Intel has begun developing rootkit-detection technology with a view to preventing malicious code from modifying the host system's memory.

According to an IT Observer report, the system will monitor the OS and other software that could be covertly modified by a rootkit to hide its presence and any security holes it has created. The monitor is implemented in hardware and checks for unnecessary changes made to memory containing system and application code.

According to the report, Intel's researchers hope to implement the technology in commercially available silicon in the 2008-2009 timeframe. By then Intel should have shipped its 'LaGrande' security system, which is geared to encrypting information held in keyboard and graphics buffers, and to isolating blocks of memory to prevent processes snooping on each other.

As it stands, LaGrande is about protected data and code from outside threats - it's less able to deal with malicious code operating from within the sealed environment. It may be able to tell the user his or her system has been compromised, but not necessarily prevent the attack in the first place.

This is where the new technology, which will presumably be part of LaGrande 2, comes in.

"We need to connect the computers directly to the data, so the human beings don't have to be the I/O channel, and elevate the role of the human being to a more supervisory role," said Intel's director of research, David Tennenhouse.

LaGrande uses a Trusted Platform Modile (TPM) chip connected to the chipset. ®

Related stories

• Intel and Symantec team up on 'bare metal' security (15 August 2007)
• Trusted Computing readies anti-malware specs (17 November 2006)
• VXers add rootkit tech to MyDoom and Bagle (30 March 2006)
• Virtual rootkits create stealth risk (13 March 2006)
• Hackers download pirate movies onto compromised PCs (21 December 2005)
• Nvidia nabs ULi (14 December 2005)
• Intel to sell $1.4bn debt (13 December 2005)
• SonyBMG backtracks on buggy bug fix (9 December 2005)
• Sony opens up over another CD security hole (7 December 2005)
• Sony's DRM woes worsen (30 November 2005)
• Updated Gaffer tape defeats Sony DRM rootkit (21 November 2005)
• Sony's CD rootkit infringes DVD Jon's copyright (18 November 2005)
• Sony DRM uninstaller 'worse than rootkit' (17 November 2005)
• Sony pulls rootkit DRM CDs (16 November 2005)
• Sony suspends rootkit DRM (12 November 2005)
• Mac anti-rip code surfaces on Sony BMG CD (11 November 2005)
• Sony hit by lawsuits over root kit (10 November 2005)
• Removing Sony's CD 'rootkit' kills Windows (1 November 2005)