D. in Computer Science from New York University for his work in machine learning and automated discovery systems.

Professionally, Dr. Stolfo has served in a number of prestigious positions, including: Tenured Professor of Computer Science at Columbia University (1997-Present); Co-Director, Center for Applied Research in Digital Government Systems (1998); Director, Center for Advanced Technology in Computers and Information Systems (1988-1990); and Chief Scientific Advisor, Fifth Generation Corporation (1984-1988).

Dr. Stolfo’s current research deals directly with the online detection of network attacks and e-commerce fraud, and is supported by a multi-million dollar grant from the Defense Advanced Research Project Agency (DARPA). Recently, he was invited to participate in a Department of Energy/White House meeting that discussed topics dealing with the detection of malicious code, and intrusions and anomolous activity. Dr. Stolfo has also recently attended a DARPA planning meeting on strategic information assurance and critical information infrastructure protection. He is currently a consultant to DARPA to advise program management on future research directions in Information Assurance and Strategic Intrusion Detection. His expertise in these areas is continuously sought, given his research focuses on both system and user behavior and computer systems. Presently two companies — Network Flight Recorder and the RST Corporation — have a joint DARPA contract with Dr. Stolfo and rely on his research in generating new insights to detect attacks on the Internet and also detect anomolous code downloading from the Internet to Windows platforms.

In addition to his professional duties, Dr. Stolfo has served as a consultant to numerous businesses, committees, and consortiums, including Citicorp (1988-1994), Center for Advanced Technology for Computers Systems (1988-1990), the High Tech Subcommittee of the New York City Partnership (1987), and AT&T Bell Laboratories (1980-1985). Dr. Stolfo’s work with Citicorp led to the issuance of a patent to Citicorp that ensured secure online transactions via electronic money. Recently, Dr. Stolfo was selected as Co-Chair of the Program Committee of the 2000 International Conference on Knowledge Discovery and Data Mining.

Dr. Stolfo’s research has been published in numerous computer journals, including Journal of Intelligent Information Systems, Journal of Parallel and Distributed Computing, International Journal of Tools with AI, IEEE Computing Magazine and the Communications of the ACM. His published work has also appeared in numerous security and privacy proceedings, earning him notoriety within federal intelligence circles such as the Central Intelligence Agency, the Department of Defense and the National Security Agency.

He also serves as a panelist and reviewer for technical workshops focusing on computer technology — including Internet topics related to knowledge discovery in databases— and was mentioned in American Men and Women in Sciences (1986, 1997).

An accomplished scientist and inventor, Dr. Stolfo is also the author of 10 U.S. patents.

I believe Dr. Stolfo’s expertise and background in helping create and launch iPrivacy will offer the Advisory Committee unparalleled access to both creative and technical data associated with Internet privacy matters. His academic background and scientific credentials will also complement the Advisory Committee’s membership by providing a technical voice on any number of topics relevant to Internet privacy issues.

Dr. Stolfo’s abridged resume is enclosed for your further consideration.

Sincerely yours,

Ruvan N. Cohen
President
Chief Operating Officer

IPrivacy, L.L.C.
599 Lexington Avenue
Suite 2300
New York, NY 10022
Phone: 212 745 1133
Fax: 212 319 2808
Email: Ruvan@iPrivacy.com

Education

Ph.D. Computer Science, October 1979 Courant Institute of Mathematical Sciences, New York University. Dissertation: Automatic Discovery of Heuristics for Nondeterministic Programs from Sample Execution Traces, (fully supported fellowship student).

M.S. Computer Science, June 1976 Courant Institute of Mathematical Sciences, New York University.

B.S. Computer Science and Mathematics, June 1974. Brooklyn College of The City University of New York.

Online Detection of Network Attacks and Fraud in e-Commerce.

Parallel and Distributed Processing and Artificial Intelligence: Knowledge Discovery in Databases and Data Mining, Active and Expert Database Systems, Machine Learning.

Professional Employment

Chief Technology Officer, iPrivacy LLC, August 1999 - present

Tenured Professor of Computer Science, Columbia University, June 1997 - present.

Co-Director, Center for Applied Research in Digital Government Information Systems (CARDGIS), 1998.

Director, Center for Advanced Technology in Computers and Information Systems, 1988 - 1990.

Acting Chairman, Computer Science Department, Columbia University, November 1986 - June 1987.

Associate Professor of Computer Science, Columbia University, July 1984 - May 1986.

Chief Scientific Advisor, Fifth Generation Computer Corp., 1984-1988.

Assistant Professor of Computer Science, Columbia University, July 1979 - June 1984.

Lecturer, Department of Computer and Information Science, Brooklyn College of the City University of New York, 1974-1978.

Invited Participant, White House OSTP, DOE, NSC Invitation Only Workshop on Detection of Malicious Code, Intrusions, and Anomalous Activity, Washington, D.C., February 1999.

Invited Participant, DARPA Information Assurance and Survivability Workshop, St. Louis, May, 1999.

Co-chair Program Committee, International Conference on Knowledge Discovery in Databases and Data Mining 2000, SIGKDD 2000.

Keynote Speaker, SuperComputing Conference 2000.

Speaker, IIBM KDD Colloquium, May, 1999

Panelist, AI Meets the Real World Conference, Stamford, CT, September 1998.

Keynote Speaker, Advanced Information Technologies for Government Conference, Washington D.C., September 1998.

Panelist, KDD98, Distributed Data Mining Workshop, August, 1998.

Panelist, EXPO ITCA '98 Collaborative Communications, Microsoft's "Lock", March 1998.

Panelist, New York Bar Association Meeting on Antitrust Law, and DOJ vrs. Microsoft, February 1998.

Panelist, New York Academy of Science/Mitretek Systems Workshop on Issues in Internet Payment Systems, January 1998.

Expert Witness, Computer and Communications Industry Association Amicus Brief in support of Department of Justice vs Microsoft Corporation, November, 1997.

Principal Investigator, ARPA-sponsored Fraud and Intrusion Detection Project, Joint with Financial Service Technology Consortium, 1996-1998. (See http://www.cs.columbia.edu/~sal/JAM/PROJECT)

Co-chair of Organizing Committee, NSF Workshop on Research and Development (R&D) Opportunities in Federal Information Services, 1996-1997 (see http://www.isi.edu/nsf).

Program Committee, International Conference on Knowledge Discovery in Databases and Data Mining, 1997.

Co-chair of Organizing Committee, AAAI-97 Workshop on Fraud Detection, 1996-1997.

Program Committee, International Conference on Knowledge Discovery in Databases and Data Mining, 1996.

Editorial Board, Journal of Intelligent Information Systems, (Kluwer Publishers), 1995-present.

Editorial Board, Journal of Data Mining and Knowledge Discovery, (Kluwer, Publishers), 1995-present.

Consultant, Technology Consulting Team, Citicorp, 1994 - 1997.

Advisory Board to the Electrical and Computer Engineering Department of the University of Puerto Rico, 1995-present.

Director, Center for Advanced Technology for Computers And Information Systems, School of Engineering and Applied Science, Columbia University, October 1988 - June 1991.

Consultant, Citicorp Strategic Technology Evaluation Program, Citicorp, June 1988 - 1994.

Consultant, New Business Evaluation, New York State Science And Technology Foundation, 1989 - present.

Principal architect and head of the DADO Parallel Computer Project at Columbia University, 1980-present.

IEEE Transactions on Knowledge and Data Engineering,

Journal of Intelligent Information Systems,

Journal of Parallel and Distributed Computing,

IEEE Transactions on Parallel and Distributed Systems,

International Journal of Tools with AI,

IEEE Computer Magazine,

NSF and NSF PYI proposals in the area of Knowledge and DataBase Systems, and Computer Architectures 1987-1994

Honors and Awards

Honorable Mention, Best Application Paper, KDD98 "Mining Audit Data to Build Intrusion Detection Models", New York, August, 1998.

Runner Up Best Paper Award, KDD97, "JAM: Java Agents For Meta-Learning", Newport Beach, CA, August 1997.

Senior Member IEEE, 1996.

IBM Faculty Career Development Award, $60,000 for two year period.

American Men and Women of Science, 1986, 1997.

Patents

Parallel Processing System and Method of Use, Issued June 27, 1989. US Patent No. 4,843,540, (assigned to Fifth Generation Computer Corporation), technology licensed to Fifth Generation Computer (1985).

Parallel Processing System and Method of Use, Issued June 27,1989. Patent No. 4,843,540, World-wide: EPO, Canida, Taiwan, Japan, Israel Australia, (assigned to Fifth Generation Computer Corporation), technology licensed to Fifth Generation Computer (1985).

Binary Tree Parallel Processor, Issued August 22, 1989. US Patent No. 4,860,201, (assigned to Fifth Generation Computer Corporation), technology licensed to Fifth Generation Computer (1985).

Binary Tree Parallel Processor, Issued August 22, 1989. Patent No. 4,860,201, World-wide: EPO, Canada, Taiwan, Japan, Israel, Australia, technology licensed to Fifth Generation Computer (1985), (assigned to Fifth Generation Computer Corporation).

Incremental Update Process and Apparatus for an Inference System, Issued Nov. 8, 1994, US Patent No. 5,363,473, (assigned to Columbia University).

Method of Merging Large Databases in Parallel, Issued March 5, 1996, US Patent No. 5,497,486, (individually owned), use of technology licensed to State of Washington, Child Welfare Department (1995), and Informix Software, Inc., 1996. Distributed as the tm DataCleanser, DataBlade. (See http://www.npsa.com/edd)

Method and System for Securities Pool Allocation, Issued Oct 8, 1996, Patent No. 5,563,783, (assigned to Columbia University), ALEXSYS technology licensed to Citicorp North American Investment Bank (November, 1991), Complex Computing Corp.(1993).

Method and Appartus for Imaging, Image Processing and Data Compression Merge/Purge Techiques for Document Image Databases, Issued Sep 16, 1997, Patent No. 5,668,897, (individually owned).

Method of Merging Large Databases in Parallel, Issued Feb 10, 1998, Patent no. 5,717,915, (individually owned).

Method and Apparatus for Using Intelligent Agents for Financial Transactions, Services, Accounting, and Advice, Issued July 6, 1999, US Patent No. 5,920,848, (assigned to Citicorp).

Formal Workshop Reports

Report on the AAAI 97 Workshop on Fraud and Risk Management, (with T. Fawcett, I. Haimowitz, F. Provost), AAAI, AI Magazine, Spring 1998.

Towards the Digital Government of the 21st Century, A Report from the Workshop on R&D Opportunities in Federal Information Services, (with Herbert Schorr), June, 1997

Journal and Periodical Publications - Refereed and Accepted

Distributed Data Mining in Credit Card Fraud Detection, (with P. Chan, W. Fan, A. Prodromidis), IEEE Intelligent Systems, 1999.

A Data Mining Framework for Adaptive Intrusion Detection, (with W. Lee and K. Mok), Artificial Intelligence Review, 1999, Kluwer Academic Publishers.

Towards the Digital Government of the 21st Century, (with H. Schorr), Communications of the ACM (CACM), November 1998.

Technical Presentations

Invited lecturer, The JAM Project and Intrusion Detection, IBM, Yorktown Heights, May 1999.

Invited participant, White House/DOE Invitational Workshop on Detection of Malicious code, Intrusions, and Anomalous Activity Workshop, Washington, February 1999.

Keynote Speaker, Advance Information Technologies for Government Conference, Washington D.C., September 1998.

Workshop on Security and Privacy of Statistical Information, Washington, D.C., September 1997.

Fraud Detection in Financial Information Systems, Panelist, Computer Misuse and Anomaly Detection Workshop, Monterey CA, November 1996.

Fraud Detection in Financial Information Systems, Panelist, SPIE 1996, Boston, November 1996.

Fraud and Intrusion Detection, DARPA ITO IDS meeting, Rome Labs, Boston, November 1996.

Fraud and Intrusion Detection, DARPA ITO IDS meeting, Santa Cruz, CA, September 1996.

Merge/Purge Results for Large Database Applications, Citicorp, CTO, October 1995.

Testimony on FCCSET and SIAM reports on the National Supercomputing Initiative, Office of Science and Technology Policy, Rayburn Building, Washington D.C., February, 1988.