Microsoft publishes a paper on a multi-process browser code named “Gazelle”
Microsoft has published a research paper on a browser that uses different processes to isolate page content elements. It builds on the concept of multiprocess browsing but goes one step further and uses more fine-grained isolation to expand on the security advantages that are already included in Chrome and are being developed in Firefox. This is the paper’s abstract. The full article can be found here.
Original web browsers were applications designed to view static web content. As web sites evolved into dynamic web applications that compose content from multiple web sites, browsers have become multi-principal operating environments with resources shared among mutually distrusting web site principals. Nevertheless,no existing browsers, including new architectures like IE 8, Google Chrome, and OP, have a multi-principal operating system construction that gives a browser-based OS the exclusive control to manage the protection of all system resources among web site principals.
In this paper, we introduce Gazelle, a secure web browser constructed as a multi-principal OS. Gazelle’s browser kernel is an operating system that exclusively manages resource protection and sharing across web site principals. This construction exposes intricate design issues that no previous work has identified, such as cross-protection-domain display and events protection. We elaborate on these issues and provide comprehensive solutions.
Our prototype implementation and evaluation experience indicates that it is realistic to turn an existing browser into a multi-principal OS that yields significantly stronger security and robustness with acceptable performance.
Get Jorge Martinez de Salinas delivered by email