If you can't defeat attacks at the network, you can contain them either on the user's system or within their application, according to some experts. Invincea created a virtual sandbox to encapsulate the browser and other highly targeted applications. The company, which came out of the Defense Advanced Research Projects Agency (DARPA) research, scored a big win by landing an OEM agreement with Dell in June.
Cupertino, Calif.-based Bromium, founded by engineers from Citrix Systems, is developing a similar capability by deploying hardware-isolation protections around each Windows task. It's still early for the two companies, but they are gaining interest from industry analysts and business executives, looking for alternative protection technologies at the endpoint.