Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS Publishes Papers For a Modern, Secure Browser

Posted by Soulskill on from the new-and-different dept.

V!NCENT writes with an excerpt from a new publication by Microsoft: "As web sites evolved into dynamic web applications composing content from various web sites, browsers have become multi-principal operating environments with resources shared among mutually distrusting web site principals. Nevertheless, no existing browsers, including new architectures like IE 8, Google Chrome, and OP, have a multi-principal operating system construction that gives a browser-based OS the exclusive control to manage the protection of all system resources among web site principals. In this paper, we introduce Gazelle, a secure web browser constructed as a multi-principal OS. Gazelle's Browser Kernel is an operating system that exclusively manages resource protection and sharing across web site principals." Here's the full research paper (PDF).

10 of 296 comments (clear)

  1. Princi-what? by Anonymous Coward · · Score: 2, Funny

    Principle. Principal. ?? WTF?

  2. I am not reading TFA... by NotQuiteReal · · Score: 4, Funny

    I was told my browser can't be trusted to read PDF fils.

    --
    This issue is a bit more complicated than you think.
    1. Re:I am not reading TFA... by Anonymous Coward · · Score: 2, Funny

      Your spell checker is broken as well.

    2. Re:I am not reading TFA... by Anonymous Coward · · Score: 1, Funny

      It's french, you insensitive clod!

  3. Re:Microsoft promising a secure system? by binarylarry · · Score: 2, Funny

    Why not? Microsoft is a ship built so big its nigh unsinkable!

    --
    Mod me down, my New Earth Global Warmingist friends!
  4. It's not that complicated by Anonymous Coward · · Score: 1, Funny

    The network is not trusted. Trust noone. As soon as you start building assumptions of trust of remote systems outside of your sphere of control into your model for operations to perform on the local machine, you're doing it wrong.

    This is bot.NET: a system and method for pre-organizing zombie nodes for rapid assimilation by preparing trusted malware transmission vectors.

  5. Re:Does it really by isorox · · Score: 5, Funny

    What is it about the Windows processes that makes them cost that much?

    License fees?

    The kernel has to ensure processes are obeying any DRM and WGA restrictions

  6. Re:Can't even get basic text right by unlametheweak · · Score: 2, Funny

    What moron modded me troll?

    Troll is the new Funny.

  7. Re:and trashes Google Chrome .. by Too+Much+Noise · · Score: 5, Funny

    " Tahoma doesn't provide protection to existing browser principals."

    That's it. I'm switching to Comic Sans.

  8. Re:Dear MS, by Zero__Kelvin · · Score: 2, Funny

    "That somehow, every security experts Microsoft ends up hiring turn into incompetents?"

    That would clearly be absurd. Most of them were already incompetent when they were hired by upper incomp^H^H^H^H^H^H management.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun