Bromium vSentry
description
Transcript of Bromium vSentry
![Page 1: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/1.jpg)
Bromium vSentryAdrian Taylor
Director, Mobile
![Page 2: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/2.jpg)
Paid3644-2276-1234-5678
![Page 3: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/3.jpg)
Bromium Confidential
Zero-dayAdobe Reader $5,000-$30,000Flash, Java $40,000-$100,000Word $50,000-$100,000Internet Explorer $80,000-$200,000iOS $100,000-$250,000
Zero-day price list
Source: http://www.forbes.com/sites/andygreenberg/2012/03/23/shopping-for-zero-days-an-price-list-for-hackers-secret-software-exploits/
![Page 4: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/4.jpg)
DEMO
![Page 5: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/5.jpg)
![Page 6: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/6.jpg)
![Page 7: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/7.jpg)
Micro-virtualization:Hardware-isolation for untrusted tasks
MicrovisorHardware
Virtualization (VT-x)
Lightweight, fast, hidden, with an unchanged native UX
Hardware-isolates each untrusted Windows task
Uses I/O Virtualization VT-d, TXT & TPM if available
Based on Xen with a tiny, secure code base
Fully integrated into thedesktop user experience
![Page 8: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/8.jpg)
DEMO
![Page 9: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/9.jpg)
ApplicationsOS Libs / Utils
Kernel
Hardware
![Page 10: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/10.jpg)
Desktop
Untrusted Tasks
CPU
Mutually isolates untrustworthy tasks from the Desktop, & each other
![Page 11: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/11.jpg)
http://www.facebook.com
![Page 12: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/12.jpg)
Micro-VMs have “need to know” access to
files, networks, and the user’s desktop
![Page 13: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/13.jpg)
![Page 14: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/14.jpg)
![Page 15: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/15.jpg)
Micro-VMs execute “Copy on Write”
![Page 16: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/16.jpg)
Malware is automatically
discarded
![Page 17: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/17.jpg)
LIVE ATTACK VISUALIZATION AND ANALYSIS : LAVA
![Page 18: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/18.jpg)
3. Full attack execution
2. One task per micro-VM
1. Micro-VM Introspection
APIs for Live Attack Analysis
![Page 19: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/19.jpg)
DEMO
![Page 20: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/20.jpg)
Bromium Confidential
Desktop, Laptop, Tablet and Smartphone
2012 2013 Future
![Page 21: Bromium vSentry](https://reader036.fdocuments.us/reader036/viewer/2022082212/56816780550346895ddc8b52/html5/thumbnails/21.jpg)
Thank you