We Protect You: Timo Hirvonen, Anti-malware Analyst

This is a guest post from an expert from F-Secure Labs. Enjoy!

My name is Timo Hirvonen and I work in the F-Secure Labs as Anti-malware Analyst. I have two major areas of focus in my work: exploit prevention and F-Secure DeepGuard.

Exploit analysis and prevention is my passion, and I love the challenge it offers.

I find fighting against exploits important; nowadays exploit kits are the main infection vector so no matter how safely and wisely you browse you might still get infected. By stopping the exploits, we block the attacker from executing any code on the victim’s computer, which in turn protects against many kinds of threats: ransomware, banking trojans – you name it.

The second cool part of my job is working with the F-Secure DeepGuard technology. I try my best to make sure it offers our Security Response the best possible tools to fight current and also future malware. The main idea behind DeepGuard is simple but extremely powerful: it monitors the behavior of unknown applications. Modern malware evolves quickly, and often each user gets infected by a unique copy of the malware. This poses a challenge for traditional detection technologies.

For DeepGuard, however, this is not a problem since there is one trait that all malware have in common: they exhibit malicious behavior. It is really an awesome technology, and we have had great results in protecting our users from serious threats like the infamous banking trojan Zeus.

Working in the F-Secure Labs was a dream of mine even as a teenager. I have now been with F-Secure for little over two years, and I can say it feels great to first work hard with all the talented the people in the Labs to solve some challenge, and then get the reward of seeing the fruit of your labor protecting all our users out there.

I can truly say that my job is a dream come true.

You can try out Deep Guard as part of our Internet Security 2013.

More posts from this topic


F-Secure Bringing a totally new Future for the Internet to SLUSH 2015

#SLUSH15 is almost here, and F-Secure’s participating in this year’s event in a big way. There’s going to be a big #smartsecurity announcement about the Internet of Things, as well as a couple of presentations from F-Secure personnel. SLUSH, a well-known exposition for startups in the tech industry, has become a huge international event. Both SLUSH and F-Secure call Helsinki home, so it’s only natural for F-Secure to be an active participant at the annual conference. F-Secure made waves last year after the cybersecurity company hacked the venue’s bathrooms to get people talking about online privacy. Several of the company’s researchers and personnel also put in appearances at last year’s SLUSH, including cyber security expert Mikko Hypponen, and F-Secure’s Executive Vice President, Consumer Security, Samu Konttinen. [youtube https://www.youtube.com/watch?v=u93kdtAUn7g&w=560&h=315] [youtube https://www.youtube.com/watch?v=HB-qBhWV65s&w=560&h=315] And they’re both back this year! This year, Samu will be giving a keynote address on SLUSH’s Silver Stage. His talk is called “Your home, your rules – The internet of what ifs”, and runs from 11:45am to 12:00pm (Helsinki time) on November 11th. Samu’s enthusiasm for topics related to security and online privacy will give people valuable insights into how IoT devices are creating new security challenges, and what people can do to protect themselves. Mikko will be appearing on SLUSH’s Black Stage at 9:25am (Helsinki time) on November 12th, where he’ll deliver a talk called “The Online Arms Race”. Mikko recently did an interview about this same topic for V3.co.uk, so you can check that out if you want a quick preview about Mikko’s thoughts on this matter. You can follow all of F-Secure’s SLUSH news by following @FSecure_Sense, @FSecure_IoT, and @FSecure on Twitter.

November 10, 2015
Mikko Hypponen, Leo Laporte, Triangulation

5 things Mikko Hyppönen has learned from 25 years of fighting viruses

F-Secure Chief Research Officer Mikko Hyppönen sat down on Monday for a video chat with renowned tech journalist and broadcaster Leo Laporte on Triangulation. Laporte has admired Mikko and F-Secure from afar for more than twenty years, the host explained. So this first talk gave the two IT stalwarts a chance to talk over Mikko's nearly quarter century of work at F-Secure -- which he joined as a coder in 1991 when we were still known as Data Fellows. You can watch the whole interview below or download the audio here: [youtube https://www.youtube.com/watch?v=Cpg-5NO9oS8] The whole show is worth your time but to get ready to mark Mikko's silver anniversary at F-Secure, we thought we'd pull out some interesting lessons he's learned in more than two decades of tangling with digital threats. Driving a forklift -- Mikko's job before joining F-Secure -- has one big advantage over being an internationally known virus hunter. Once you're done with work for the day, you don't think about your job at all. Mikko told Leo that being Chief Research Officer at a company that protects hundreds of millions of computers doesn't give you that luxury. Some early malware creators went on to some very interesting things. Mikko told Leo about his trip to Pakistan to meet the two brothers who wrote the first PC virus more than 25 years ago, which you can watch below. Basit Farooq Alvi and Amjad Farooq Alvi wrote the program for what they saw as a legitimate purpose -- preventing copyright infringement. Today the brothers along with a third brother run a successful telecommunications business. Robert Tapan Morris -- the creator of Morrisworm the first computer worm -- is a member of the Computer Science faculty at MIT and a partner in Y Combinator, which helps launch tech startups.[youtube https://www.youtube.com/watch?v=lnedOWfPKT0] His number one security tip? Back up your stuff. "Back up your computer, your iPad, your phone. And back it up so you can access it even if your house burns down." The numbers when it comes to malware are huge. F-Secure Labs receives about 350,000 malware samples a day, seven days a week. "The amount of new detections we build on those samples every day is usually around 10,000... 20 [thousand] on a bad day." Mobile malware isn't a big problem -- except, perhaps, in China -- because Android and iOS are very restrictive. "If you are a programmer, you cannot program on your iPad," Mikko explained. All apps that end up in the Play or App Store have to be approved by Google or Apple respectively. This model, which Mikko compares to the PlayStation and Xbox ecosystems, may be good for security, but it does have some negative consequences. "It's also a little bit sad in the sense that when you have these closed environments, it's sort of like converting the users from producers to consumers." Mikko wrapped up the interview by explaining F-Secure's principles when it comes to protecting and respecting users' data: "We try to sell our products the old-fashioned way. You pay for it with your money, not your privacy." Cheers, Sandra P.S.: For some bonus Mikko, watch a public lecture he gave this week at Estonian Information Technology College. [youtube https://www.youtube.com/watch?v=UXSAaVx2EOo&w=560&h=315]

October 15, 2015