Feeds

Dell sandboxes Firefox to boost corporate security

Free application virtualisation tech

Gartner critical capabilities for enterprise endpoint backup

Dell has applied application virtualisation technology to Firefox in order to offer corporates what it claims is a more secure browsing experience.

The Dell KACE Secure Browser, which is available for download at no charge from Tuesday, aims to boost enterprise security while introducing businesses to the PC maker's recently acquired systems management appliance division. The technology provides users with a virtual instance of an internet browser application, thereby reducing exposure to drive-by malware attacks from websites hosting malicious code, an increasingly common tactic for malware distribution.

"By running the browser in a virtual instance, the browser and any activity resulting from its use are separated from the endpoint keeping the actual computer and operating system free of changes that would normally occur," Dell KACE explains.

The Secure Browser can be centrally deployed and managed via Dell KACE's K1000 Management Appliance. The unit intends to deliver an Internet Explorer version of the technology later this year.

Browser security (AKA transaction security) add-ons from the likes of Trusteer, PrevX and others have become a hot spot in the information security market over recent months. The technology has flourished as incidents of the compromise of legitimate websites and the sophistication of banking Trojans have grown. Trusteer offers its Rapport technology to consumers via banking partners, including HSBC, NatWest and the Royal Bank of Scotland.

Dell KACE argues its sandboxing approach to defend against similar web-based malware threats offers significant benefits.

"Trusteer takes the approach of trying to sense when malware is trying to corrupt the browser and stop unauthorised changes, a spokesman explained. "KACE does not try to keep the browser from being changed, but rather keeps any changes isolated to a sandbox, and then lets you easily reset the sandbox back to a clean slate.

"One advantage of KACE’s approach is that it protects you from both known and unknown attacks and vulnerabilities because we are not trying to plug holes in the browser, but rather just keep it from affecting the rest of the system by 'isolating' it in a container."

In other browser-related security news, on-demand IT security risk firm Qualys launched a free browser security testing service on Monday. The Qualys BrowserCheck service, available here, scans web browsers for security flaws within either the browser itself or its plug-ins. The technology supports IE 6.0 and later, Firefox 3.0 and Chrome 4.0 and above as well as popular third-party plugins (Adobe Flash, Shockwave, Sun Java, Microsoft Windows Media Player etc).

Qualys BrowserCheck is aimed at both corporates and consumers. Security notification firm Secunia already offers similar browser checking technology to consumers at no charge and as a paid service as part of a comprehensive application security scanning service to businesses. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
The Return of BSOD: Does ANYONE trust Microsoft patches?
Sysadmins, you're either fighting fires or seen as incompetents now
Microsoft: Azure isn't ready for biz-critical apps … yet
Microsoft will move its own IT to the cloud to avoid $200m server bill
Oracle reveals 32-core, 10 BEEELLION-transistor SPARC M7
New chip scales to 1024 cores, 8192 threads 64 TB RAM, at speeds over 3.6GHz
US regulators OK sale of IBM's x86 server biz to Lenovo
Now all that remains is for gov't offices to ban the boxes
Object storage bods Exablox: RAID is dead, baby. RAID is dead
Bring your own disks to its object appliances
Nimble's latest mutants GORGE themselves on unlucky forerunners
Crossing Sandy Bridges without stopping for breath
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.