Re: micro-virtualization

On Sep 21, 2012, at 10:37 PM, Paul E Baclace wrote:

> Hi, everyone.  I just saw an announcement about the "micro 
> virtualization" infrastructure from Bromium (founded by Simon Crosby, a 
> XenSource founder).  It appears to be an effort to encapsulate processes 
> in a lightweight way without using a vm for each process playpen.

Bromium sounds similar to the MSR Drawbridge project, although I suspect the implementation is quite different.

http://research.microsoft.com/en-us/projects/drawbridge/

Anyway, Bromium hasn't really revealed enough information to understand how it works, so it's fairly pointless for us to speculate about it. All I'll say is that I am generally skeptical about trying to patch security into a system that you don't have source code for.

Wes Felter - [email protected] - http://felter.org/wesley/