About

Debasish M. is a Security (Vulnerability) Researcher at McAfee, with over 11 years of relevant experience in the field of information security. He joined Intel/McAfee in 2014 as a Research Scientist-1 and has been serving in this role until February 2020. Debasish's core expertise lies in analyzing, debugging, and reverse engineering different classes of vulnerabilities, exploits, and attack toolkits across the MITRE matrix. He develops generic detection for host and network-based IPS products across McAfee. He has also performed binary patch diffing to develop POC/exploit from security patches. Furthermore, he has written API hook-based detection for different attack techniques for host-based IPS products in C and sometimes C++. He has analyzed different network protocols and written protocol parsers for Host-Based Network IPS products mostly in C, often C++ (Kernel -> Filter Driver for Windows). Apart from his core responsibilities, Debasish has developed several internal research-backed automation projects/frameworks to automate manual tasks and processes. This involves both front and back-end web application development following MVC standards, plus client-side automation. He has also found vulnerabilities in popular, widely deployed products to showcase McAfee IPS vulnerability research team’s technical abilities to the public. Debasish has published technical blogs and presented advanced research topics at various international security conferences. He has also presented innovative product ideas at the McAfee Innovation Summit (McAfee Internal Conference). He has filed two patents in September 2019. Prior to joining McAfee, Debasish worked as an Information Security Consultant at PwC and as an Information Security Analyst at iViZ Techno Solutions, mainly focusing on vulnerability assessment and penetration testing. Debasish holds a Bachelor of Technology (BTech) in Electrical Engineering from Calcutta Institute of Engineering and Management and completed his high school education from Banamalipur Priyanath Institution. Debasish is passionate about sharing his knowledge and expertise with others. He teaches RE/security for free on his YouTube channel and sometimes tries to build soft stuff and make them open-source on his GitHub profile. He has also done some vulnerability research in the past, which is showcased on his website.