Alexander Sotirov is a computer security researcher. He has been a researcher at Determina[1] and VMware.[2]
He is well known for his discovery of the ANI browser vulnerability[3] as well as the so-called Heap Feng Shui technique[4] for exploiting heap buffer overflows in browsers. In 2008, he presented research at Black Hat showing how to bypass memory protection safeguards in Windows Vista. Together with a team of industry security researchers and academic cryptographers, he published research on creating a rogue certificate authority by using collisions of the MD5 cryptographic hash function[5] in December 2008.
Sotirov is a founder and organizer of the Pwnie awards and was on the program committee of the 2008 Workshop On Offensive Technologies (WOOT '08).[6]