|Alma mater||University of Pittsburgh|
|Known for||Summercon Organizer, Automotive Hacking|
Chris Valasek is a computer security researcher with Cruise Automation, a self-driving car startup owned by GM, and best known for his work in automotive security research. Prior to his current employment, he worked for IOActive, Coverity, Accuvant, and IBM . Valasek holds a Bachelors in Computer Science from University of Pittsburgh. He currently lives in Pittsburgh, Pennsylvania.
Valasek has publicly demonstrated many security vulnerabilities, with particular focus on Microsoft Windows heap exploitation. His 2009 presentation "Practical Windows XP/2003 Heap Exploitation" at BlackHat presented a novel approach to gaining elevated access in a Windows environment. Later research, such as his 2010 paper "Understanding the Low Fragmentation Heap: From Allocation to Exploitation" demonstrated ways to circumvent vendor mitigations to the approaches outlined in his prior work.
Since 2013, he has gained global notoriety for his research with Charlie Miller in automotive security research, demonstrating a number of attack vectors against ECUs in automotive control networks. Together with Miller, they have produced a survey of remote attack surfaces in then-current model year automobiles, an important first step in establishing the state of the art of automotive security and safety research.
- "Uber hires two security researchers to improve car technology". [Reuters]. August 28, 2015.
- McDonald, John; Valasek, Chris (2009-07-25). "Practical Windows XP/2003 Heap Exploitation" (PDF): 84. Retrieved 2017-03-01.
- Valasek, Chris (2010-07-25). "Understanding the Low Fragmentation Heap" (PDF): 86. Retrieved 2017-03-01.
- Andy Greenberg (2013-07-24). "Hackers Reveal Nasty New Car Attacks--With Me Behind The Wheel (Video)". Forbes.
- Miller, Charlie; Valasek, Chris. "A Survey of Remote Automotive Attack Surfaces" (PDF): 92. Retrieved 2017-03-01.
- Andy Greenberg (2014-08-06). "How Hackable Is Your Car? Consult This Handy Chart". Wired.
- Andy Greenberg (2015-07-21). "Hackers Remotely Kill a Jeep on the Highway—With Me in It". Wired.
- Andy Greenberg (2016-08-01). "The Jeep Hackers Are Back to Prove Car Hacking Can Get Much Worse". Wired.