Tatu Ylönen

Tatu Ylönen
Name	Tatu Ylönen
Birth date	1973
Birth place	Finland
Nationality	Finnish
Occupation	Computer security researcher, entrepreneur, software engineer
Known for	SSH protocol, SSH Communications Security, SSH Tectia

Tatu Ylönen Tatu Ylönen is a Finnish computer security researcher and entrepreneur best known for creating the Secure Shell protocol and founding SSH Communications Security. He is recognized for work that intersects Internet Engineering Task Force, cryptography, network security, and information technology sectors, influencing projects such as OpenSSH, PuTTY, and commercial solutions used by NATO and European Union. Ylönen's contributions have impacted standards discussions among IETF working groups, IEEE, and national research institutions including Tekes and VTT Technical Research Centre of Finland.

Early life and education

Ylönen was born in Finland and completed higher education at institutions associated with University of Helsinki and Finnish research networks tied to CSC – IT Center for Science. During his studies he was involved with laboratory environments connecting to EUnet, RIPE NCC, and international academic networks including SURFnet and JANET. His thesis work and early projects interacted with protocols discussed at the IETF and incorporated implementations relevant to BSD systems, Linux distributions, and UNIX research communities.

Career and inventions

Early in his career Ylönen worked on secure remote access solutions influenced by vulnerabilities exposed in rlogin, Telnet, and FTP services used across ARPANET descendants and academic clusters. He implemented a practical replacement addressing cryptographic authentication and confidentiality needs pertinent to users of Kerberos, X.509, and PGP systems, and his designs interfaced with libraries such as OpenSSL, GnuTLS, and tools like scp and sftp. His inventions influenced deployments at organizations including Nokia, Ericsson, F-Secure, Microsoft, and Sun Microsystems.

SSH protocol and OpenSSH influence

Ylönen authored the first widely adopted Secure Shell specification that entered operational use and later formed the basis for protocol documents discussed within the IETF Secsh Working Group alongside authors of RFCs addressing transport, authentication, and connection protocols. The protocol's adoption prompted independent reimplementations such as OpenSSH from the OpenBSD project, PuTTY for Windows, and vendor implementations from IBM, HP, Cisco Systems, and Juniper Networks. Debates around patent, export control, and export regulations involved stakeholders like U.S. Department of Commerce, European Commission, and researchers publishing at venues such as USENIX and ACM CCS. The protocol interoperated with internet infrastructure components like SSH key fingerprints, X.509 certificates, and frameworks for two-factor authentication used by providers including Google, Amazon Web Services, and GitHub.

Business ventures and entrepreneurship

Ylönen founded SSH Communications Security to commercialize his protocol and later led initiatives to provide enterprise products such as SSH Tectia and management tools used by customers including Fortum, Kone, ABB, and financial institutions such as Nordea and Danske Bank. His company engaged with investors and partners including EQT Ventures, Index Ventures, and Finnish public funding agencies like Tekes. The business navigated mergers, acquisitions, and licensing discussions with entities including F-Secure, Rohde & Schwarz, and other cybersecurity vendors while participating in industry events such as Black Hat, RSA Conference, and Infosecurity Europe.

Awards and recognition

Ylönen has received national and international recognition, including honors from Finnish institutions like Tekniikan edistämissäätiö and acknowledgments in technology press such as Wired, The Register, ZDNet, and TechCrunch. His work has been cited in academic venues including IEEE Symposium on Security and Privacy, ACM SIGCOMM, and USENIX Security Symposium, and referenced by policy bodies including European Commission research programs and standards groups like the IETF.

Personal life and legacy

Ylönen's profile is associated with contributions to open standards, commercial security products, and academic discourse bridging Finnish research institutes and international standards organizations. His legacy is visible in operational practices across cloud computing providers, data centers run by Equinix, DigitalOcean, and enterprise IT departments at companies such as Siemens, General Electric, and Schneider Electric. Educational impact spans curricula at institutions including Aalto University, Tampere University, and Helsinki University of Technology through case studies and course modules on secure remote administration and cryptographic protocols.

Category:Finnish computer scientists