Alexander Heid

Alexander Heid is an American computer security consultant, white hat hacker, and business executive.

Alexander Heid
OccupationChief Research Officer of SecurityScorecard, Hacker
OrganizationSecurityScorecard, HackMiami

Heid is a co-founder of the South Florida hacker conference and hacker group known as HackMiami,[1] and currently serves as the chief research officer of the New York City information security firm SecurityScorecard.

Early life & Education

Alexander Heid grew up in Miami, Florida and attended Barbara Goleman Senior High School.[2]

Career

Alexander Heid currently serves as chief research officer of the New York City information security firm SecurityScorecard. Heid joined the company in 2014, working directly with Aleksandr Yampolskiy and Sam Kassoumeh to develop the signal collection methodologies that powers the cyber threat intelligence and third party management aspects of the platform.[3]

Heid is documented as being one of the first researchers to attribute the Equifax data breach to a vulnerability in Apache Struts 2 within the first hours of the breach announcement.[4][5][6]

Prior to SecurityScorecard, Heid was the head of threat intelligence at Prolexic. Heid developed counterattack and neutralization methodologies against DDoS campaigns by discovering vulnerabilities in the attacker's botnet command and control servers.[7]

During the time at Prolexic, Heid was involved in the defense and mitigation of the Operation Ababil campaigns that were targeting the financial sector.[8][9]

Additionally, Heid has held senior security roles within the banking industry, specializing in web application vulnerability analysis and botnet cyber threat intelligence. Heid has given multiple presentations at hacker conferences demonstrating exploitable vulnerabilities within crimeware applications that can be leveraged by white hat researchers for the purposes of attribution and threat neutralization.[10][11]

Heid is also the author of the 2013 cryptocurrency threat intelligence report, "Analysis of the Cryptocurrency Marketplace," which was the first forensic report about malware threats relating to blockchain technologies. The report is ranked as one of the Top 1000 'Most Cited Blockchain Publications' by BlockchainLibrary.[12][13]

gollark: That is a gøød iðea.
gollark: Yes.
gollark: Custom binary formats are uncool. I said it. If you use a self-describing format, it is much easier for other people to work with it.
gollark: CBOR, if you müst.
gollark: I mean, honestly, custom binary formats are uncool and you should just use msgpack or something?

References
  1. Kushner, David. "The Geeks on the Front Lines". RollingStone.
  2. Banham, Russ. "Spy on Spy: Hacking into the Darknet". RussBanham.com.
  3. "SecurityScorecard Leadership". SecurityScorecard.com.
  4. McLannahan, Ben. "Equifax flaws exposed by hack attack". FT.com.
  5. Warren, Elizabeth. "Letter to Richard Smith re: Equifax Hearing" (PDF). Senate.gov.
  6. Mathews, Lee. "Equifax Data Breach Impacts 143 Million Americans". Forbes.com.
  7. Goodin, Dan. "White hats publish DDoS hijacking manual, turn tables on attackers". ArsTechnica.com.
  8. "PLXSERT - DDoS Attacks Against Global Markets".
  9. "Prolexic Quarterly Global DDoS Attack Report - Q2-2013" (PDF).
  10. Heid, Alex. "The Next HOPE (2010): Modern Crimeware Tools and Techniques: An Analysis of Underground Resources". YouTube.com.
  11. Heid, Alex. "HOPE Number Nine (2012): Crimeware Tools and Techniques of 2012: Past, Present, and Future". YouTube.com.
  12. "Most Cited Blockchain Publications". BlockchainLibrary.com.
  13. Heid, Alex. "HackMiami: Analysis of the Cryptocurrency Marketplace (2013)" (PDF). HackMiami.org.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.