A new rootkit-detection system for Virtualized environment

A new rootkit-detection system has been developed by IBM, and it has been implemented facilitate the detection of malicious attacks on virtualized environment.

IBM call it 'IBM Virtual Protection System', and it operates outside the virtual machine and it is able to identify malicious software when it is installed in any of the guest virtual machines hosted on the physical server.

Being outside of the virtual machine's operating system it can detect hard-to-identify problems such as rootkits.

It also gives the administrators a single security product to run across virtual machines, said JR Rao, a senior manager with IBM security research. "I don't want to have 10 copies of antivirus running there," he said. "If one firewall can protect 10 of these virtual machines, that's what I want to do."

The big blue put a nice efforts towards cloud and virtualization security by this system.