Corey Thuen is renowned for his distinctive approach to cybersecurity, blending a hacker’s mentality with innovative problem-solving. As the founder and CEO of Gravwell, Thuen has carved a niche in data analytics and vulnerability detection, assembling a team of big data professionals and hackers. His unique hiring philosophy revolves around identifying candidates with what he terms the ‘evil bit’, an innate trait essential for exploiting vulnerabilities for the greater good.
The ‘Evil Bit’: A Unique Perspective
Thuen’s concept of the ‘evil bit’ delves into the ethical complexities of hacking. He questions conventional definitions of morality, citing the old school hacking ethos that advocates for the freedom of information. Thuen’s work with the US government evaluating critical infrastructure systems showcases how this mindset can be utilized positively, improving security through an adversarial perspective.
Thuen’s hacking journey began in his youth, driven by a fascination with computers. An old Packard Bell gifted by his uncle ignited his passion, leading him to explore video games and experiment with hacking as a form of curiosity rather than malice. His early experiences were more about understanding systems than breaching them with ill intent.
Academic and Professional Growth
Thuen pursued a bachelor’s degree in computer science at the University of North Dakota, where he honed his technical skills despite the absence of a dedicated security program. He furthered his education with a master’s degree from the University of Idaho through a government Scholarship for Service program, which required post-graduation government work. This led him to the Idaho National Laboratory (INL), a pivotal step in his career.
At INL, Thuen collaborated on cybersecurity initiatives, laying the foundation for his future endeavors. It was here that he met Kristopher Watts, his future co-founder at Gravwell. The experience shaped Thuen’s understanding of industrial control systems (ICS) and operational technology (OT), areas he continued to explore in subsequent roles at Digital Bond and IOActive.
Entrepreneurial Ventures and Challenges
Thuen’s entrepreneurial spirit led him to co-found Southfork Security, a company aiming to transition public sector security practices to the private realm. However, a legal battle over intellectual property rights with INL’s managing entity, BEA, resulted in Southfork’s dissolution. Despite the setback, Thuen continued to innovate, founding Gravwell in 2017.
Gravwell focuses on data analytics for security logs and network data, leveraging Thuen’s comprehensive understanding of cybersecurity. His philosophy emphasizes the importance of understanding one’s environment to maximize defensive advantages. Thuen’s journey exemplifies the duality of breaking and building, showcasing how a hacker’s mindset can drive both innovation and ethical practices in technology.
Corey Thuen remains a complex figure within the cybersecurity community, celebrated for his ability to balance a hacker’s curiosity with entrepreneurial ambition. His career trajectory underscores the potential for hackers to contribute positively to technological advancement and security, embodying the notion that the ‘evil bit’ can indeed serve the greater good.
