Hardware-Based Rootkit Detection Proven Unreliable

Rutkowska, an elite hacker who specializes in offensive rootkit research, has found several ways to manipulate the results given to hardware-based solutions (PCI cards or FireWire bus). At this year’s Black Hat DC conference, Rutkowska demonstrated three different attacks against AMD64 based systems, showing how the image of volatile memory (RAM) can be made different from the real contents of the physical memory as seen by the CPU.

So there you have it… yet another piece of technology that’s entirely “hackable”.

Source: ZDNet Blogs