KAIMAI

About

One company, three lines of work.

Kaimai Security Limited is a New Zealand company. Its work runs from information-security assurance through to the software that small hospitality and travel businesses depend on day to day.

Those look unrelated until you notice what they have in common. Each is about the same two groups of people: whoever runs the business, and whoever that business serves. The only thing that changes is which side of the counter we are standing on.

And each is a journey. Not the travel-brochure kind — the day-to-day path a business actually runs on, and the path its customers take through it. We are in the business of making both of those better by making the technology bend around the people, instead of the other way round.

Kaimai Journeys

Travelers exploring Aotearoa, and the operators who host them.

kaimaijourneys.co.nz

Toutouwai

Travellers driving Aotearoa, and the operators who host them.

toutouwai.nz

Kūaha

Hosts and owner-operators who book guests, stays and appointments.

kuaha.nz

BnB Journeys

Bed-and-breakfast and small-lodging operators running their own business.

bnbjourneys.co.nz

Kaimai Security Limited is a New Zealand company, NZBN 9429049362770.

Background

Measure first, then judge.

Kaimai Security is led by Joerg Micheel, its director. The security work rests on three decades of building the instruments that show what a network is actually doing, before anyone decides what it means.

Network measurement, 1992–2005

  • San Diego Supercomputer Center, UCSD (2000–2005). Ran the NLANR Passive Measurement and Analysis programme for the US National Science Foundation: collecting and analysing Internet header traces from 25–30 sites across US research networks, backbone instrumentation up to OC192c, and real-time analysis at 10 Gbps.
  • Endace and the University of Waikato (1999–2004). Vice President Software and Systems at Endace, architecting the driver, library and tooling for the DAG packet-capture cards that grew out of Waikato's research. Endace received a 2003 New Zealand Hi-Tech Award for the DAG4 card as a product.
  • Kent Ridge Digital Labs, Singapore (1997–1999) and GMD FOKUS, Berlin (1992–1997). Network monitoring for SingAREN, and lead of the ATM test centre for Deutsche Telekom's BERKOM programme.

Published work

  • Designing a passive measurement and analysis infrastructure for the research community — ACM SIGCOMM MineNet, Philadelphia, 2005
  • lambdaMON — a passive monitoring facility for DWDM optical networks — Passive and Active Measurement (PAM), Boston, 2005
  • A real-time packet burst metric — TERENA Networking Conference, Rhodes, 2004
  • Packet delay and loss at the Auckland Internet access path — PAM, Fort Collins, 2002
  • Timestamping network packets — 1st ACM SIGCOMM Internet Measurement Workshop, San Francisco, 2001
  • The Auckland data set: an access link observed — 14th ITC Specialists Seminar, Barcelona, 2001
  • Storage and bandwidth requirements for passive Internet header traces — NRDM, ACM SIGMOD/PODS, Santa Barbara, 2001
  • A framework for ATM testing — IFIP TC6 High Performance Networking, White Plains, 1997

Security, now

The same discipline — measure, then judge — now applied to security posture: continuous, read-only sensing of the estates we look after, triaged against the advisories that actually reach them. Joerg holds personal BSI qualifications as ISO/IEC 27001 Lead Auditor and Lead Implementer, ISO/IEC 42001 Lead Implementer and ISO 19011 auditor; in 2022 he was the first New Zealand–based consultant to pass the Aqua Security Technical Assessment Program. He sits on the board of the ISACA Wellington chapter and on Standards New Zealand committees for information and cyber security, IT governance, artificial intelligence and quantum. His talks are on the talks page.