Andrea Brancaleoni
About
Detail
Staff Security Engineer @ Brave Software
United States
Résumé
Jobs
verified_user
0% verified
Senior Security EngineerBraveOct 2021 - Current (5 years)- Freelance Security EngineerfreelanceNov 2018 - Current (7 years 11 months)
- Security Researcher & Penetration TesterDoyensecNov 2018 - Oct 2021 (3 years)
- OS Security EngineerFamocoNov 2017 - Oct 2018 (1 year)
- Software EngineerCleafyOct 2015 - Nov 2017 (2 years 2 months)
- Software Engineering 2 AssistantPolitecnico Di MilanoSep 2015 - Feb 2016 (6 months)I managed the workflow for the course students. Moreover, I advise and help during the lessons.
Education
verified_user
0% verified
- Master's degree, Computer EngineeringPolitecnico Di MilanoJan 2013 - Dec 2016 (4 years)Computer Engineering Master Degree
- Bachelor's degree, Information TechnologyPolitecnico Di MilanoJan 2009 - Dec 2012 (4 years)
Projects (professional or personal)
verified_user
0% verified
- IInQL: GraphQL ScannerSep 2019 - Current (7 years 1 month)GraphQL Introspection Scanner, is a Burp and Stand-alone recon interface for GraphQL endpoints.
- CCVE-2019-12384Jul 2019Jackson Gadget leads to RCE
- ttHYPon: Hypervisor Less Secure Reference MonitorJan 2016 - Apr 2017 (1 year 4 months)Userspace software fault mechanisms increasingly depend on kernel space security mechanisms that extend DAC (Discretionary Access Control). These mechanisms have been targeted and exposed by various Linux kernel vulnerabilities, such as Mempodipper (CVE-2012-0056) or {get,put}_user on ARM (CVE-2013-6282). Currently, hardware IOMMU (Input/Output Memory Management Unit) mitigates hardware-based side channel attacks that target the kernel memory, however, IOMMU cannot mitigate vulnerabilities introduced by software developers in device drivers. Moreover, it is not practical to guarantee the security of the Linux kernel with formal methods given the big trusted computing base. The aim of this thesis is to extrude the kernel Reference Monitor in