Anti Rootkit Blog

Windows Vista will be the next generation of Windows Operating Systems. It is due out sometime early 2007. It was thought that Microsoft would make Vista extremely secure but Austin Wilson , Director of Product Management for Vista Security, said that the two most important aspects of rootkit elimination have been left out of the 32 Bit version of Vista. The 32 Bit version of Vista is aimed at more of the normal user market, Home Users and Business Users while the 64 Bit version will be more for the server market because of the extra costs involved.

The two important security additions left out are called Kernel Patch Protection and Driver Signing. Kernel Patch Protection stops application from modifying the Vista Kernel. This technique is used by many legitimate applications like anti virus and other security software. Because there are many applications out there that patch the kernel Microsoft hope in the future to add Kernel Patch Protection to the 32 Bit version of Vista. Microsoft said that they would be working with software manufacturers to overcome their need to patch the kernel in Vista and then they would be able to implement the Kernel Patch Protection on the 32Bit Version of Vista.

This means that for the foreseeable future users will still have problems with Vista and rootkits. The one area that Vista uses in combatting rootkits is the User Account Control which only allows users to run as non-administrators and thus not allowing applications to be installed because of lack of permissions. It will be interesting to see how quick attackers come out with new rootkits specifically designed to overcome any of these new enhancements that Vista will have.

Keep Safe

regards
Steo
www.antirootkit.com

This entry was posted on Friday, June 9th, 2006 at 8:53 pm and is filed under News, Vista, Debate. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.