IT Jobs
Microsoft testing new super-secure browser
But 'Gazelle' is anything but, so far.
By Jeremy Kirk, IDG News Service
Published: 16:01 GMT, 23 February 09
Microsoft researchers are developing a new web browser that they claim could offer a far greater degree of security than Google's Chrome, Mozilla's Firefox or Microsoft's own Internet Explorer.
The browser, called Gazelle, relies on 5,000 lines of C code called a "browser kernel" that helps enforce security rules to prevent malicious access to the PC's underlying operating system, according to a recently published paper.
So far, Gazelle is just a prototype, with other parts of the browser based on Microsoft's IE. Due to the complex nature of the way it processes web pages for better security, the browser's performance is more tortoise than gazelle, but the researchers think a few tweaks can make it faster.
Gazelle is different from some other browsers in that it considers each part of a website - such as iframes, subframes and plugins - as separate elements. Some of those elements can pull in malicious content from other websites. Google's Chrome runs a web page and its elements in a single process.
The Microsoft researchers argues that their approach brings more reliability and better security since processes can't interact with the underlying system and are mediated by system calls supplied by the browser kernel.
In the paper, the Microsoft researchers are surprisingly critical of the company's forthcoming web browser, IE8, which uses an approach similar to Chrome by using tabs to isolate processes.
"This granularity is insufficient since a user may browse multiple mutually distrusting sites in a single tab, and a web page may contain an iframe with content from an untrusted site (e.g., ads)," the paper reads.
Gazelle goes so far as to separate elements of a web page that come from the same registrar-controlled domain. For example, content from ad.datacenter.com and user.datacenter.com would be considered separate, whereas Chrome "puts them into the same site instance," the paper said.
Another interesting feature of Gazelle is aimed at blocking so-called 'race condition' attacks. In that scenario, an attacker creates a web page aimed at making a user click on an area of the page. But just before the predicted click happens, an overlay is drawn into the page, which could cause a user to be attacked.
Gazelle will ignore any clicks in newly exposed screen areas for about one second until a user can see the new screen areas.
Gazelle also aims to limit the dangers posed by programming flaws in browser plugins. Plugins are small bits of code that enable other programs to run within a browser, but they've also been known to contain vulnerabilities that can allow a PC to be hacked.
In Gazelle, the plugins are sandboxed, or isolated from the rest of the system, so that a bad plugin would only affect the particular web page's plugin process and not the whole PC.
But one huge problem with Gazelle's approach is that existing plugin code would have to be rewritten or ported to interact with Gazelle's browser kernel system calls. That's difficult since plugins are written by a wide variety of software vendors whose development schedules don't necessarily work in perfect sync with those of browser developers.
Other parts of Gazelle borrow from IE code not related to security. For example, the researchers said they didn't want to write a new HTML parser, so they used IE7's Trident renderer and JavaScript engine.
In compatibility tests, Gazelle correctly rendered 19 of the top 20 sites ranked by web survey firm Alexa. The paper warns that the new security of Gazelle does introduce "performance overhead" - especially for sites such as the New York Times website - but further work should be able to make it faster.
Add your commentComments