BSidesROC

Virtualization Based Security Strengths and Weaknesses

Talk Description: During this short discussion and demo session we will review the topic of Virtualization Based Security ("VBS"). We will also review the need for it and review the currently available solutions. This discussion will focus on the strengths and weakness of the existing commercially available solutions from Microsoft and Bromium, including some known exploits. The discussion will be "demonstration heavy" and light on slides. We will be demonstrating common credential theft attacks, malicious download attacks, including ransomware and effective mitigation tactics.

Bio: . ("CDA"). He has designed and delivered secure platforms for many Fortune 500 customers, hardware & software vendors, and government agencies over the past twenty (20) years. His experience includes the design, delivery and support of the following solutions: disaster recovery("DR"), multi ("MFA") and two-factor ("2FA") authentication systems, biometrics authentication, anti-virus/malware, reverse engineering, malware analysis, incident response ("IR"), application white and black listing, virtualization-based security("VBS"), and endpoint detection and response ("EDR").