Intel Threat Detection Technology launches

Intel launched a new security technology that the company calls Intel Threat Detection Technology today.

Intel Threat Detection Technology can best be described as a set of features that assist partners in the detection of security threats such as exploits.

Intel launches Intel Threat Detection Technology with two features and plans to introduce additional features in the future.

The first is called Accelerated Memory Scanning which moves the scanning from the processors to Intel's integrated graphics processor. The benefits of Accelerated Memory Scanning are significant: Intel notes that the technology improves scan performance while lowering power consumption and computer resources required for the scanning.

Initial benchmarks showed that CPU utilization dropped from 20% to 2% according to Intel. While benchmarks need to be verified by independent researchers and third-parties, support for Accelerated Memory Scanning could improve battery life of mobile devices and reduce the performance impact of antivirus scans on all systems that support the technology.

The first new capability is Accelerated Memory Scanning. Current scanning technologies can detect system memory-based cyberattacks, but at the cost of CPU performance. With Accelerated Memory Scanning, the scanning is handled by Intel’s integrated graphics processor, enabling more scanning, while reducing the impact on performance and power consumption.

Intel revealed that Microsoft integrates Accelerated Memory Scanning into Windows Defender Advanced Threat Protection and that the functionality is available already. The company did not provide details but it seems likely that Microsoft will deliver the new functionality through updates of Windows Defender on systems that support Advanced Threat Protection.

Advanced Threat Protection is only available for Windows 10 currently, and there only for devices running the Windows 10 Fall Creators Update or newer versions.

Microsoft announced earlier this year, however, that the security feature will become available for devices running Windows 7 or Windows 8.1 this Summer.

The second feature of Intel Threat Detection Technology is called Intel Advanced Platform Telemetry. The feature uses "platform telemetry" data with machine learning algorithms to improve the detection of threats, reduce false positives and "minimize performance impact".

The second Intel Threat Detection Technology is Intel Advanced Platform Telemetry. Intel Advanced Platform Telemetry combines platform telemetry with machine learning algorithms to improve the detection of advanced threats, while reducing false positives and minimizing performance impact.

Intel found a first partner in Cisco which plans to integrate the functionality in the Cisco Tetration platform.

Closing Words

Antivirus scans may impact performance of systems and any attempt to reduce the impact is a welcome one, especially if it coincides with a drop in battery use and comes with higher scan numbers.

Advanced Memory Scanning needs to be tested to verify Intel's claims and I'm always cautious when companies mention Telemetry or other forms of data collecting.

Now You: What's your take on Intel Threat Detection Technology?