Can the API and Process hooks be avoided if the means by which it happens use some form of encryption. Can shatter attack be prevented if the kernel knows identity of the action occurring. If so, then the local Root kit's or attacker's residing locally can spoof the identity. How are these planned to be prevented in future.
Kind Regards, Shyaam --------------------------------------------------------------------------- ---------------------------------------------------------------------------
