11 december 2013 - 18:34   
Video
https://www.usenix.org/conference/lisa13/os-x-hardening-securing-large-global-mac-fleet
OS X security is evolving: defenses are improving with each OS release but the days of Macs dont get malware are gone. Recent attacks against the Java Web plugin have kindled a lot of interest in hardening and managing Macs. So how does Google go about defending a large global Mac fleet? Greg will discuss various hardening tweaks and a range of OS X defensive technologies including XProtect, Gatekeeper, Filevault 2, sandboxing, auditd, and mitigations for Java and Flash vulnerabilities.A former pentester, incident responder, and forensic analyst, Greg Castle has been responsible for the security of Googles OS X fleet for a couple of years, working closely with the Google MacOps team to harden and protect Googles global Mac fleet. He is now working in Googles incident response team on the GRR Rapid Response project: Googles open source incident response framework.
(Via Intermactivity)
"One experiment is worth a thousand expert opinions."