3 ms·

But it means you can whitelist trusted OS releases. And ensure devices have all the security updates they claim to. You'd still have intrusion detection, fire

But it means you can whitelist trusted OS releases. And ensure devices have all the security updates they claim to. You'd still have intrusion detection, firewall, user presence detection, monitoring at the proxy, etc. to guard against threats posed by local exploits.

fulafel 9y ago
After the user (or malware) gets code execution in ring 0, the whitelists and detection mechanisms are no longer effective.
- mikelward 9y ago
  They're a necessary condition, not a sufficient condition. (Good signal if present, bad signal if absent.)