Security vendor circumvents Windows Vista's Patchguard

Microsoft vows to block shortcut

Tom Sanders in California

Security researchers with Authentium have found a way to circumvent the Patchguard security technology that Microsoft has built into the 64-bit version of its forthcoming Windows Vista operating system.

Over the past months the Patchguard technology has been subject of a fierce debate between security vendors and Microsoft because it prevents some anti-virus software from functioning.

Advertisement

Facing potential penalties from antitrust authorities in Korea and the EU, Microsoft earlier this month promised to provide application programming interfaces (APIs) that would allow third party security products to function properly in Windows Vista. It may take years however before these APIs will be published and fully functioning.

Authentium's technology allows an application to effectively disable Patchguard. The company decided to develop the tool because it required kernel access for its VirtualATM product that is scheduled for release in December.

In a blog posting the company argued that providing kernel access to third party websites will enable future security innovations.

"This is about enabling innovative new technologies and countering new emerging threats and criminal strategies. If new security innovations are not encouraged, consumers will lose out."

"If we (the good guys) can gain access to the Vista kernel, so can sophisticated, well-financed hackers. These days, most hackers are exactly that – sophisticated and well-financed. We implore Microsoft not to 'go it alone' in security."

Microsoft however said that it will not tolerate outside developers circumventing its technology features and plans to issue a patch to block Authentium's technique.

"If a vulnerability is discovered in Kernel Patch Protection, Microsoft will issue a security update as part of the standard Microsoft Security Response Center process," the company said in an emailed statement.

"Microsoft strongly recommends that software vendors do not attempt to bypass Kernel Patch Protection. This has the potential of destabilising and crashing customer systems, particularly in cases where Kernel Patch Protection is enhanced and updates are delivered to customers."

Microsoft stressed that it will provide APIs to offer functionality similar to that which developers had in other Windows versions.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Neil Sanderson

Interview: Microsoft UK virtualisation chief Neil Sanderson

Sanderson outlines Microsoft's plans for Hyper-V, cloud computing and virtual...

Google

Google moves into social networking with Buzz

Facebook gets opposition in consumer and enterprise spheres

Nvidia

Nvidia pitches Optimus as prime notebook platform

New system pairs onboard and discrete chips

OpenDNSSEC

OpenDNSSEC service goes live

New security project encrypts Domain Name System traffic

Primary Navigation