Mark Eugene Russinovich is a Spanish-born American software engineer who serves as CTO of Microsoft Azure. He was a cofounder of software producers Winternals before it was acquired by Microsoft in 2006.
From September 1994 through February 1996 he was a research associate with the University of Oregon's computer science department. From February through September 1996 he was a developer with NuMega Technologies, where he worked on performance monitoring software for Windows NT. In 1996, he and Bryce Cogswell cofounded Winternals Software, where Russinovich served as Chief Software Architect, and the web site, where Russinovich wrote and published dozens of popular Windows administration and diagnostic utilities including Autoruns, Filemon, Regmon, Process Explorer, TCPView, and RootkitRevealer among many others. From September 1996 through September 1997 he worked as a consulting associate at OSR Open Systems Resources, Inc., a company based in Amherst, New Hampshire. From September 1997 through March 2000, he was a research staff member at IBM's Thomas J. Watson Research Center, researching operating system support for Web server acceleration and serving as an operating systems expert. Russinovich joined Microsoft in 2006, when it acquired Winternals Software. In his role as an author, he is a regular contributor to TechNet Magazine and Windows IT Pro magazine on the subject of the Architecture of Windows 2000 and was co-author of Inside Windows 2000. Russinovich is the author of many tools used by Windows NT and Windows 2000 kernel-mode programmers, and of the NTFSfile system driver for DOS.
Works
In 1996, Russinovich discovered that altering two values in the Windows Registry of the Workstation edition of Windows NT 4.0 would change the installation so it was recognized as a Windows NT Server and allow the installation of Microsoft BackOffice products which were licensed only for the Server edition. The registry key values were guarded by a worker thread to detect tampering, and later a program called NT Tune was released to kill the monitor thread and change the values. Russinovich wrote LiveKD, a utility included with the book Inside Windows 2000. As of 2017, the utility is readily available to download. In 2005, Russinovich discovered the Sony rootkit in SonyDRM products. Its function was to prevent users from copying their media. In January 2006, Russinovich discovered a rootkit in Norton SystemWorks by Symantec. Symantec immediately removed the rootkit. He also analyzed the Windows Metafile vulnerability and concluded that it was not a deliberate backdoor. This possibility had been raised – although tentatively – by Steve Gibson after a cursory investigation of the nature of the exploit and its mechanism. Russinovich's novels Zero Day and Trojan Horse were published by Thomas Dunne Books on March 15, 2011 and September 4, 2012. Both are in a series of popular techno-thrillers, that have attracted praise from industry insiders such as Mikko Hyppönen and Daniel Suarez. A short story, "Operation Desolation" was published just before Trojan Horse and takes place 1 year after the events of Zero Day. Book 3, Rogue Code: A Novel deals with vulnerabilities of the NYSE. It has a foreword by Haim Bodek, author of The Problem of HFT: Collected Writings on High Frequency Trading & Stock Market Structure Reform.