Tom's Hardware: Intel and McAfee Reveal DeepSAFE Tech

[cbn]

http://www.tomshardware.com/news/McAfee-DeepSAFE-malware-rootkit-Paul-Otellini,13436.html

Intel and McAfee Reveal DeepSAFE Tech
12:00 AM - September 15, 2011 by Kevin Parrish -

McAfee's DeepSAFE tech will keep an eye on memory and processor activity in real time, rooting out sneaky malware before they dump their payload.

ZoomTuesday during the Intel Developers Forum, newly-acquired and now wholly-owned subsidiary McAfee demonstrated DeepSAFE, a technology that allows McAfee to develop hardware-assisted security products to take advantage of a "deeper" security footprint.

According to the company, the tech resides underneath the computer's operating system to gain better sight on deeply-rooted malware that typically embeds themselves outside the OS to evade current security solutions. McAfee DeepSAFE technology actually provides a direct view of system memory and processor activity that other solutions currently can't access, and will expose the rootkit in real-time as it is trying to hide malware.

"McAfee DeepSAFE technology sits beyond the operating system (and close to the silicon) allowing McAfee products to have an additional vantage point in the computing stack to better protect systems," the company said. "McAfee anticipates the McAfee DeepSAFE technology will be a foundation for a number of hardware-assisted security products that take advantage of a 'deeper' security footprint which will work in conjunction with McAfee Endpoint Security Platform that so many organizations trust to protect their endpoints and information."

Todd Gebhart, co-president of McAfee, said that the new tech won't be embedded directly on Intel's processors, but will instead take advantage of hardware features already included in Intel's current Core lineup and processors in the future. Consider the software as "hardware assisted" and optimized to run on Intel's technology, using Intel VTx technology available on all Intel Core i3, i5, i7 processors and vPro platforms. Intel VTx technology is available for use by anyone.

"This is a tremendous shift for McAfee and one of the biggest innovations in the security industry’s history," said Todd Gebhart, co-president of McAfee. "McAfee DeepSAFE uses hardware features already in the Intel processors to provide security beyond the OS. From this unique vantage point, DeepSAFE can apply new techniques to deliver a whole new generation of protection in real time to prevent malicious activity and not just detect infections."

McAfee said that the DeepSAFE technology runs with Microsoft Windows 7, but the company anticipates that it will also run with Windows 8 when it is released -- there's even a potential for Android support. The McAfee DeepSAFE technology that Paul Otellini discussed in his demo during the Intel Developers Forum early this week is currently in beta. However, additional details and technology specifics will be forthcoming, McAfee said.

"By combining the features of existing Intel hardware and innovations in security software, Intel and McAfee are driving innovation in the security industry by providing a new way to protect computing devices," said Renée James, senior vice president and general manager of the Software and Services Group at Intel and the Chairman of McAfee. "We are truly excited to introduce this technology upon which we will deliver new solutions."

For more information on McAfee DeepSAFE visit www.mcafee.com/deepSAFE.

This article is over 2 months old, but I thought It looked interesting enough to include in the forum discussion.

Opinions on this and how it will affect future processor and software development?

 

[cbn]

Maybe McAfee security optimized to an Intel processor for the Android platform?

http://www.dailytech.com/McAfee+Rep...+in+Q3+2011+Aimed+at+Android/article23336.htm

Gadgets McAfee Report Claims Virtually All Mobile Malware in Q3 2011 Aimed at Android
Shane McGlaun (Blog) - November 21, 2011 12:45 PM

Android users beware

McAfee has issued a new report that looks at mobile malware threats for Q3 2011. According go the security firm, nearly all new mobile malware for the quarter was targeted at Android.

That is no surprise considering that Android allows for third-party app stores and doesn't check the apps on the main store to the extent that Apple checks its apps on the App Store. Android OS is also the most popular mobile operating system for smartphones, so it’s an easy target.

The company found that malware aimed at Android devices rose nearly 37% since Q2 2011. 2011 is on track to be the business year for malware ever.

By the end of 2011, McAfee is predicting that there will be 75 million different and unique malware threats. McAfee thinks that part of the reason malware is increasingly targeting Android is that devices running the OS are so popular.

According to the company, one of the most common malware threats for Q3 were trojans that sent SMS messages and stole money. The messages are generally to premium numbers that cost the user money on their phone bills. McAfee also noted that other common types of malware include fake AV, autorun, and trojans that steal passwords.

It's also interesting to note that the U.S. is the number one source of services that hold malware. The report pegs 65.8% of the servers with malware in the U.S. with Europe and the Middle East collectively having 22.8% of all servers with malware.

The massive growth in malware this year has lead to 2011 being called the year of mobile malware. Apple is being overlooked for malware threats thanks in part to tighter security practices.

Source: TechCrunch

 

[SonicIce]

doesn't mcafee like kinda suck

 

[RavenSEAL]

Oh god, Intel is gonna go bankrupt now.

 

[blackened23]

Only because most of their software is bloated and resource hungry. Their stuff is mostly effective though from what i've read. I could be wrong, I don't have firsthand experience.

 

[cbn]

The part that caught my attention was "hardware assisted".

A person would think if Intel paid $7.68 Billion dollars for McAfee they probably had special dedicated hardware planned for security software in the future.

 

[rgallant]

McAfee is the only software I pay for , seems ok and why not use the free stuff ? I pay for the firewall good or bad seems to stop anything from leaving that I can\have tracked and why I pay for it.

 

[Vic Vega]

doesn't mcafee like kinda suck

No. Do you know what Intel paid for them?

 

[RavenSEAL]

McAfee is the only software I pay for , seems ok and why not use the free stuff ? I pay for the firewall good or bad seems to stop anything from leaving that I can\have tracked and why I pay for it.

You do know you can do the same...for free...right?

 

[Matt1970]

doesn't mcafee like kinda suck

McAfee has been horrible for years. I have seen it hog upwards of 400 Megs of ram on an XP install and this was over 4 years ago. I am sure there are plenty who may disagree and say they have never had a problem with it, but I have seen it cause all kinds problems and miss common Viruses.

 

[Subyman]

Wooo, now McAfee can slow down my computer even more by checking out every individual process.

 

[VirtualLarry]

I don't know if I like this. I thought PunkBuster was bad, now we're going to have the equivalent in hardware? DRM inside the system?

 

[Dadofamunky]

Wooo, now McAfee can slow down my computer even more by checking out every individual process.

Can't believe Intel paid $7B for them. They were right across Great America Parkway from Intel's main campus however, so maybe Intel just wanted to Buy Local...

There must be some perceived value for Intel to spend that much money however...

 

[cbn]

In light of post #2 (McAfee detection of Android Malware) I thought I would post this...

http://www.tomsguide.com/us/android-smartphone-vulnerability-security,news-13346.html

Researchers Find That Not All Androids Are Equally Secure
3:00 PM - November 30, 2011 - By Douglas Perry -

Researchers at North Carolina State University (NCSU) have published a paper which details differences in Android security across eight models.

According to the findings, only three phones "properly" enforced Android's permission-based security model.

The conclusion is that Google's Nexus One and Nexus S phones with baseline Android configurations as well as the Motorola Droid "were basically clean." However, pre-installed applications added by manufacturers and carriers add a substantial risk of successful malicious attack to phones, Xuxian Jiang, an assistant professor of computer science at NCSUand co-author of a paper describing the research, said.

HTC’s Legend, EVO 4G and Wildfire S, Motorola’s Droid X and Samsung’s Epic 4G revealed "significant vulnerabilities." The EVO 4G was the most vulnerable phone with eight leaked permissions in the test. The Legend and the Wildfire had six leaks each, followed by the Wildfire and Droid X with four leaks each.

"Some of these pre-loaded applications, or features, are designed to make the smartphones more user-friendly, such as features that notify you of missed calls or text messages," said Jiang. “The problem is that these pre-loaded apps are built on top of the existing Android architecture in such a way as to create potential 'backdoors' that can be used to give third-parties direct access to personal information or other phone features."

The researchers said that they notified the software vendors of the discovered vulnerabilities prior to the release of the report and recommend that users should keep up with security updates from software vendors to protect themselves from attacks.

It just makes me wonder how Intel x86 Android phone plans to fix this problem?

 

[SolMiester]

doesn't mcafee like kinda suck

YES!

 

[Zstream]

Can't believe Intel paid $7B for them. They were right across Great America Parkway from Intel's main campus however, so maybe Intel just wanted to Buy Local...

There must be some perceived value for Intel to spend that much money however...

It's called mobile security. They already have a presence in the mobile market and exchange policies.

 

[Phynaz]

doesn't mcafee like kinda suck

No. Their current PC anti-virus product is a hog. But since that product was only 20% of the company's sales the last time I checked, to say the company McAfee sucks would be incorrect.

 

[SolMiester]

No. Their current PC anti-virus product is a hog. But since that product was only 20% of the company's sales the last time I checked, to say the company McAfee sucks would be incorrect.

But as we are actually talking about A/V....yes, they suck!