Virtualization Daily

Symantic and Intel are working together to bring intrusion detection to every desktop. What they’re looking doing is creating a specialized intrusion prevention virtual appliance that runs alongside the primary operating system on the same machine. This seems like a strange thing to do, but it provides a clear separation between the OS and the security software being provided for that OS. Depending on exactly how it’s implemented this could allow the security software to be undetectable from the primary OS. This means that attacks intended to defeat that software are much harder to stage. A few more years and this kind of thing will be the norm for server installations and maybe even for desktops.