Niels Provos

Niels Provos is a German-American researcher in security engineering, malware,[1] and cryptography. He received a PhD in computer science from the University of Michigan.[2] From 2003 to 2018, he worked at Google as a Distinguished Engineer on security for Google Cloud Platform.[3][4] In 2018, he left Google to join Stripe as its new head of security.[5]

Niels Provos
Niels provos.jpg
NationalityGerman and American
Alma mater Universität Hamburg, M.S Mathematics (1998)
University of Michigan, Ph.D. Computer Science (2003)
Known forOpenBSD, OpenSSH, Bcrypt, Safe Browsing
Scientific career
FieldsComputer Security
Doctoral advisorPeter Honeyman

For many years, Provos contributed to the OpenBSD operating system, where he developed the bcrypt adaptive cryptographic hash function. He is the author of numerous software packages, including the libevent event driven programming system, the Systrace access control system, the honeyd honeypot system, the StegDetect steganography detector, the Bcrypt password encryption technique, and many others.

Provos has been an outspoken critic of the effect of the DMCA and similar laws on security researchers, arguing that they threaten to make criminals of people conducting legitimate security research.[6]

Provos has also served as the Program Chair of the Usenix Security Symposium, on the program committees of the Network and Distributed System Security Symposium, ACM SIGCOMM, and numerous other conferences, and served on the board of directors of Usenix from 2006 to 2010.

Provos's hobbies include swordsmithing, and he has forged swords in both Japanese and Viking styles. It started with his father collecting sabres. Niels routinely posts videos of his blacksmithing activities online.[7][8] By his words "At work, we try to fight the bad guys and make the world safer for our users. And swords are maybe an expression in a similar way. You create weapons to defend yourself against the hordes of barbarians."[9]


  • Ph.D., Computer Science & Engineering, August 2003, the University of Michigan (Dissertation: "Statistical Steganalysis")
  • Diplom in Mathematics, August 1998, Universität Hamburg, Hamburg, Germany. (Masters in Mathematics). (Thesis: "Cryptography, especially the RSA algorithm on elliptic curves and Z/nZ")
  • Vordiplom in Mathematics, March 1995, Universität Hamburg, Hamburg, Germany.
  • Vordiplom in Physics, March 1995, Universität Hamburg, Hamburg, Germany.

Selected publicationsEdit

  • All Your iFrames Point to Us Niels Provos, Panayiotis Mavrommatis, Moheeb Rajab and Fabian Monrose, 17th USENIX Security Symposium, August 2008.
  • The Ghost in the Browser: Analysis of Web-based Malware Niels Provos, Dean McNamee, Panayiotis Mavrommatis, Ke Wang, and Nagendra Modadugu, USENIX Workshop on Hot Topics in Understanding Botnets, April 2007.
  • Detecting Steganographic Content on the Internet Niels Provos and Peter Honeyman, ISOC NDSS'02, San Diego, CA, February 2002
  • Improving Host Security with System Call Policies Niels Provos, 12th USENIX Security Symposium, Washington, DC, August 2003
  • Provos, Niels; Holz, Thorsten (July 2007). Virtual Honeypots: From Botnet Tracking to Intrusion Detection. Addison-Wesley Professional. ISBN 978-0-321-33632-3.
  • Detecting pirated applications (Oct 2014) Ashish Bhatia, Min Gyung Kang, Monirul Islam Sharif, Niels Provos, Panayiotis Mavrommatis, and Sruthi Bandhakavi


  1. ^ Mills, Elinor. "Google's Niels Provos battles malware on the Web". CNET. Retrieved 7 April 2011.
  2. ^ Provos, Niels. "Provos' official web page". Retrieved 7 April 2011.
  3. ^ "Google Research Page on Provos". Retrieved 20 August 2013.
  4. ^ "Niels Provos on Twitter". Retrieved 9 October 2018. After 15 years working on Security, I am saying Goodbye to @Google today.
  5. ^ "Stripe hires Niels Provos away from Google to be its new head of security". TechCrunch. Retrieved 2018-10-17.
  6. ^ Poulsen, Kevin. "'Super-DMCA' fears suppress security research". SecurityFocus. Retrieved 7 April 2011.
  7. ^ "Provos' Youtube channel for his swordsmithing videos". Retrieved 20 August 2013.
  8. ^ McMillan, Robert. "World's Most Wired Swordsmith". Wired. Retrieved 20 August 2013.
  9. ^ "Swordsmith Keeps Google Safe From Barbaric Hordes". WIRED.{{cite web}}: CS1 maint: url-status (link)

External linksEdit