{{Short description|American cybersecurity researcher and entrepreneur}} {{Use mdy dates|date=May 2026}} {{Infobox person | name = Jon Oberheide | education = PhD, [[Computer science and engineering]], 2011 | alma_mater = [[University of Michigan]] | occupation = {{hlist|Computer scientist|Entrepreneur}} | known_for = Co-founding [[Duo Security]] | website = {{URL|https://jon.oberheide.org/}} }}
'''Jon Oberheide''' is an American [[computer scientist]] and entrepreneur in [[cybersecurity]]. He co-founded [[Duo Security]] with [[Dug Song]] in 2010 in [[Ann Arbor, Michigan]], serving as [[chief technology officer]] until [[Cisco]] acquired the company in August 2018 for $2.35 billion.<ref name="TC">{{cite web |last1=Burns |first1=Matt |title=Cisco is buying Duo Security for $2.35B in cash |url=https://techcrunch.com/2018/08/02/cisco-is-buying-duo-security-for-2-35b-in-cash/ |website=TechCrunch |date=August 2, 2018 |access-date=May 21, 2026}}</ref>
Oberheide earned a PhD in computer science and engineering from the [[University of Michigan]] in 2011 under [[Farnam Jahanian]], where his doctoral research included early work on cloud-based antivirus detection and the exposure of several critical vulnerabilities in the [[Android (operating system)|Android]] platform. He was named to the [[Forbes 30 Under 30|Forbes "30 Under 30"]] list in Technology in 2012<ref name="cse-forbes">{{cite web |title=CSE Alum Jon Oberheide Named One of Forbes' 30 Under 30 in Technology |url=https://cse.engin.umich.edu/stories/cse-alum-jon-oberheide-named-one-of-forbes-30-under-30-in-technology |publisher=University of Michigan, College of Engineering |date=n.d. |access-date=May 21, 2026}}</ref> and to Crain's Detroit Business 40 Under 40 in 2019.<ref name="CDB">{{cite web |title=Jon Oberheide, 35 |url=https://www.crainsdetroit.com/recognitions/40-under-40/2019/jon-oberheide---40-under-40-2019/ |website=Crain's Detroit Business |date=n.d. |access-date=May 21, 2026}}</ref>
== Early life and education ==
Oberheide grew up in [[Troy, Michigan]] and began repairing computers for others in middle school.<ref name="CDB"/> While in high school he co-founded a web hosting business, and at seventeen he hacked into a [[honeypot (computing)|honeypot]] operated by Dug Song, then chief security architect at [[Arbor Networks]], who had set it up to identify skilled attackers. The encounter led to a professional relationship; the two later worked together at Arbor Networks before co-founding Duo Security.<ref name="HackerCNBC">{{cite news |last1=Castillo |first1=Michelle |title=How a high schooler hacked into a security company and ended up with a job |url=https://www.cnbc.com/2017/04/19/how-hackers-dug-song-and-jono-oberhide-teamed-up-to-start-duo-security.html |publisher=CNBC |date=April 19, 2017 |access-date=May 21, 2026}}</ref><ref name="MichiganEng2019">{{cite web |title=Change or be changed |url=https://news.engin.umich.edu/2019/04/change-or-be-changed/ |publisher=University of Michigan, College of Engineering |date=April 2019 |access-date=May 21, 2026}}</ref>
Oberheide attended the University of Michigan, where he earned a PhD in [[computer science and engineering]] in 2011 under the supervision of Farnam Jahanian.<ref name="cse-forbes"/>
== Research ==
=== CloudAV ===
At the 17th USENIX Security Symposium in July 2008, Oberheide, Evan Cooke, and Farnam Jahanian presented "CloudAV: N-Version Antivirus in the Network Cloud," proposing a model for malware detection in which antivirus scanning is offloaded from end-user devices to a network-based cloud service running multiple engines in parallel.<ref name="cloudav">{{cite conference |last1=Oberheide |first1=Jon |last2=Cooke |first2=Evan |last3=Jahanian |first3=Farnam |title=CloudAV: N-Version Antivirus in the Network Cloud |book-title=Proceedings of the 17th USENIX Security Symposium |publisher=USENIX |year=2008 |url=https://www.usenix.org/conference/17th-usenix-security-symposium/cloudav-n-version-antivirus-network-cloud |access-date=May 21, 2026}}</ref> The paper evaluated twelve antivirus engines against 7,220 malware samples collected over a year.
=== Android security ===
During his doctoral research, Oberheide identified multiple vulnerabilities in the Android operating system affecting hundreds of millions of devices. His demonstrated attacks included delivery of malware via a malicious hyperlink and rootkitting a handset through unauthorized applications distributed to the platform.<ref name="MichiganEng2019"/><ref name="HackerCNBC"/> He presented related work, "A Look at a Modern Mobile Security Model: Google's Android Platform," at CanSecWest 2009.<ref name="jon-research">{{cite web |title=Research |url=https://jon.oberheide.org/research/ |website=jon.oberheide.org |date=n.d. |access-date=May 21, 2026}}</ref>
== Duo Security ==
Oberheide and Song co-founded Duo Security in Ann Arbor, Michigan in 2010, building a cloud-delivered [[multi-factor authentication]] platform aimed at making enterprise security accessible across a wide range of devices.<ref name="HackerCNBC"/><ref name="MichiganEng2019"/> Oberheide served as CTO; Song served as CEO.
The company raised $121 million across several funding rounds and reported more than $100 million in annual recurring revenue for 2017.<ref name="CrainsDeal">{{cite web |title=Cisco to acquire Ann Arbor-based Duo Security in $2.35 billion deal |url=https://www.crainsdetroit.com/article/20180802/news/667546/cisco-to-acquire-ann-arbor-based-duo-security-in-235-billion-deal |website=Crain's Detroit Business |date=August 2, 2018 |access-date=May 21, 2026}}</ref> In October 2017, Duo reached a $1 billion valuation, making it only the second venture-capital-backed company in Michigan to reach that milestone.<ref name="CrainsDeal"/> Cisco announced the $2.35 billion acquisition in August 2018, completing it in October 2018.<ref name="TC"/>
== Later career ==
After the Cisco acquisition, Oberheide became an active board member, advisor, and investor in cybersecurity and enterprise software companies. His board positions include DNSFilter,<ref>{{cite press release |title=Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors |url=https://www.businesswire.com/news/home/20230622017743/en/Former-Duo-Security-Co-Founder-Jon-Oberheide-Joins-DNSFilter-Board-of-Directors |publisher=Business Wire |date=June 22, 2023 |access-date=May 21, 2026}}</ref> runZero, and Push Security. He also serves on the board of trustees of [[The Henry Ford]] museum.<ref>{{cite web |title=New Members Join The Henry Ford Board of Trustees |url=https://www.thehenryford.org/about/press-room/press-releases/new-members-join-the-henry-ford-board-of-trustees/ |website=The Henry Ford |date=n.d. |access-date=May 21, 2026}}</ref> He holds more than 70 patents related to cybersecurity.<ref>{{cite web |title=Jon Oberheide |url=https://patents.google.com/?inventor=Jon+Oberheide&oq=Jon+Oberheide |website=Google Patents |date=n.d. |access-date=May 21, 2026}}</ref>
== Recognition ==
Oberheide was named to the Forbes "30 Under 30" list in Technology in 2012 for his work in mobile security.<ref name="cse-forbes"/> Crain's Detroit Business included him in its 40 Under 40 class of 2019.<ref name="CDB"/> He spoke at USENIX Enigma 2016 on enterprise security usability.<ref name="enigma2016">{{cite web |title=Security and Usability from the Frontlines of Enterprise IT |url=https://www.usenix.org/conference/enigma2016/conference-program/presentation/oberheide |publisher=USENIX |date=2016 |access-date=May 21, 2026}}</ref>
== References == {{reflist}}
== External links == * [https://jon.oberheide.org/ Jon Oberheide website] * [https://scholar.google.com/citations?user=9d2opV4AAAAJ&hl=en Google Scholar]
{{DEFAULTSORT:Oberheide, Jon}} [[Category:Year of birth missing (living people)]] [[Category:Living people]] [[Category:American computer scientists]] [[Category:American businesspeople]] [[Category:American hackers]] [[Category:American technology company founders]] [[Category:Computer security specialists]] [[Category:University of Michigan alumni]] [[Category:People from Troy, Michigan]]