Mark Russinovich-程序员百科全书- 科技百科 -互联网博物馆，你我的知识加油站

Mark Russinovich 微软技术院士（Technical Fellow），享誉世界的Windows内核技术专家。他也是Sysinternals的创建者之一，开发了很多用于Windows管理和诊断的工具。

Mark，是Windows Internals一书的作者、微软院士、Windows领域顶尖大拿、一表人才的帅哥：Mark Russinovich。Mark在Technet也开有一个博客，虽然不是像我这让频繁的发“水贴”，但是只要Mark发帖，基本上都是属于经典级别的好贴。

mark_russinovich zcover

因为Mark的网站是英文网站，可能大家可能平时没有特别的注意到。我这里整理了几篇大牛最近发表的一些Windows内核和排错方面的文章，建议对Windows内核感兴趣并且喜欢做debug的朋友，仔细地读一读，一定是会有很大的收获。

[显示部分][显示全部]

简介编辑本段 回目录

Mark E. Russinovich (1966) is a software engineer and software architect.

He earned his Ph.D. in computer engineering in 1994 from Carnegie Mellon University.

He joined Microsoft in 2006 when it acquired Winternals Software, the company he cofounded in 1996 and where he worked as Chief Software Architect. He is also cofounder of Sysinternals.com, where he wrote and published dozens of popular Windows administration and diagnostic utilities including Filemon, Regmon, Process Explorer and RootkitRevealer. He previously worked at IBM's Thomas J. Watson Research Center, researching operating system support for Web server acceleration and serving as an operating systems expert.

In his role as an author, he is a regular contributor to TechNet Magazine and Windows IT Pro magazine (previously called Windows NT Magazine) on the subject of the Architecture of Windows 2000 and was co-author of Inside Windows 2000 (3rd edition). Russinovich is the author of many tools used by Windows NT and Windows 2000 kernel-mode programmers, and of the NTFS file system driver for DOS. He is widely regarded as a Windows expert.

Some of his work was done in collaboration with David A. Solomon and under the banner of Sysinternals which is also used by Bryce Cogswell. The commercial part of his work partly spun off to the company Winternals Software.

In 1996, Russinovich discovered that the alteration of two registry values in the Windows Registry of the Workstation edition of Windows NT 4 would allow the installation of Microsoft BackOffice products which were licensed only for the Server edition[1].

In 2005, Russinovich discovered the Sony rootkit in Sony DRM products, the function of the rootkit was to prevent users from copying their media.

In 2006, Russinovich discovered a rootkit in a product of security software company Symantec, Symantec directly removed the rootkit.

Main article: Windows Metafile vulnerability

In January 2006, Russinovich again came to public attention when he analyzed the Windows Metafile vulnerability in Windows and concluded that it was not a deliberate backdoor. This possibility had been raised — albeit tentatively — by Steve Gibson after a cursory investigation of the nature of the exploit and its mechanism.

黑客Mark Russinovich编辑本段 回目录

在Mark Russinovich关于索尼（Sony BMG）公司利用鬼鬼祟祟的技术在用户电脑当中执行“DRM（digital rights management，数字版权管理）阴谋”的震撼世界的发现之前，“rootkit”是一个偏颇的专业技术名词。但是现在，这个词语已经出现在了每一家反病毒软件公司的销售宣传材料当中。它们反复地引用Mark Russinovich的相关言论，就好像他真的是一位Windows系统世界的教父级人物一样。

Mark Russinovich

这项关于“索尼rootkit”的发现，向世界揭示了一个真相，那就是反病毒软件生产厂商在秘密恶意软件面前显得是多么的无能为力。这一真相迫使了全世界的安全生产厂商们将反rootkit的检测扫描技术，添加进了现有的产品当中。

Russinovich，在微软公司收购了Sysinternals就一直供职于微软，花费了自己2006年的绝大部分时间来传播自己早期的关于rootkit的警告，并致力于建立新型的恶意软件猎杀工具和措施。

参考文献编辑本段 回目录

http://en.wikipedia.org/wiki/Mark_Russinovich

词条内容仅供参考，如果您需要解决具体问题
（尤其在法律、医学等领域），建议您咨询相关领域专业人士。本词条对我有帮助3

Mark Russinovich 发表评论(0) 编辑词条

简介编辑本段 回目录

黑客Mark Russinovich编辑本段 回目录

相关著作编辑本段 回目录

相关链接编辑本段 回目录

参考文献编辑本段 回目录

对词条发表评论