ABAB Pedia

Andreas Nilsson

Andreas Nilsson is Granola’s chief information security officer. He previously worked on security at MongoDB and led security and technology teams at D. E. Shaw.

Contents11 sections
Key facts

Early Security Roles

His conference biography lists Check Point from 2005, Certezza from 2009, and NASDAQ OMX from 2011.⁠[1]

DNSSEC Tool Review

His report A Review of Administrative Tools for DNSSEC – Spring 2010 was produced by Certezza for Sweden’s Internet Infrastructure Foundation (.SE). It updated earlier testing, examining signing, key management and usability.⁠[2]

Hardware Security Module Report

He and Johan Ivarsson co-authored A Review of Hardware Security Modules – Fall 2010. Dated December 31 on its cover, the report examined four network-based modules, focusing on security features and administration for DNSSEC applications.⁠[3]

Public Vulnerability Coordination

On the oss-security mailing list, he clarified confusion over MongoDB vulnerability identifiers, distinguishing the Python driver issue from the database issue and explaining that two database identifiers referred to the same flaw.⁠[4]

Deployment Security Slides

MongoDB published Securing Your MongoDB Deployment, identifying him as lead security engineer. The slides addressed access control, data protection and security auditing, emphasizing security during design. This date records the upload.⁠[5]

HTTP Interface Bug Record

MongoDB’s public SERVER-17705 record names him as reporter and assignee for an inconsistency in an HTTP-interface credentials field. It was resolved on March 25, with fix versions 3.0.2 and 3.1.1.⁠[6]

D. E. Shaw

Granola’s appointment announcement states that he led security and technology teams at D. E. Shaw.⁠[7]

Current Role at Granola

Granola announced his appointment as chief information security officer and credited him with building MongoDB’s security program from scratch.⁠[7]

Other Technical Writing

An official MongoDB article identifies his series on security-model design and configuration, followed by common configuration errors. This records his technical writing without presenting historical database guidance as current instructions.⁠[8]

Related Organizations, Websites, and Public Accounts

Sources

  1. Andreas Nilsson (opens in a new window)
  2. A Review of Administrative Tools for DNSSEC – Spring 2010 (opens in a new window)
  3. A Review of Hardware Security Modules – Fall 2010 (opens in a new window)
  4. Re: CVE Request – MongoDB <=2.4.4 uninitialized object (opens in a new window)
  5. Securing Your MongoDB Deployment (opens in a new window)
  6. Fix credentials field inconsistency in HTTP interface (opens in a new window)
  7. Granola: Welcoming Andreas Nilsson as Chief Information Security Officer (opens in a new window)
  8. Sicherheits-Empfehlungen für MongoDB (opens in a new window)
  9. Check Point Software: Leader in Cyber Security Solutions (opens in a new window)
  10. Nasdaq — official website (opens in a new window)
  11. MongoDB — 官方网站与机构资料 (opens in a new window)
  12. The D. E. Shaw Group (opens in a new window)
  13. Granola (opens in a new window)
  14. KTH – Sweden’s largest technical university (opens in a new window)
  15. Columbia Engineering (opens in a new window)
  16. Andreas Nilsson (opens in a new window)