Dailydave mailing list archives

Identity + Host


From: Dave Aitel via Dailydave <dailydave () lists aitelfoundation org>
Date: Mon, 21 Sep 2020 10:35:03 -0400

Recently Thomas Dullien wrote a blogpost
<http://addxorrol.blogspot.com/2020/07/the-missing-os.html> asking what the
OS of the future really looks like, considering the computer of the future
is a distributed mega-engine. I would, annoyingly, posit that the
algorithms that make sense to understand in that world are those already
implemented in the many species of social insects.

In that sense, I think there are things missing from his list of the basics
of what a datacenter computer contains. At some level, I think the right
set of algorithmic support will undergo phase changes as you scale up, but
still be viable at small scales: (see this new paper for a detailed
example: https://www.biorxiv.org/content/10.1101/2020.08.20.259614v1)

I will include Thomas's list below:

   - Some form of cluster-wide file system.
   - A horizontally scalable key-value store.
   - A distributed consistent key-value store.
   - Some sort of pub/sub message queuing system.
   - A job scheduler / container orchestrator.

I would say some level of ID is missing - large-colony ants have Caste
systems for a reason. I think people in general ignore ID because maybe you
can make ID and security a micro-service on top of a pub/sub message
queuing system? I'm not sure. But in general, the same thing is true for
most security analysis systems sold today - they see an infection, they
treat a computer/network as infected and respond appropriately.

At Immunity/AppGate we've been trying to go the other direction - tying
your security directly to your identity. AppGate SDP already does this for
network services, but we've also expanded upon that by using a graph
database, INNUENDO Agent, a custom Windows Kernel module, and a lot of
other excitement to build automated response that looks at your ID as much
as it does your computer:

CONSTELLATION + AppGate SDP (3m)
https://vimeo.com/431931225/add11f4230

CONSTELLATION vs. Ransomware (9m)
https://vimeo.com/421712679/d4a1918354

CONSTELLATION vs. Robbinhood (11m)
https://vimeo.com/417796331/bb0426f9fb

-dave
_______________________________________________
Dailydave mailing list -- dailydave () lists aitelfoundation org
To unsubscribe send an email to dailydave-leave () lists aitelfoundation org

Current thread: