Evgeniy Gostyukhin Email & Phone Number

Germany

Saint Petersburg, Russian Federation

• I am a part of the EMC PowerPath team. EMC PowerPath is a host-based software that provides multipathing and load-balancing capabilities for servers deployed in physical and virtual environments. It enables our.
• Designed and implemented the solution to bypass undocumented behavior of PnP manager which made it possible to ship the stable release of PowerPath for modern Windows Server 2012 and 2012R2.
• Provided reverse engineering expertise for solving incompatibility problems with other drivers and system components.
• Implemented a driver for simulation of high-performance IO paths for Windows; this should minimize a need for expensive real hardware and shorten the performance test cycle by 70% in some cases.
• Reduced time of routine work for debugging by implementing the tool for deploying debug configurations of the product to a virtual machine.
• Implemented a local HCK testing infrastructure which reduced the time needed to root cause errors in pre-signing testing by 50%.Platform: Microsoft Windows ServerTechnologies: C, WDK, MPIO, IDA Pro, WinDbg, Microsoft.

Saint Petersburg, Russian Federation

• OSX and Windows based solution for data loss prevention (DLP). It was designed to analyze security event data for internal and external threat management and to collect and report for regulatory compliance and forensics.
• Designed and implemented kernel extension and corresponding user-mode library for intercepting USB devices, which is mandatory for customers who need HIPAA compliance.
• Designed and implemented kernel extension for file system monitoring.
• Designed and implemented driver for keyboard events monitoring for Windows agent.Platform: MacOS X, Microsoft WindowsTechnologies: C, C++, Python, IOKit, NKE, Kauth, XCode, gdb, WDK, WinDbg, Microsoft Visual Studio

Saint Petersburg, Russian Federation

• New attack vectors research and mitigation.
• Developed unpacking module that has the ability to perform processing on executables at network speeds.
• Implemented kernel mode to user mode interaction module for the company product.
• Reverse engineered and wrote internal reports on various malware.Platform: Microsoft WindowsTechnologies: Assembly x86/x86-64, C, C++, Python, WDK, IDA Pro, WinDbg, OllyDbg, Microsoft Visual Studio, PE, Wireshark

Saint Petersburg, Russian Federation

• Second-largest Russian antivirus company.
• Maintained custom detection routines for TDL3/TDSS rootkit.
• Reverse engineered and wrote the internal report on SpyEye banking trojan.
• Implemented kernel memory dumper; reduced the need to manually analyze packed rootkits.Platform: Microsoft WindowsTechnologies: Assembly x86/x86-64, C, Python, WDK, IDA Pro, WinDbg, OllyDbg, Microsoft Visual Studio.