Feeds

Dell sandboxes Firefox to boost corporate security

Free application virtualisation tech

Security for virtualized datacentres

Dell has applied application virtualisation technology to Firefox in order to offer corporates what it claims is a more secure browsing experience.

The Dell KACE Secure Browser, which is available for download at no charge from Tuesday, aims to boost enterprise security while introducing businesses to the PC maker's recently acquired systems management appliance division. The technology provides users with a virtual instance of an internet browser application, thereby reducing exposure to drive-by malware attacks from websites hosting malicious code, an increasingly common tactic for malware distribution.

"By running the browser in a virtual instance, the browser and any activity resulting from its use are separated from the endpoint keeping the actual computer and operating system free of changes that would normally occur," Dell KACE explains.

The Secure Browser can be centrally deployed and managed via Dell KACE's K1000 Management Appliance. The unit intends to deliver an Internet Explorer version of the technology later this year.

Browser security (AKA transaction security) add-ons from the likes of Trusteer, PrevX and others have become a hot spot in the information security market over recent months. The technology has flourished as incidents of the compromise of legitimate websites and the sophistication of banking Trojans have grown. Trusteer offers its Rapport technology to consumers via banking partners, including HSBC, NatWest and the Royal Bank of Scotland.

Dell KACE argues its sandboxing approach to defend against similar web-based malware threats offers significant benefits.

"Trusteer takes the approach of trying to sense when malware is trying to corrupt the browser and stop unauthorised changes, a spokesman explained. "KACE does not try to keep the browser from being changed, but rather keeps any changes isolated to a sandbox, and then lets you easily reset the sandbox back to a clean slate.

"One advantage of KACE’s approach is that it protects you from both known and unknown attacks and vulnerabilities because we are not trying to plug holes in the browser, but rather just keep it from affecting the rest of the system by 'isolating' it in a container."

In other browser-related security news, on-demand IT security risk firm Qualys launched a free browser security testing service on Monday. The Qualys BrowserCheck service, available here, scans web browsers for security flaws within either the browser itself or its plug-ins. The technology supports IE 6.0 and later, Firefox 3.0 and Chrome 4.0 and above as well as popular third-party plugins (Adobe Flash, Shockwave, Sun Java, Microsoft Windows Media Player etc).

Qualys BrowserCheck is aimed at both corporates and consumers. Security notification firm Secunia already offers similar browser checking technology to consumers at no charge and as a paid service as part of a comprehensive application security scanning service to businesses. ®

Internet Security Threat Report 2014

More from The Register

next story
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
The DRUGSTORES DON'T WORK, CVS makes IT WORSE ... for Apple Pay
Goog Wallet apparently also spurned in NFC lockdown
Desktop Linux users beware: the boss thinks you need to be managed
VMware reveals VDI for Linux desktops plan, plus China lab to do the development
IBM, backing away from hardware? NEVER!
Don't be so sure, so-surers
Hey - who wants 4.8 TERABYTES almost AS FAST AS MEMORY?
China's Memblaze says they've got it in PCIe. Yow
Microsoft brings the CLOUD that GOES ON FOREVER
Sky's the limit with unrestricted space in the cloud
This time it's SO REAL: Overcoming the open-source orgasm myth with TODO
If the web giants need it to work, hey, maybe it'll work
'ANYTHING BUT STABLE' Netflix suffers BIG Europe-wide outage
Friday night LIVE? Nope. The only thing streaming are tears down my face
Google roolz! Nest buys Revolv, KILLS new sales of home hub
Take my temperature, I'm feeling a little bit dizzy
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.