Stephen Checkoway
More info
- Affiliation
- Oberlin College
- Known for
- Automotive security, Juniper Dual EC
Security researcher who broke into cars remotely, ran ROP on a voting machine and reconstructed how Juniper's firewalls got a backdoor in their random number generator.
As a PhD student in San Diego under Hovav Shacham and Stefan Savage, Checkoway was part of the group that showed in 2010–2011 that an ordinary passenger car could be taken over through its CAN bus — and then with no physical access at all, via cellular, Bluetooth and a doctored CD. In 2009 he, Shacham, Alex Halderman and others demonstrated ROP on the AVC Advantage voting machine, whose code couldn't even be overwritten.
After the 2015 Juniper disclosure he led the analysis of how ScreenOS used Dual_EC_DRBG and how someone swapped a single constant to read VPN traffic. He now teaches at Oberlin College.