Matt Suiche

Matt Suiche
Matt Suiche (2012)
Born	(1988-09-22)22 September 1988
Nationality	French
Fields	Computer science
Known for	Computer security Memory forensics Virtualization
Influences	Fravia
Website http://msuiche.net http://www.moonsols.com

Matthieu "Matt" Suiche (born c. 1988), also known under the handle "msuiche", is a French hacker and entrepreneur widely known as the founder of MoonSols, and co-founder of CloudVolumes before it was acquired^[1] by VMWare in 2014. In March 2014, Suiche was highlighted as one of the 100 key French developers in a report^[2] for French minister Fleur Pellerin.

Career

Suiche is best known for his work in the memory forensics and computer security fields. His most notable research contributions include Windows hibernation file^[3] analysis and Mac OS X physical memory analysis.^[4]

Furthermore, he created LiveCloudKd,^[5] a utility to analyze running Microsoft Hyper-V virtual machines. Later Mark Russinovich, Microsoft Technical fellow, highlighted it on his blog^[6] before introducing^[7] a similar feature in one of Microsoft's tool. Russinovich also said "We were so impressed that we invited Matthieu to speak about live kernel debugging and LiveCloudKd at this year’s BlueHat Security Briefings".

He is also known to have discovered multiple security flaws in multiple Microsoft Windows kernel components.^[8][9][10] Suiche is Microsoft Most Valuable Professional in Enterprise Security.^[11]

Suiche started his career as an independent security researcher by presenting his work about Microsoft Windows hibernation file for the first time at the international conference PacSec held in Tokyo, Japan in 2007.^[12] He also had been invited by Europol to speak at their internal High Tech Crime Experts Meeting in 2008^[13][14] Between 2009 and 2010, he worked as a researcher for Netherlands Forensic Institute in The Hague, The Netherlands, before starting MoonSols which is specialized in memory forensics and incident response.

Suiche was also contributor^[15] of the Samba project during the Google Summer of Code in 2008, where he was in charge of implementing the new compression algorithms used by the networking protocols.

In 2011, Suiche founded CloudVolumes (formerly SnapVolumes^[16][17]) a California-based virtualization management product company where he served as a Chief Scientist.^[18]

Conferences

Suiche also had been a frequent speaker at various computer security conferences such as Black Hat Briefings,^[19][20] Microsoft Blue Hat Hacker Conference,^[21] Shakacon, Hackito Ergo Sum, Europol High Tech Crime Experts Meeting, CanSecWest,^[22] PacSec,^[23] Hack In The Box, SyScan^[24] and Shakacon.

He is on the board of Program Committee of Shakacon security conference, and one of the founder of Hackito Ergo Sum security conference in Paris, France.

Pwnie Awards 2013

In 2012, Suiche was part of the security researchers, along several other well-known security researchers, who submitted a bogus article^[25] entitled the article "Nmap: The Internet Considered Harmful - DARPA Inference Checking Kludge Scanning" to Hakin9 Information Security Magazine. This article had been used as a social proof to demonstrate the lack of relevance and expertise of certain medias dedicated to Information Security, but also to criticize spamming techniques used by medias in order to generated quantity-oriented data rather than quality-oriented information. The following year, this article resulted in having the 2013 Pwnie Awards^[26][27] attributed to Hakin9 under the "Most Epic FAIL" category.

Awards and recognition

• 2009-2015, Microsoft Most Valuable Professional.^[11]
• 2014, One of the 100 top key developers in France.^[2]

Bibliography

• Debugged! Mz/Pe: Magazine For/From Practicing Engineers by Dmitry Vostokov, Matthieu Suiche and Roberto Alexis Farah, OpenTask ISBN 1-90-671738-9, 2009

See also

• Memory forensics

References