3 ms·
You could take the Bromium approach and just sandbox applications entirely in virtual containers that self destruct. https://www.bromium.com https://www.bromiu
by godzillabrennus 10y ago
You could take the Bromium approach and just sandbox applications entirely in virtual containers that self destruct.
https://www.bromium.com https://www.bromium.com
Totally poor sales program but great way to boost security and I'd wager more effective than antivirus.
- j_s 10y agoI think the Bromium approach will survive the longest, with VM technology involved. Microsoft will have to build it into the OS eventually. Tools like SandboxIE and other wrapper/shims are in an arms race that they will eventually lose.
- Animats 10y agoBromium in one line: "Bromium Endpoint Protection is built on the Bromium Microvisor, a Xen-based, security-focused hypervisor designed to automatically isolate each vulnerable user task, such as visiting a website, opening a document, or accessing a USB drive." That's not hard to do, but it's very restrictive. You can open a USB drive, but can't copy files from it. So, having achieved isolation, then what?