For more information about Stanford's online Artificial Intelligence programs, visit: https://stanford.io/ai
Follow along with the course schedule and syllabus, visit: https://cs153.stanford.edu/
In a CS153 Frontier Systems lecture, Joe Sullivan, a veteran security leader who built security teams at Facebook, Uber, and Cloudflare, walks the class through his career at the intersection of government and technology — from federal prosecutor in the 1990s through eBay/PayPal, Facebook, Uber, and Cloudflare — and uses his own criminal prosecution as the central case study.
In 2016, Uber paid researchers $100,000 through what Sullivan's team treated as a bug bounty after they accessed an old AWS database; legal signed off and the CEO approved, but in 2020 Sullivan was personally charged with obstruction of justice for the company's failure to disclose the incident to regulators. He lost at trial in 2022 after the judge instructed the jury that companies cannot retroactively authorize access, but at sentencing in 2023 the judge declared "it wasn't a cover-up" and gave him three years' probation instead of the prison time prosecutors sought — buoyed by over 200 letters of support from the security community.
From this story he draws his core theme: leadership in modern tech requires resilience and a bias toward transparency (he contrasts Uber's 2016 approach with Cloudflare's reflex to write a blog post the moment an incident hits), and he closes with a wide-ranging Q&A on vibe-coding security risks, the shift from data-loss to operational-resilience threats like the Jaguar Land Rover ransomware attack, Anthropic's cyber model rollout, quantum cryptography, executive protection, and the growing case for proactive government action against ransomware gangs.
Joe Sullivan is the CEO of Joe Sullivan Security LLC, advising companies, leading security projects, and mentoring leaders. He also leads Ukraine Friends, a nonprofit aiding children in war zones. A former federal cybercrime prosecutor, Joe worked on safety and security at eBay and PayPal, then went on to lead security at Facebook, Uber, and Cloudflare. He also served on President Obama’s Commission on Enhancing National Cybersecurity.