Feeds

Microsoft boffins devise 'secure' Gazelle browser

Better than IE and Chrome

Application security programs and practises

Microsoft has developed a browser whose security it says beats many of today's generation of browsers, including Internet Explorer and Google's Chrome.

But there's catch or two: It's slower and uses more resources than IE 7, and you can't get your hands on it.

Microsoft Research has devised a prototype of IE running on Windows Vista where the browser acts like a self-contained operating system. The browser uses a kernel Microsoft Research calls Gazelle, and it's architecture is outlined in a recently published white paper available here (warning: PDF).

Gazelle was built to expose the challenges involved in constructing a secure browser, such as the ability to work with legacy code like DOM and JavaScript, cross-origin script source and cross-process display.

Gazelle is designed to address the fact that browsers like IE and Chrome have not been built by design to handle multiple processes or work securely across different domains. This slows their performance and exposes the browser and client to malicious code.

"Our prototype implementation and evaluation experience indicates that it is realistic to turn an existing browser into a multi-principal OS that yields significantly stronger security and robustness with acceptable performance and backward compatibility," Microsoft Research said.

The browser and Gazelle are unlikely to see the light of day as this was a Microsoft Research effort designed as a "what if" scenario. Also, the isolation process and need to funnel principal calls centrally seemed to slow things down and increase the memory demanded.

Gazelle was slower and required more memory than IE 7 on new tabs for a blank page and Google.com, navigating from Google.com to Google.com/ads and navigating to the NYtimes.com with a cross-origin frame. Gazelle only beat IE 7 on start-up.

Still, at least we know what's possible. ®

The smart choice: opportunity from uncertainty

More from The Register

next story
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Do YOU work at Microsoft? Um. Are you SURE about that?
Nokia and marketing types first to get the bullet, says report
Microsoft takes on Chromebook with low-cost Windows laptops
Redmond's chief salesman: We're taking 'hard' decisions
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
EU dons gloves, pokes Google's deals with Android mobe makers
El Reg cops a squint at investigatory letters
Chrome browser has been DRAINING PC batteries for YEARS
Google is only now fixing ancient, energy-sapping bug
Big Blue Apple: IBM to sell iPads, iPhones to enterprises
iOS/2 gear loaded with apps for big biz ... uh oh BlackBerry
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.