Shlomo Hershkop

Dr. Hershkop is an expert in cybersecurity, AI and machine learning, and large-scale distributed systems. His work spans agentic large language model (LLM) systems, anomaly detection, user behavior modeling, and methods for identifying and mitigating cyber threats across networks, hosts, and email systems. At Ironclad, he develops agentic systems for contract review, redlining, and negotiation. His work also includes enterprise security technologies combining document tracking, deception, and user behavior analytics to detect insider threats; machine-learning systems for phishing and brand impersonation detection; foundation-model-based systems for code analysis; and LLM-powered systems for supply-chain applications. Dr. Hershkop has served as an expert witness and consultant in matters involving financial fraud, computer networks, hardware security, and large-scale distributed systems, and has contributed to work concerning system security and domain registration privacy. He coedited Insider Attack and Cyber Security: Beyond the Hacker and has published research in Computers & Security and ACM Transactions on Internet Technology, among other venues. Dr. Hershkop is a named inventor on patents involving intrusion detection, malicious email and spam detection, phishing protection, methods for baiting inside attackers, and user-behavior-based attack detection. His experience also includes work funded by the Defense Advanced Research Projects Agency on active authentication and insider threat detection. Previously, he was a founding engineer at Andronite and Materlog; vice president and director of engineering at Allure Security; senior security analyst and adjunct professor at the University of Pennsylvania; assistant director of research facilities, assistant professor, and research scientist at Columbia University; and co-founder of System Detection.