~/talk

Open Source OS Approach Self-Detects Attacks & Self-Restores in Seconds

Talkat RSA Conference 2023 · 2023-04-24..04-27· [databases]
links:none on file
links:none on file
slides:none on file

An open‑source OS prototype puts every OS and app state into a DBMS layer that replaces Linux/Kubernetes, uses change‑capture provenance and spools history to a data warehouse; detection queries run in SQL and flag composite suspicious events in a few hundred milliseconds. The demo shows a compromised admin account being suspended and a ransomwarelike exfiltration rolled back to the preattack state in seconds. Performance matches native systems on VoltDB and PostgreSQL, provenance costs about 5% overhead, and the project is available as an open source prototype.

AI-written summary · about

  1. 0:00Introduction and motivation
  2. 6:53OS as a database system
  3. 13:28Performance and simplicity benefits
  4. 19:19Provenance and unified logging
  5. 27:27Cloud and serverless integration
  6. 35:31Real-world use cases and security
  7. 41:33Live demo of attack detection
  8. 44:48Open source availability and next steps
  9. 47:39Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.