Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »
June 17, 11:30 AM - 12:30 PM U.S./ET (GMT-4)
Larry Bonfante, CIO of the U.S. Tennis Association, will discuss the skills and approaches that your rising IT leaders must learn to be effective in an executive capacity.
How to Handle Your New CEO: Managing Turnover at the Top
June 18, 11:00 AM - 12:00 PM U.S./Eastern (GMT-4)
Turbulent times have increased turnover at the top. Find out what Council CIOs have done to "break in" new CEOs—build relationships, set expectations, educate on the role of IT.
Mid-Market CIO Panel: Tips and Techniques for Improving Vendor Relationships
July 15, 4:00 PM - 5:00 PM U.S./Eastern (GMT-4)
We'll highlight relationship priorities and best practices identified in a Council study, and we'll interact with a CIO panel on the approaches they've used to improve strategic vendor partnerships.
Executive Competencies Assessment Tool
Assess Your Business Leadership Skills with the Council's new benchmarking tool. Rate yourself in change leadership, strategy, customer focus and more.
Learn more about the CIO Executive Council »Apply today for a FREE subscription to CIO Magazine!
January 12, 2006 — CIO —
The Windows operating system expert who exposed Sony BMG Music Entertainment use of "rootkit" cloaking techniques last year is now criticizing security vendors Symantec and Kaspersky Lab Ltd. for shipping software that works in a similar manner.
Mark Russinovich, chief software architect with systems software company Winternals Software LP, says that the techniques used by Symantec’s Norton SystemWorks and Kaspersky’s Anti-Virus products are rootkits, a term usually reserved for the techniques used by malicious software to avoid detection on an infected PC. There is "no good justification," for the use of such techniques, Russinovich said. "If the vendor believes that the implementation of their software requires a rootkit then I think they need to go back and re-architect it."
Both Symantec and Kaspersky concede that they have shipped software that hides information from system tools, but told IDG News Service they disagreed with Russinovich’s use of the term rootkit, saying that because their software was not designed with malicious intent, it should not be lumped into the same category.
Still, both companies appeared sensitive to Russinovich’s criticism.
Symantec on Tuesday issued a patch to SystemWorks that disabled the cloaking feature. And on Thursday, a representative from Kaspersky said that it was possible that his company could take similar action. "I don’t know whether we’ve got a plan to do that, but that’s obviously one thing that we could do here," said David Emm a senior technology consultant with Kaspersky.
Unlike Sony’s XCP (Extended Copy Protection) software, the Symantec and Kaspersky products do not cloak the fact that certain pieces of software are running on the computer. Instead, they hide data.
Symantec’s Norton SystemWorks PC-tuning software uses cloaking techniques to hide a directory of backup files. This technique has been employed by SystemWorks since the 1990s in order to prevent users from accidentally deleting these files, according to Vincent Weafer, senior director for development for Symantec Security Response.
Symantec issued the patch because hackers could conceivably use the SystemWorks cloaking capability to hide files on the system. Weafer described this possibility as a "low risk" threat, saying that most security software would be able to detect these cloaked files. "The intent of this feature was for good," he said. "But we need to look at these technologies and say, ’What is the potential for harm?’ Even if it’s a low risk, the right thing to do is remove them."
Kaspersky’s use of cloaking software is more recent. With v