Day 2 Keynote: Security Through Distrusting
summary
Argues for designing systems that distrust nearly everything and gives concrete mitigations: physically removed microphones + Bluetooth headsets to block remote audio, moving SPI flash off‑board into a trusted firmware stick so firmware is read‑only and provably provisioned, and using multi-site signed binaries (multiple independent build servers + reproducible builds) to stop update backdoors. Describes Qubes‑style compartmentalization: template VMs, disposable converter VMs for risky media, admin/user separation and a paranoid backup‑restore; notes hypervisor trust (Xen ≈200k LOC), usability and OEM incentive tradeoffs.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 2:38Unprecedented Risk
- 5:51Introducing the Keynote
- 14:55Persistent Memory
- 19:35Trusted Hardware
- 24:58Multiparty signatures
- 31:45Multiple binaries
- 34:27Preventing data leaks
- 40:47Compare compartmentalization
- 42:42Data transfers
- 45:59Applications
- 46:57Isolation
- 47:51Admins
- 49:42Hypervisor
- 51:00Backup Plan
related talks
32mBeyond Software: Hardware-Based Security
48mSecurity today: change your habits and make it safer and efficient
48mBetrusted: Better Security Through Physical Partitioning
01h 02mClosing Keynote Day 1
06mLightning Talk: Security Down to the Kernel
28mKeynote: Window Snyder, Chief Software Security Officer, Intel in conversation with Jim Zemlin
14mKeynote: Back to the Future: Next-Generation Cloud Native Security
23mKeynote: Fireside Chat with Window Snyder & Katherine Druckman