Alex “Jay” Balan

Chief Security Researcher at Bitdefender

Alex “Jay” Balan is the Chief Security Researcher and spokesperson for Bitdefender. His career is focused on Information Security, Innovation and Product Strategy, fields in which he has so far accumulated over 15 years of experience. He drove the vision for Bitdefender’s UNIX-based security solutions before kickstarting an ambitious project that would advance the company’s R&D department and steer a good part of the company’s focus towards technology and innovation. He is now furthering security and privacy research and has been actively involved in creating awareness by speaking at a number of conferences including DefCon, RSA, BSides, ISC China, Interpol’s meetings on Cyber Crime for Heads of Units, DefCamp, IMWorld, Future of Media and many others

Social Profiles

All Sessions by Alex “Jay” Balan

  • OPCDE 2019 (Day 2)


  • 15:15  - 16:00
    We continue our quest to identify attack vectors for mass hacking IoTs. After our DEF CON 25 talk showing how common code, present in many different brands can lead to RCE on about 200.000 devices worldwide we upped our game and identified multiple vulnerabilities in one product line from one vendor, counting more than 450.000 active units at the time of writing this abstract. Full RCE on all of them is just the tip of a very dark and scary iceberg. In this talk we’ll show the methodology used in the research (you’ll have a chance to learn quick tips & tricks in IoT vulnerability research), all identified vulnerabilities, communication with the vendor (or lack of) and of course, live demos at every step. We’ll also touch a bit on ethics, accountability, standards, crypto, how no IoT vendor makes use of ASLR and how any buffer overflow is virtually guaranteed to lead to RCE.
    IoT Security




Share

Alex “Jay” Balan