Ivan Gulakov Email & Phone Number

Berlin, Germany

I handle security issues daily as part of the incident response team for the Xen hypervisor at EC2. I work on analyzing, fixing, and testing vulnerabilities, whether they're found internally or externally. I also run an in-house fuzzing service for low-level components like kernels, hypervisors, and drivers. It's scalable, easy to use, and helps deliver valuable findings back to our users.

Moscow, Moscow City, Russia

• Designed and developed a TUI for the fuzzing control using Rust. This includes a collection of live information about the testing process (amount of found bugs, the status of running processes, code coverage, CPU load, and so on) and fuzz process management (pause, kill, create a new one). This tool allows controlling a large number of targets under test with exceeding several thousand cores for some programs. • I've ported fuzzer to work on Windows. After my work, it can now use DynamoRIO and TinyInst on windows and fuzz big targets such as FreeCAD, Word, and Sublime Text. Also, we implemented GUI fuzzing on windows for our fuzzer. • Implemented custom QEMU machines for fuzzing. Those machines contain a simple mechanism of snapshots to make fast reloads (not that fast as in Nyx) • Architected and implemented a dynamic program analysis manager that controls the testing process (restart, shutdown, collect information, autostart, load balance) between many fuzzers running in parallel on the same machine or even many machines connected over the network. • Done some research on snapshot fuzzing. Implemented snapshots for TinyInst. Implemented the Linux side of TinyInst instrumentation. Connected Nyx as a backend for the main fuzzer tool developed by ISP RAS. • Fuzzed some hard targets including (but not limited to): ARM TrustZone (kernel and trustlets), PostgreSQL, various network protocols, and a lot of open-source targets which are used in many popular Linux distributions. • Participated in the implementation of the SDL approach in most projects in the company using Gitlab CI/CD, Jenkins, fuzzing, and static analysis. • Improved fuzzer performance by capturing and analyzing traces with perf. • Participated in the development of a fuzzing engine with partial emulation (based on Unicorn, S2E, and Qiling). It was successfully used to fuzz some firmware later on by my colleagues.

Moscow, Moscow City, Russia

• Participated in the development of two production-ready iOS apps. One was for remote monitoring of cameras and the second one was a B2C application for a big chain of restaurants. I communicated with the business side and was responsible in a small team for quick implementation of the rapidly changing needs of the business, connecting people in different teams together. Both applications were presented in AppStore. I started with Objective-C and then ported both apps to Swift when it came out. • Most of my time I was working on a restaurant aggregator at a startup. I’ve been connecting the frontend to the backend and transferring the designer's sketches to the code. In the future, my work was used to show the concept to investors and receive the next rounds of investments.

Master'S Degree, Computer Science, 3.9/4

Bachelor'S Degree, Computer Science