Current cybersecurity systems largely rely on detection technologies such as antivirus software, intrusion detection systems, and security monitoring tools. These technologies attempt to identify malicious activity after an attack begins.

The Insider-Safe Computer System Architecture takes a different approach. Rather than focusing primarily on detection, it emphasizes prevention. The architecture is designed to prevent unauthorized access, unauthorized software execution, unauthorized data movement, and unauthorized administrative changes before damage occurs.

This architecture is intended to reduce risks from:

• External hackers

• Foreign adversaries

• Ransomware operators

• Malware and viruses

• Compromised administrator accounts

• Disgruntled employees

• Insider data theft

• Supply-chain attacks

• Zero-day malware

Core Security Principles

The architecture is based on five core principles:

1. Default-deny execution.

2. Immutable security controls.

3. Separation of administrative duties.

4. Device-based trust verification.

5. Prevention of unauthorized data movement.

The system assumes that:

• User credentials may be stolen.

• Administrator credentials may be stolen.

• Insiders may become malicious.

• New malware may emerge.

• Unknown software vulnerabilities may exist.

Therefore, security controls must remain effective even after a user or administrator account has been compromised.

​

Read full White Paper