Defensive Security: what can blue do for you?

Some Teams are Red, Others are Blue, I Play Defense, and So Can You!

Come learn about the other side of the cybersecurity equation: how to raise the bar for attackers trying to pwn your endpoints. This talk series will focus on sane, sensible, and usable defaults; what each operating system can bring to the table; security through proper configuration; and small/medium scale distribution and management.

Part 0x04 Virtualization

Compartmentalize all the things. All of 'em.

This session is all about virtualization. Learn: what a hypervisor is, about the different kinds of hypervisors, what an IOMMU is, why you care about SLAT, and other hardware goodness. Then learn: about traditional guests (aka virtual machines), about the myriad container types, and the security trade-offs between various kinds of hosts and guests.

Probably: discussion of device passthrough. some theory about why "security by compartmentalization" is a good plan. Qubes!

If time: hands on with your own vm or container questions! bring a computer.

This series is brought to you by PASCAL Hackerspace, and presented by Magneto (the hacker, not the mutant. Probably.) He does security analysis and automation for profit, and systems thinking and other security-related things for fun. Uses obtuse prose. Talks fast and loud. Primarily a Mac/iOS guy, but dives into Linux and dabbles in Windows."