Instead of blocking specific viruses, Krstić’s system sequesters every program on the computer in a separate virtual operating system, preventing any program from damaging the computer, stealing files, or spying on the user. “This defeats the entire purpose of writing a virus,” says Krstić.