Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Security

Hacker Defeats Hardware-based Rootkit Detection 126

Manequintet writes "Joanna Rutkowska's latest bit of rootkit-related research shatters the myth that hardware-based (PCI cards or FireWire bus) RAM acquisition is the most reliable and secure way to do forensics. At this year's Black Hat Federal conference, she demonstrated three different attacks against AMD64 based systems, showing how the image of volatile memory (RAM) can be made different from the real contents of the physical memory as seen by the CPU. The overall problem, Rutkowska explained, is the design of the system that makes it impossible to reliably read memory from computers. "Maybe we should rethink the design of our computer systems so they they are somehow verifiable," she said."
This discussion has been archived. No new comments can be posted.

Hacker Defeats Hardware-based Rootkit Detection

Comments Filter:

Software production is assumed to be a line function, but it is run like a staff function. -- Paul Licker

Working...