New way to block stealthy viruses found

Most Commented

Unified Communication for your Biz

Improve your contact center performance. See how you can make a difference.

Reach the ICT Community

Engage and build your ICT audience with CIOL online advertising.

New way to block stealthy viruses found

Rootkits, an insidious types of malware, which can effectively hide the presence of other spyware or viruses from the user and allow third parties to steal information from your computer, can now be blocked effectively

Wednesday, November 04, 2009

Email This

Print This

Comments

RSS

CALIFORNIA, USA: Researchers from North Carolina State University have reportedly devised a new way to block rootkits, an insidious types of malware, which can effectively hide the presence of other spyware or viruses from the user and allow third parties to steal information from your computer without your knowledge.

A recent Internet security threat report showed a 1,000 per cent increase in the number of new malware signatures extracted from the in-the-wild malware programs found from 2006 to 2008, according to the University website.

"Of these malware programs, rootkits are one of the stealthiest," said Dr. Xuxian Jiang, assistant professor of computer science at NC State and a co-author of the research. "Hackers can use rootkits to install and hide spyware or other programs. When you start your machine, everything seems normal but, unfortunately, you've been compromised," Jiang added.

Rootkits typically work by hijacking a number of 'hooks,' or control data, in a computer's operating system. By taking control of these hooks, the rootkit can intercept and manipulate the computer system's data at will, essentially letting the user see only what it wants the user to see. As a result, the rootkit can make itself invisible to the computer user and any antivirus software. Furthermore, the rootkit can install additional malware, such as programs designed to steal personal information, and make them invisible as well, said Jiang.

In order to prevent a rootkit from insinuating itself into an operating system, all of an operating system's hooks need to be protected. "Our research leads to a new way that can protect all the hooks in an efficient way, by moving them to a centralized place and thus making them easier to manage and harder to subvert," Jiang said.

Jiang explains that by placing all of the hooks in one place, researchers were able to simply leverage hardware-based memory protection, which is now commonplace, to prevent hooks from being hijacked. Essentially, they were able to put hardware in place to ensure that a rootkit cannot modify any hooks without approval from the user.

Would you like to on this article?

Read Comments

vsnmprasad mellacheruvu said on 11/4/2009 8:57:02 PM:
it is a fantastic research and invention of hooks. hopefully, the rootkit blockers - hooks will be soon made available to beginners to protect their computers, as they are the ones who are targetted by the hackers. however, the advanced users of the computers can defend themselves by various means, however, including the hooks.

to vsnmprasad mellacheruvu

Name
Email
Your reply

Intuit Money Manager set to make India debut

Obama visit arouses mistrust among China netizens

I have never used Twitter: Obama

Is China speaking English to beat Indian IT?

Tech beauties strip for an Indian cause

China attacks 'biased' U.S. cyber-spying report

And now, Twitter eyes acquisitions

Nokia to cut 220 R&D jobs in Japan

Telkom to offer mobile phones services from 2010

Murdoch courts trouble if he blocks Google on news

	Stop squeezing the data. Use ILM!
	Carry your Dream, Convey your Value with ZTE
	A fault tolerant server to reduce your TCO

	How to make your enterprise productive
	Unified Communication can impact business. Know how

	Making Web3.0 a Reality!
	CIOL Enterprise Next :What's NEXT in IT? :
	Decrease Total System Costs With Cyclone IV FPGAs

	Reach your desired Target Audience and realize high ROI
	Effective ways of Customer Acquisition through Demand Generation
	Reach 2,500 potential Enterprise Customers!