Attack on computer memory reveals vulnerability of widely used
security systems Posted February 21, 2008; 11:42 a.m. A team of
academic, industry and independent researchers has demonstrated
a new class of computer attacks that compromise the contents of
"secure" memory systems, particularly in laptops. The attacks
overcome a broad set of security measures called "disk
encryption," which are meant to secure information stored in a
computer's permanent memory. The researchers cracked several
widely used technologies, including Microsoft's BitLocker,
Apple's FileVault and Linux's dm-crypt, and described the
attacks in a paper and video published on the Web Feb. 21. The
team reports that these attacks are likely to be effective at
cracking many other disk encryption systems because these
technologies have architectural features in common. "We've
broken disk encryption products in exactly the case when they
seem to be most important these days: laptops that contain
sensitive corporate data or personal information