Post on 20-Jan-2016
transcript
Bromium Confidential
Zero-day
Adobe Reader $5,000-$30,000
Flash, Java $40,000-$100,000
Word $50,000-$100,000
Internet Explorer $80,000-$200,000
iOS $100,000-$250,000
Zero-day price list
Source: http://www.forbes.com/sites/andygreenberg/2012/03/23/shopping-for-zero-days-an-price-list-for-hackers-secret-software-exploits/
Micro-virtualization:Hardware-isolation for untrusted tasks
Microvisor
HardwareVirtualization
(VT-x)
Lightweight, fast, hidden, with an unchanged native UX
Hardware-isolates each untrusted Windows task
Uses I/O Virtualization VT-d, TXT & TPM if available
Based on Xen with a tiny, secure code base
Fully integrated into thedesktop user experience
3. Full attack execution
2. One task per micro-VM
1. Micro-VM Introspection
APIs for Live Attack Analysis