| Mary Ann Davidson | |
| Nationality: | American |
| Alma Mater: | University of Virginia School of Engineering and Applied Science Wharton School of the University of Pennsylvania |
| Occupation: | Chief Security Officer of Oracle Corporation |
Mary Ann Davidson is the Chief Security Officer of Oracle Corporation.[1]
Davidson attended the Severn School, a preparatory high school for the Naval Academy, graduating in 1976.
Davidson joined Oracle in 1988, as a product manager in Oracle's financial software business unit.
Davidson's involvement in computer security dates to 1993, when she took a position as product marketing manager in Oracle's secure systems business unit. She has served on the Defense Science Board and as a member of the Center for Strategic and International Studies Commission on Cybersecurity for the 44th Presidency. She has testified about cybersecurity before a number of committees in both the U.S. House of Representatives and the Senate Committee.[2]
Davidson has a BSME from the University of Virginia and an MBA from the Wharton School of the University of Pennsylvania. She has also served as a commissioned officer in the U.S. Navy Civil Engineer Corps, during which she was awarded the Navy Achievement Medal.
In January 2005, Davidson was criticized by David Litchfield, who called on Oracle to replace Davidson, pointing to a series of delayed or ineffective security patches in Oracle's database server as evidence of "categorical failure".[3]
In August 2015, Davidson published a blog post criticizing engineers who use static analysis tools to find and report potential vulnerabilities in Oracle software. Articles about her post soon appeared on technology news sites, where comments were extremely critical of its content and tone.[4] The post was subsequently removed.
In December 2015, while Davidson was still Oracle's Chief Security Officer, Oracle agreed to settle Federal Trade Commission charges that it deceived consumers about the security provided by updates to its Java Platform, Standard Edition software (Java SE).
Under the terms of a proposed consent order, Oracle will be required to give consumers the ability to easily uninstall insecure, older versions of Java SE.[5] [6]