Black Hat Insights on Rootkit Detection Methods by Edgar Barbosa

Security researchers at the Black Hat show in Las Vegas are debating whether rootkits that mimic virtual machines can ever be detected. I have heard about virtual machine rootkits before but I did not think that they were undetectable. What do you think, are these rootkit really invisible?

She returned to Black Hat this year to acknowledge that researcher Edgar Barbosa has come closest to devising a method for detecting Blue Pill.

"Congratulations to Edgar," she said, during the highly technical presentation she made with her colleague, researcher Alexander Tereshkin. Rutkowska said they hadn't yet found a way to evade Barbosa's so-called counter-based detection method, which he presented during July's SyScan conference.

The link for this article located at TechWorld is no longer available.