Pedestal Software's Integrity Protection Driver does not start until the system has been up for 20 minutes in order to allow the software to be uninstalled. During this time, an attacker who is able to gain privileged access to the system can set the system clock back to further delay the driver from starting. This could allow an attacker a greater time window to perform modifications to the system before the driver starts.
Pedestal Software's Integrity Protection Driver does not start until the system has been up for 20 minutes in order to allow the software to be uninstalled. During this time, an attacker who is able to gain privileged access to the system can set the system clock back to further delay the driver from starting. This could allow an attacker a greater time window to perform modifications to the system before the driver starts.