Selected Talks

Ideas are more useful when they are shared.

A selection of talks delivered throughout my career. These recordings were made while serving in previous leadership roles and reflect the organizations and responsibilities I held at the time. They are shared to illustrate my speaking style, technical expertise, and approach to cybersecurity education.

Recognition

Recognition that reflects the work.

A few acknowledgements I am proud to have received along the way.

Top 10 Under 40

Canadian Security Magazine · 2023

Queen Elizabeth II Platinum Jubilee Medal

2022

Queen Elizabeth II Platinum Jubilee Medal

Community Partnership Award

University of Alberta Protective Services · 2020

Innovation Award for Plaintext Password Sniffing

CUCCIO · 2019

Research, Teaching & Disclosure

Contributing beyond the day job.

The work below reflects the technical curiosity, teaching, mentorship, and professional responsibility that have shaped my career.

Attributed CVEs

Public vulnerability records

Three publicly disclosed vulnerabilities are attributed to me in the CVE program.

Security Research

Responsible disclosure

Throughout my career, I have privately disclosed security vulnerabilities to software vendors, public-sector organizations, and technology companies. The organizations below received reports through responsible disclosure processes.

AirWatchBlizzard EntertainmentCity of EdmontonClickTimeHarry Reid International AirportMalwarebytesPalo Alto NetworksPharosSentinel LMServiceNowTurn 10 StudiosUniversity of AlbertaValveXeroxZemana
Research

Graduate research supervision

I supervised graduate research through the University of Alberta's Master of Science in Internetworking program, supporting work on practical and emerging cybersecurity challenges.

Teaching

Advanced Network Security

Designed, authored, and delivered the complete Advanced Network Security curriculum for the University of Alberta's Master of Science in Internetworking program. I retain ownership of the course's intellectual property, including the lectures, laboratories, virtual environments, assignments, assessments, and supporting course materials. The curriculum combines modern cryptography, TLS, browser security, quantum computing, network attacks, segmentation, vulnerability disclosure, ethics, and professional practice into a graduate-level course built around real-world application.

Community Leadership

Helping shape cybersecurity education

Beyond consulting and speaking, I contribute to cybersecurity education and the profession through advisory committees, curriculum development, and community initiatives across Alberta.

Patent

Digital powers of attorney and related documents

Named inventor on a pending United States patent concerning the auditing, creation, storage, and issuance of digital powers of attorney and related legal and health documents.

View US-20230206363-A1 ↗
Michael Spaling

Let's start a conversation.

Whether you're looking for advice, a sounding board, a speaker, or simply another perspective, I'd be happy to hear what you're working on.

Michael Spaling · Founder & Principal Consultant