Intel to use Graphics processor for antivirus scanning
Yes, you read that right, basically Intel will be using the GPU, to offload the CPU for virus and malware scanning. The first program to utilize the new features will actually be Windows Defender for enterprises.
Intel is planning to allow virus scanners to use its integrated graphics chipsets to scan for malicious attacks. Intel calls the new technique Accelerated Memory Scanning and it will work on systems with an Intel Core processor of the sixth generation, Skylake, and higher. By offloading the job to the GPU, which often sits idle, that performance hit was reportedly reduced to 2%.
Accelerated Memory Scanning will be available for 6th, 7th, and 8th gen Intel processors. However, it is up to third-party antivirus vendors to actually utilize that feature. Microsoft will be the first to adopt the new technology, and Advanced Memory Scanning will be baked into Windows Defender Advanced Threat Protection (ATP) available for enterprises as part of Windows 10.
-- Intel -- Today, Intel is taking another step forward, with two new technology announcements: Intel Threat Detection Technology (Intel TDT), a set of silicon-level capabilities that will help the ecosystem detect new classes of threats, and Intel Security Essentials, a framework that standardizes the built-in security features across Intel processors. We are also announcing a strengthened academic partnership with Purdue University, to help accelerate the development and availability of cybersecurity talent.
Intel Threat Detection Technology leverages silicon-level telemetry and functionality to help our industry partners improve the detection of advanced cyberthreats and exploits. Today we are announcing the first two Intel Threat Detection Technology capabilities, including implementation plans by Microsoft and Cisco.
The first new capability is Accelerated Memory Scanning. Current scanning technologies can detect system memory-based cyberattacks, but at the cost of CPU performance. With Accelerated Memory Scanning, the scanning is handled by Intel's integrated graphics processor, enabling more scanning, while reducing the impact on performance and power consumption. Early benchmarking on Intel test systems show CPU utilization dropped from 20 percent to as little as 2 percent.
Microsoft will integrate Accelerated Memory Scanning into Microsoft Windows Defender Advanced Threat Protection's (ATP)* antivirus capability, which is available now.
The second Intel Threat Detection Technology is Intel Advanced Platform Telemetry. Intel Advanced Platform Telemetry combines platform telemetry with machine learning algorithms to improve the detection of advanced threats, while reducing false positives and minimizing performance impact. The first Cisco product to take advantage of this integration will be the Cisco Tetration platform, which provides data center security and cloud workload protection.
I am excited about the progress we are making, together with these key partners, to pioneer innovations across silicon and software to help protect customers from emerging threats.
Intel Security Essentials: Built-in Security Foundation
Today we are also launching Intel Security Essentials, which will ensure a consistent set of critical root-of-trust hardware security capabilities across Intel Core , Intel Xeon and Intel Atom processors. These capabilities are platform integrity technologies for secure boot, hardware protections (for data, keys and other digital assets), accelerated cryptography and trusted execution enclaves to protect applications at runtime.
This standard set of capabilities will accelerate trusted computing as customers build solutions rooted in hardware-based protections. Further, these capabilities, directly integrated into Intel silicon, are designed to improve the security posture of computing, lower the cost of deploying security solutions and minimize the impact of security on performance.
Strengthening Academic Partnership with Purdue University
Intel is committed to being an active partner in the security ecosystem. The tech industry has a well-documented shortage of cybersecurity talent. To meet today's cybersecurity challenges, we need the industry and academia to accelerate the development and availability of the next generation of security-minded professionals.
To that end, we are strengthening cybersecurity partnerships with academia to advance research and begin to close the talent gap in the industry. Today, Purdue University is announcing the launch of its Design for Security Badge Program for students and professionals, developed in partnership with Intel.
Several other partners will be making announcements at RSA this week, so I encourage everyone at the conference to stop by our booth (#3435 in North Hall) to learn more.
Intel is committed to helping secure the digital world, beginning with a secure foundation at the silicon level. Together with our industry partners - and in line with our security first pledge - we will continue to work tirelessly to safeguard our customers and their data.
Intel To Release affordable Optane 800P series SSDs in March - 01/11/2018 10:23 AM
Intel announced the release of a new Optane SSDs series, the 800P Optane SSDs are positioned between the Optane Memory caching modules and the Intel Optane 900P SSDs....
Intel to release all Meltdown and Spectre patches before the end of January & AMD issues - 01/09/2018 10:23 AM
Intel will release all of its Meltdown and Specter patches before the end of this month for cpu's up to five years old. As the chip manufacturer had already made known, 90 percent of its processors ...
Intel To Increase Coffee Lake production - Uses New Fab - 11/20/2017 09:30 AM
Coffee Lake processor availability has been poor, even now weeks after its launch. As to why it is so poor, Intel doesn't shed a word. However, they will increase Coffee lake production by using a n...
Intel to Rebrand Kaby-Lake Pentiums towards "Pentium Gold" - 10/04/2017 12:04 PM
In it's latest product notification Intel is renaming the Pentium G series of processors from the current Kaby lake generation towards Pentium Gold. ...
Intel To Delay Cannonlake processors towards late 2018 - 09/21/2017 09:24 AM
After a tumuluous year with multiple architecture releases within the desktop processor segment, it seems that Intel will be slowing things down a little. Cannonlake (not to confuse with coffee lake) ...
Senior Member
Posts: 6564
Joined: 2012-11-10
Virus scanners aren't intensive enough to need anything better than an Intel IGP. I think this is a good idea to maintain live security while minimizing CPU utilization. For many of us, these GPUs sit there never used, anyway. I wish more software would take advantage of IGPs.
Not that any of this affects me - every time I have an Intel IGP, it's my primary graphics source. I also never use antivirus.
Then they fallback on CPU... what else would they do? Assuming this uses OpenCL, there are CPU drivers for that.
Senior Member
Posts: 1615
Joined: 2012-10-07
This sounds like a positive thing, but I am curious how many of you install Intel IGPU drivers on your systems?
I ask cause I don't even bother but this "maybe" might change my mind.
so iGPU can do this even if you have dGPU installed?
This is exactly what I was thinking. I don't install the iGPU drivers - maybe the CPU will be able to somehow use the iGPU for this computational purpose without drivers, I don't know (seeing as it's not being used for it's usual GPU display output).
Senior Member
Posts: 2762
Joined: 2009-10-10
pretty sure you would need to install drivers or it won't use the HW as it is not listed in device manager.
Senior Member
Posts: 1615
Joined: 2012-10-07
My thinking was just because it was located so close to the CPU on the same die with (I guess) direct connections makes me think the CPU might be able to communicate with it without drivers, whereas the rest of the system would need drivers to communicate with it. Just a very loose idea. But either way, will be good to see the performance impact of this virus scan off-loading, I'll be interested to read reviews on it.
Senior Member
Posts: 7835
Joined: 2011-07-20
You should be able to activate both in the UEFI.
Check for options like "hybrid multi-monitor" or like, so the iGPU is not disabled with dGPU as primary device.
Cool...Thanks!
I don't have enterprise version but maybe they will start and use other versions of windows.