Feeds

Dell sandboxes Firefox to boost corporate security

Free application virtualisation tech

Internet Security Threat Report 2014

Dell has applied application virtualisation technology to Firefox in order to offer corporates what it claims is a more secure browsing experience.

The Dell KACE Secure Browser, which is available for download at no charge from Tuesday, aims to boost enterprise security while introducing businesses to the PC maker's recently acquired systems management appliance division. The technology provides users with a virtual instance of an internet browser application, thereby reducing exposure to drive-by malware attacks from websites hosting malicious code, an increasingly common tactic for malware distribution.

"By running the browser in a virtual instance, the browser and any activity resulting from its use are separated from the endpoint keeping the actual computer and operating system free of changes that would normally occur," Dell KACE explains.

The Secure Browser can be centrally deployed and managed via Dell KACE's K1000 Management Appliance. The unit intends to deliver an Internet Explorer version of the technology later this year.

Browser security (AKA transaction security) add-ons from the likes of Trusteer, PrevX and others have become a hot spot in the information security market over recent months. The technology has flourished as incidents of the compromise of legitimate websites and the sophistication of banking Trojans have grown. Trusteer offers its Rapport technology to consumers via banking partners, including HSBC, NatWest and the Royal Bank of Scotland.

Dell KACE argues its sandboxing approach to defend against similar web-based malware threats offers significant benefits.

"Trusteer takes the approach of trying to sense when malware is trying to corrupt the browser and stop unauthorised changes, a spokesman explained. "KACE does not try to keep the browser from being changed, but rather keeps any changes isolated to a sandbox, and then lets you easily reset the sandbox back to a clean slate.

"One advantage of KACE’s approach is that it protects you from both known and unknown attacks and vulnerabilities because we are not trying to plug holes in the browser, but rather just keep it from affecting the rest of the system by 'isolating' it in a container."

In other browser-related security news, on-demand IT security risk firm Qualys launched a free browser security testing service on Monday. The Qualys BrowserCheck service, available here, scans web browsers for security flaws within either the browser itself or its plug-ins. The technology supports IE 6.0 and later, Firefox 3.0 and Chrome 4.0 and above as well as popular third-party plugins (Adobe Flash, Shockwave, Sun Java, Microsoft Windows Media Player etc).

Qualys BrowserCheck is aimed at both corporates and consumers. Security notification firm Secunia already offers similar browser checking technology to consumers at no charge and as a paid service as part of a comprehensive application security scanning service to businesses. ®

Internet Security Threat Report 2014

More from The Register

next story
Docker's app containers are coming to Windows Server, says Microsoft
MS chases app deployment speeds already enjoyed by Linux devs
IBM storage revenues sink: 'We are disappointed,' says CEO
Time to put the storage biz up for sale?
'Hmm, why CAN'T I run a water pipe through that rack of media servers?'
Leaving Las Vegas for Armenia kludging and Dubai dune bashing
Facebook slurps 'paste sites' for STOLEN passwords, sprinkles on hash and salt
Zuck's ad empire DOESN'T see details in plain text. Phew!
SDI wars: WTF is software defined infrastructure?
This time we play for ALL the marbles
Windows 10: Forget Cloudobile, put Security and Privacy First
But - dammit - It would be insane to say 'don't collect, because NSA'
Oracle hires former SAP exec for cloudy push
'We know Larry said cloud was gibberish, and insane, and idiotic, but...'
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.