November 23rd, 2009 by ahoog

Boffins boast newfangled rootkit blocker – The Register

Interesting research on protecting computers from root kits (full PDF here):

Scientists are set to unveil a lightweight system they say makes an operating system significantly more resistant to rootkits without degrading its performance.

The hypervisor-based system is dubbed HookSafe, and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory space that’s tightly locked down. The researchers, from Microsoft and the computer science department at North Carolina State University, plan to present their findings Thursday at the 16th ACM Conference on Computer and Communications Security.

via Boffins boast newfangled rootkit blocker • The Register.

  • Share/Bookmark

You must be logged in to post a comment.