Microsoft Research Warn About VM-Based Rootkits

Posted by ryuzaki0 on Friday March 10, 2006 @01:56PM from the why-would-you-prove-that-concept? dept.

Tenacious Hack writes "According to a story on eWeek, lab rats at Microsoft Research and the University of Michigan have teamed up to create prototypes for virtual machine-based rootkits that significantly push the envelope for hiding malware and maintaining control of a target OS. The proof-of-concept rootkit, called SubVirt, exploits known security flaws and drops a VMM (virtual machine monitor) underneath a Windows or Linux installation. Once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system."

1 of 336 comments (clear)

Min score:

Reason:

Sort:

Oh Great... by threedognit3 · 2006-03-10 14:38 · Score: 0, Troll

Within five years we'll have a college graduate who worked on this project but in the end barely passed. Not being able to find a decent job they'll resort to plying their knowledge in the neitherworld. I'm stickin' with Atari.