Malware, Isolation And Security Boundaries: Itís Harder Than It Looks

No ratings

Presented at BlueHat 2007 by

Mark Russinovich

Just about everyone thinks they know the solution to the malware problem, whether it is virtual machines, light-weight virtualization, integrated user accounts, or new integrity levels. Unfortunately, user experience, application compatibility, and the end-user desire to move data in and out of a sandbox all conspire to wreck the value of such schemes. In this session, youíll learn what constitutes a security boundary, get a tour through core Windows technologies, including user sessions, Code Integrity, PatchGuard, Service Security Hardening, and User Account Control, to gain an understanding of where Windows currently defines such boundaries, and gain insight into the opportunities and challenges that are guiding Windows long-term OS and application security and isolation strategy.