From possible to practical: The path for defense
summary
Describes a prototype called Autoclave that runs a disposable VM and browser sandbox under hypervisor root to isolate risky sites, shown as a working demo that removes user risk and fear by taking the attack surface away. Argues that many defenses are possible but not adopted, so security must be easy for developers and operators, with emphasis on well-defined interfaces and known-good state as practical rules that survive deployment constraints.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:35Internet is dangerous
- 1:20Security is impossible
- 1:37Anything is possible
- 2:26We gotta care
- 2:49Medicine
- 4:00Good state
- 4:21Reboot
related talks
16mDesigning Holistic Security Programs
44mMake It Fixable
22mSandboxes all the way down - A hitchhiker's guide to platform...
45mBuilding Secure Software: Practical Strategies for Developers
25mFirst steps into security engineering
52mPhilosophizing Security In A "Mobile-First" World
52mattack-driven defense
28mIt's Not a Best Practice If No One Can Follow It: Learning From...