Intel, Microsoft to use GPU to scan memory for malware

The company is announcing two specific TDT features. The first is “Advanced Memory Scanning.” In an effort to evade file-based anti-virus software, certain kinds of malware refrain from writing anything to disk. This can have downsides for the malware – it can’t persistently infect a machine and, instead, has to reinfect the machine each time it is rebooted – but makes it harder to spot and analyze. To counter this, anti-malware software can scan system memory to look for anything untoward. This, however, comes at a performance cost, with Intel claiming it can cause processor loads of as much as 20 percent.

This is where Advanced Memory Scanning comes into effect: instead of using the CPU to scan through memory for any telltale malware signatures, the task is offloaded to the integrated GPU. In typical desktop applications, the GPU sits there only lightly loaded, with abundant unused processing capacity. Intel says that moving the memory scanning to the GPU cuts the processor load to about two percent.

23 Comments

  1. FlyingJester 2018-04-17 11:30 pm EST
    • Brendan 2018-04-18 12:55 am EST
      • dsmogor 2018-04-18 8:35 am EST
  2. NotKyon 2018-04-18 2:24 am EST
    • Megol 2018-04-18 12:08 pm EST
  3. ahferroin7 2018-04-18 12:22 pm EST
    • avgalen 2018-04-18 3:24 pm EST
      • ahferroin7 2018-04-18 4:44 pm EST
        • Alfman 2018-04-18 8:13 pm EST
          • ahferroin7 2018-04-19 11:07 am EST
        • avgalen 2018-04-19 12:37 am EST
          • Alfman 2018-04-19 1:31 am EST
          • avgalen 2018-04-19 7:57 am EST
          • Alfman 2018-04-19 2:25 pm EST
          • ahferroin7 2018-04-19 11:12 am EST
          • avgalen 2018-04-19 1:40 pm EST
          • ahferroin7 2018-04-19 2:26 pm EST
    • grat 2018-04-18 11:07 pm EST
      • ahferroin7 2018-04-19 11:15 am EST
  4. JLF65 2018-04-19 10:39 pm EST
    • Alfman 2018-04-20 1:32 am EST
      • JLF65 2018-04-20 8:49 pm EST
  5. fabrica64 2018-04-20 3:30 am EST