Security threats Toolkit

America 'must consider banning rootkits'

Tags:
Homeland Security,
Legislation,
Ban,
Rootkit

Joris Evers CNET News

Published: 17 Feb 2006 09:35 GMT

Perhaps the best way to deal with rootkits is to outlaw them.

At least when it comes to such mishaps as the Sony BMG Music Entertainment fiasco, that's what an official from the Department of Homeland Security suggested Thursday.

"The recent Sony experience shows us that we need to be thinking about how we ensure that consumers are not surprised by what their software programs do," Jonathan Frenkel, director of law-enforcement policy at the US Department of Homeland Security said in a speech in San Jose at the 2006 RSA Conference.

A lesson has been learned from the Sony debacle, which left unwitting consumers with software on their PCs that could be used by cyberattackers to hide their malicious code. "Companies now know that they should not surreptitiously install a rootkit on computers," Frenkel said.

But perhaps more importantly, how could the mishap have been avoided in the first place? "Legislation or regulation may not be a solution in all cases, but it may be warranted in appropriate circumstances," Frenkel said.

Last November, Sony was found to be shipping copy-restricted compact discs that planted rootkit software on the computers that played them. The rootkit technology offered a hiding place for malicious software and attackers, which were quick to exploit it.

After the rootkit technology was uncovered on Sony's CDs, the company faced heavy criticism and lawsuits. It recalled the discs, stopped production and has agreed to offer compensation for buyers of the CDs that contain the rootkit.

Since the Sony case, other companies have been accused of shipping products with rootkit-type behaviour. Symantec last month released an update to its popular Norton SystemWorks to fix a security problem that could be abused by cybercriminals to hide malicious software.

According to F-Secure the German DVD release of Mr & Mrs Smith, contains a digital rights management tool that uses rootkit-like cloaking technology. The movie is distributed by 20th Century Fox.