"The Dragon Research Group (DRG) is a volunteer research organization dedicated to further understanding of online criminality and to provide actionable intelligence for the benefit of the entire Internet community."
The DRG is a not-for-profit, non-revenue generating entity, comprised of a geographically dispersed set of trusted volunteers who are passionate about making the Internet more secure. Selected volunteers are part of a group that will have access to the data and tools that can really make a difference in the fight against online crime. Volunteers may take on any number of roles including but not limited to analyst, tool maker, administrator or investigator.
We produce and support security-related tools, analysis and insight for the Internet community. For example, The DRG Distro enables the raw intel that forms the basis of the SSH Password Authentication Report. At the end of every week, we provide a concise list of Weekend Reads that information security professionals can enjoy on their days off. We administer awards, such as the Security Innovation Grant that help provide valuable resources to those that can effectively put them to use for the good of the community. We develop and maintain software tools that are freely available to the community through our public Dragon Research Group GitHub repository. We also coordinate a number of security challenges, both online and at select conferences. Those are just a few of the things we do. What else can we do? We'd love to hear what you think is missing.
DRG volunteers come from around the globe with various backgrounds and experiences. DRG volunteers past and present have agreed to have their name published publicly as shown below. For additional questions about the volunteers or to confirm the status of a volunteer please direct all inquiries to email@example.com.
Volunteers: Aaron Allen, Paul Dokas, Alexandre Dulaunoy, Gabriel Iovino, John Kristoff, Renato Otranto Jr., Jason Ross, and Scott Vowels.
Alumni: Jesse Bowling, Pedro Bueno, Thomas Bryan, Chris Camacho, Ronaldo Castro de Vasconcellos, Dave Dobrotka, Jason Eaton, Greg Feezel, Russell Fulton, Levi Gundert, Marius Gutowski, Seth Hall, Han Lievens, Dean Pemberton, Jacomo Piccolinni, James Pichardo, Charlie Reddington, Justin Sterling, Manuel Subredu, Paul Tatarsky, Will Urbanski, Italo Valcy, Mike Watson, Joel Yonts and Bojan Zdrnja.
chackers: Aaron Allen, Olivier Caleff, David Durvaux, Anthony Kasza, John Kristoff, Chris Navarrete Renato Otranto Jr., Andre Derek Protas and Jason Ross
Short for challenge hackers, chackers, is an affiliate team of the DRG specifically focused on security challenge development.
The DRG Advisory Council is made up of industry experts, a DRG leadership team and representatives from key sponsors that provide guidance, advice, support and feedback to DRG and DRG activities. The council dedicates approximately 1-2 hours per month to meet and discuss the DRG project. The DRG Advisory Council is currently undergoing reformation (Summer/Fall 2015). If you or someone you know might be interested in supporting DRG by holding a position on the council, please contact us for further information.
All DRG volunteer candidates go through a formal hiring process, which includes rigorous vetting, interviews and candidate questionnaires. The following minimal requirements must be met before a candidate is invited to join DRG as a volunteer:
- Consensus from the existing DRG that a candidate is suitable for DRG.
- A candidate must be committed to dedicate 20 hours per month for DRG.
- A candidate demonstrates the ability to take on tasks and projects with little direction, or the DRG has the resources and desire to manage the candidate with high potential as a fast study and innate ability to succeed.
- A candidate will have a well defined role and task list to work on upon joining.
- A candidate must be in the DRG chain of trust directly or through a positive reference that is in the DRG chain of trust.
The DRG issues a public open candidate volunteer hiring announcement on average once a year due to the natural turn over in the DRG volunteer pool. At other times the DRG may contact candidates on file when a specific need arises. While we may not be formally hiring at any one moment, candidates are welcome and encouraged to apply at any time. See our How to Apply to be a DRG Volunteer page for additional details and the current open candidate volunteer hiring schedule.
Individuals who are interested in bolstering their future candidacy to the DRG, improving their chain of trust with the DRG or simply looking to participate without the time commitment of a volunteer may be invited to contribute independent work such as DRG Distro modules, tools, white papers or analysis. Contributors must be able to work well on their own with little guidance from DRG. Contact us at firstname.lastname@example.org to inquire about contributor opportunities.
Team Cymru Research NFP is a registered not-for-profit entity in the U.S. state of Illinois and an official US Federal 501(c)3 non-profit organization. Team Cymru Research NFP is the primary sponsoring organization for the DRG. Team Cymru Research NFP plays a facilitator role for the DRG and assists the DRG with acquiring resources.
Please visit Team Cymru's Home Page to learn all about Team Cymru.
The DRG never divulges the identities of the partners we work with and we never share a partner's raw data with anyone outside of the the DRG. Partners retain full ownership of any contributed data and they dictate the restrictions on its use. All DRG volunteers adhere to a simple set of DRG Operating Guidelines and abide by all mutually agreeable non-disclosure agreements (NDAs) partners may enter into with the DRG.
Nobody. The DRG does not sell anything and it does not take in any revenue. Naturally, everything that the DRG produces is strictly for non-commercial use only. Under no condition should you have had to pay for DRG derived output either in part or in whole from anyone else.
The DRG doesn't compare itself directly to any other volunteer group, but acknowledges that there are a number of very talented and motivated ventures out there. Sometimes our activities may overlap and whenever possible the DRG will cooperate with anyone who has similar goals and holds a high bar for the integrity of its operations. The DRG is backed by a well established and federally recognized non-profit organization, Team Cymru Research NFP. Through Team Cymru Research NFP, the DRG is in an ideal position to take advantage of a number of unique resources and partnerships. The DRG spans the globe and tries to bring insight and assistance to the world Internet community in matters of information security.
First, thank you for asking! In addition to people time, the DRG is interested in data, connectivity and select resources such as IP address space, domain name services, hardware, virtual machines, data center or rack space and more. We can also accept monetary donations via PayPal, which can be used to help support such things as speaking engagements, hosting and the production of promotional materials. Donations are tax deductible in the U.S. For tax purposes, donations will be invoiced to Team Cymru Research NFP, but the entire amount will be earmarked for the DRG if initiated from the PayPal button on our home page. If there is something else you think the DRG could make use of, please contact a Dragon Research Group representative at email@example.com.