1. Adrian Taylor Director, Mobile
Bromium vSentry
Adrian Taylor
Director, Mobile 1

2. 
Paid

3. Zero-day price list Zero-day Adobe Reader $5,000-$30,000 Flash, Java
$40,000-$100,000
Word
$50,000-$100,000
Internet Explorer
$80,000-$200,000
iOS
$100,000-$250,000
Source:

4. Demo

7. Micro-virtualization: Hardware-isolation for untrusted tasks
Hardware-isolates each untrusted Windows task
Lightweight, fast, hidden, with an unchanged native UX
Microvisor
Based on Xen with a tiny, secure code base
Fully integrated into the desktop user experience
Uses I/O Virtualization VT-d, TXT & TPM if available
Hardware Virtualization (VT-x)

8. Demo

9. Hardware
Kernel
OS Libs / Utils
Applications

10. Mutually isolates untrustworthy tasks from the Desktop, & each other
CPU
Untrusted Tasks

12. Micro-VMs have “need to know” access to files, networks, and the user’s desktop

15. Micro-VMs execute “Copy on Write”

16. Malware is automatically discarded

17. Live attack visualization and analysis : LAVA

18. APIs for Live Attack Analysis
2. One task per micro-VM
3. Full attack execution
1. Micro-VM Introspection

19. DEMO

20. Desktop, Laptop, Tablet and Smartphone
2012
2013
Future

21. Thank you