- Mark Russinovich
-
Mark Russinovich
Russinovich at PDC10, October 2010Born c. 1966 (age 44–45)
Salamanca, SpainOccupation Technical Fellow at Microsoft Known for cofounder of Winternals Software and Sysinternals.com Website sysinternals.com
blogs.technet.com/b/markrussinovich/Mark E. Russinovich (born c. 1966) is a Technical Fellow in the Platform and Services Division at Microsoft. He was a cofounder of software producers Winternals before it was acquired by Microsoft in 2006.
Contents
Early life and education
He was born in Salamanca, Spain and was raised in Birmingham, Alabama, until he was 15, when he moved with his family to Pittsburgh, Pennsylvania. His father was a radiologist and his mother was a business administrator of his father's radiology practice in Pittsburgh.
When Russinovich began taking an interest in programming at age 15, he bought himself his first computer, a TI99/4A. About six months later his parents bought him an Apple II+ from his local high school when it upgraded the computer labs to Apple IIe's.
In 1989, Russinovich earned his B.S. in computer engineering from Carnegie Mellon University. The following year he received an M.S. in computer engineering from Rensselaer Polytechnic Institute. He later returned to Carnegie Mellon, where he received a Ph.D. in computer engineering in 1994.[1]
Career
From September 1994 through February 1996 he was a research associate with the University of Oregon's computer science department. From February through September 1996 he was a developer with NuMega Technologies, where he worked on performance monitoring software for Windows NT.[2]
In 1996, he and Bryce Cogswell cofounded Winternals Software, where Russinovich served as Chief Software Architect, and the web site Sysinternals, where Russinovich wrote and published dozens of popular Windows administration and diagnostic utilities including Autoruns, Filemon, Regmon, Process Explorer, TCPView, and RootkitRevealer among many others.
From September 1996 through September 1997 he worked as a consulting associate at OSR Open Systems Resources, Inc., a company based in Amherst, New Hampshire. From September 1997 through March 2000, he was research staff member at IBM's Thomas J. Watson Research Center, researching operating system support for Web server acceleration and serving as an operating systems expert.[2]
Russinovich joined Microsoft in 2006, when it acquired Winternals Software.
In his role as an author, he is a regular contributor to TechNet Magazine and Windows IT Pro magazine (previously called Windows NT Magazine) on the subject of the Architecture of Windows 2000 and was co-author of Inside Windows 2000 (3rd edition). Russinovich is the author of many tools used by Windows NT and Windows 2000 kernel-mode programmers, and of the NTFS file system driver for DOS. He is widely regarded as a Windows expert.
Other work
In 1996, Russinovich discovered that the alteration of two registry values in the Windows Registry of the Workstation edition of Windows NT 4 would allow the installation of Microsoft BackOffice products which were licensed only for the Server edition.[3]
In 2005, Russinovich discovered the Sony rootkit in Sony DRM products. Its function was to prevent users from copying their media.[2]
In 2006, Russinovich discovered a rootkit in a product of security software company Symantec. Symantec directly removed the rootkit.[4][5]
In January 2006, Russinovich again came to public attention when he analyzed the Windows Metafile vulnerability in Windows and concluded that it was not a deliberate backdoor. This possibility had been raised — albeit tentatively — by Steve Gibson after a cursory investigation of the nature of the exploit and its mechanism.[6]
Russinovich's first novel Zero Day was published by Thomas Dunne Books on March 15, 2011.[7]
Bibliography
- Books
- Solomon, David; Mark Russinovich (September 16, 2000). Inside Microsoft Windows 2000 (Third ed.). Microsoft Press. ISBN 0-7356-1021-5.
- Russinovich, Mark; David Solomon (December 8, 2004). Microsoft Windows Internals (Fourth ed.). Microsoft Press. ISBN 0-7356-1917-4.
- Russinovich, Mark; David Solomon, Alex Ionescu (June 17, 2009). Microsoft Windows Internals (Fifth ed.). Microsoft Press. ISBN 0-7356-2530-1.
- Russinovich, Mark (March 15, 2011). Zero Day: A Novel. Thomas Dunne Books. ISBN 031261246X.
- Russinovich, Mark; Aaron Margosis (July 12, 2011). Windows Sysinternals Administrator's Reference. Microsoft Press. ISBN 073565672X.
- Articles
- Russinovich, Mark (October 1997). "Inside NT's Object Manager". Windows IT Pro. http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=299.
- Russinovich, Mark (December 1998). "NT vs.UNIX: Is One Substantially Better". Windows IT Pro. http://www.windowsitpro.com/Articles/Index.cfm?IssueID=97&ArticleID=4500.
- Russinovich, Mark (June 1999). "Inside Encrypting File System, Part 1". Windows IT Pro. http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=5387&Key=Internals.
- Russinovich, Mark (February 2007). "Inside the Windows Vista Kernel: Part 1". TechNet Magazine. http://www.microsoft.com/technet/technetmag/issues/2007/02/VistaKernel/.
- Russinovich, Mark (March 2007). "Inside the Windows Vista Kernel: Part 2". TechNet Magazine. http://www.microsoft.com/technet/technetmag/issues/2007/03/VistaKernel/.
- Russinovich, Mark (April 2007). "Inside the Windows Vista Kernel: Part 3". TechNet Magazine. http://www.microsoft.com/technet/technetmag/issues/2007/04/VistaKernel/.
- Russinovich, Mark (June 2007). "Inside Windows Vista User Account Control". TechNet Magazine. http://www.microsoft.com/technet/technetmag/issues/2007/06/UAC/.
- Russinovich, Mark (July 2009). "Inside Windows 7 User Account Control". TechNet Magazine. http://technet.microsoft.com/en-us/magazine/2009.07.uac.aspx.
- Videos
- Russinovich, Mark (November 2006). "Windows Vista Kernel Changes". Microsoft TechEd IT Forum 2006. http://www.microsoft.com/emea/itsshowtime/sessionh.aspx?videoid=340.
- Russinovich, Mark (November 2006). "Advanced Malware Cleaning". Microsoft TechEd IT Forum 2006. http://www.microsoft.com/emea/itsshowtime/sessionh.aspx?videoid=359.
- Russinovich, Mark (November 2006). "Advanced Windows Troubleshooting with Sysinternals Process Monitor". Microsoft TechEd IT Forum 2006. http://www.microsoft.com/emea/itsshowtime/sessionh.aspx?videoid=346.
- Russinovich, Mark (November 2006). "Windows Vista User Account Control Internals". Microsoft TechEd IT Forum 2006. http://www.microsoft.com/emea/itsshowtime/sessionh.aspx?videoid=360.
- Russinovich, Mark (2010). "All of Mark Russinovich sessions on Microsoft TechEd Online". Microsoft TechEd Online. http://www.msteched.com/Speakers/Mark-Russinovich.
References
- ^ "Mark Russinovich". Making it Big in Software. http://makingitbigcareers.com/books/making-it-big-in-software/mark-russinovich/. Retrieved February 13, 2011.
- ^ a b c "Affidavit of Mark Russinovich". April 2, 2005. http://www.sonysuit.com/classactions/michaelson/71.pdf.
- ^ Andrew Schulman (1996-09-16). "Differences Between NT Server and Workstation Are Minimal". O'Reilly and Associates. http://www.oreilly.com/news/differences_nt.html. Retrieved 2005-11-16.
- ^ http://www.zdnet.com/blog/spyware/symantec-confesses-to-using-rootkit-technology/747
- ^ Symantec Norton Protected Recycle Bin Exposure
- ^ Steve Gibson (2006-01-12). "grc.news.feedback". Gibson Research Corporation. http://12078.net/grcnews/article.php?group=grc.news.feedback&id=60006. Retrieved 2007-11-06. "The only conclusion that can reasonably be drawn is that this was a deliberate backdoor put into all of Microsoft's recent editions of Windows."
- ^ Zero Day: A Novel
External links
- Technical Leader Mark Russinovich
- Mark's TechNet blog
- Video interview with Mark in his office at Microsoft on TechNet Edge
- Mark's public event/session videos on Microsoft IT's Showtime! by TechNet
- Appearance on The Stack Exchange Podcast, Nov 11, 2011
- Original Article on Sony's rootkit
- Inside the WMF backdoor
- Windows Sysinternals Tools written by Mark Russinovich
- Official List of Microsoft Technical Fellows
Categories:- Windows people
- Living people
- Microsoft technical fellows
- People from Birmingham, Alabama
- Carnegie Mellon University alumni
- Rensselaer Polytechnic Institute alumni
Wikimedia Foundation. 2010.