Work:
I currently work for Sabre Security in Bochum, Germany.
Up to November 2005 I worked for F-Secure Corporation as an Anti-Virus Researcher in the research Lab in San Jose, CA. The company's headquarters are located in Helsinki, Finland where I spent my first years in the company.
My work and main interests consist of developing reverse engineering tools and research on reverse engineering automation among some other things. I'm a member of the AntiVirus Emergency Discussion Network (AVED)
Publications:
- Introduction to IDAPython (PDF). Ero Carrera.
- Digital Genome Mapping - Advanced Binary Malware Analysis, Virus Bulletin Conference 2004, Chicago. pages 187-197 (joint paper with Gergely Erdélyi)
- NoConName
- Descriptions of malware which I have had the opportunity to look at can be found here.
Training:
- Reverse Engineering on Windows: Application in Malicious Code Analysis, Pedram Amini & Ero Carrera. Black Hat Las Vegas 2006
- Reverse Engineering on Windows: Application in Malicious Code Analysis, Pedram Amini & Ero Carrera. Black Hat DC 2007
- Reverse Engineering on Windows: Application in Malicious Code Analysis, Pedram Amini & Ero Carrera. Black Hat Tokyo 2007
- Reverse Engineering on Windows: Application in Malicious Code Analysis, Pedram Amini & Ero Carrera. Black Hat Las Vegas 2007
Citations:
- Malware Phylogeny Generation using Permutations of Code, Md. Enamul Karim, Andrew Walenstein, Arun Lakhotia, Laxmi Parida. European Research Journal of Computer Virology 2005.
- Tracing Execution Paths, Maksym Schipka. Virus Bulletin Proceedings 2005. Pages 31-39
- Towards Agile Reverse Engineering, Frédéric Perriot. Virus Bulletin Proceedings 2005. Pages 246-259
- An Automated Virus Classification System, Marius Gheorghescu. Virus Bulletin Proceedings 2005. Pages 294-299
- Analyzing Worms and Network Traffic using Compression. Stephanie Wehner, 2005.
- Structural Comparison of Executable objects. Halvar Flake. 2004. DIMVA 2004
- Support for the Cyber Defense Initiative: Port 80, 443 and the Slapper/Modap Worm. Trevor Metzger, 2002. SANS Institute
- The State of Home Computer Security. Ulf Frisk, Semir Drocic, 2004.
Contact:
GPG ID: 0x9AAD7EA2
GPG Fingerprint: B250 D0F2 12AE 52EA 6AD1 6D1D BB2E 9FD9 9AAD 7EA2