Running sensitive applications on a separate Windows Desktop is often treated as a reliable security boundary. The talk demonstrates practical attacks in which keyloggers abuse Windows Desktop isolation to intercept user keystrokes. It then introduces DesktopRanger, an open‑source project that creates a hardened desktop through restrictive access control
SPEAKERS
Igor Korkin
Independent researcher
The speaker holds a PhD in Cybersecurity (specialization 05.13.19). He is an alumnus of National Research Nuclear University Moscow Engineering Physics Institute (MEPhI).
Igor is a lead researcher on international cybersecurity projects at Huawei Technologies in China and Binarly in the United States. As a systems programmer, he specializes in operating system security, VT‑x/EPT hypervisor technologies, and advanced cyber threat mitigation.
He is the author of MemoryRanger, a hypervisor‑based project designed to protect Windows kernel memory, which he presented at Black Hat Europe 2018. His research into attacks against EDR and AV solutions was later presented at Black Hat Europe 2021 and Black Hat USA 2022.
Igor serves as an invited academic supervisor at MEPhI, where he mentors undergraduate research and helps develop the next generation of cybersecurity experts. He has published more than 50 scholarly works and the monograph Kernel Protection of Operating Systems under Countermeasures. Holds a patent
