Risk
7/19/2010
03:58 PM
Connect Directly
RSS
E-Mail
50%
50%

Dell KACE Offers Free Secure Browser

To protect against web malware, Dell KACE's new free Secure Browser virtualizes a browser and restricts direct and cross-site access to dangerous or inappropriate websites.

To help companies increase the safety of their Windows users' web browsing from malicious code, including restricting direct and cross-site access to dangerous or inappropriate websites, Dell KACE has introduced the Dell KACE Secure Browser, available immediately as a free download.

The Dell KACE Secure Browser consists of a browser -- currently, FireFox 3.6 -- plus plug-ins -- currently, Adobe Flash and Adobe Reader -- plus proprietary Dell KACE "Virtual Kontainer" application virtualization technology developed as part of the company's K1000, all packaged into one download that uses a standard Windows installer.

"The instance of the browser is virtualized," says Rob Meinhardt, President, Dell KACE. "A process may think it is writing to the system, but that doesn't happen."

Dell KACE Secure Browser aims to proactively contain threats before they become a problem. "The UI includes a 'click and undo' for whatever's happened," says Meinhardt.

The initial release is for 32-bit versions of Windows 7, Vista and XP supports the FireFox browser. "We chose FireFox as the best fit for the verticals that our products play in, and FireFox's Open-Source was a good fit for working with -- MSIE is a black box, FireFox lets us see inside." But, Meinhardt adds, "We do intend to support Microsoft Internet Explorer. We will probably start with Internet Explorer 6, since, as a virtual instance, you could run it on Vista or on Windows 7."

According to Meinhardt, downloads do get written to the system disk. "The download isn't contained, but if it were executed, you'd get the process start prompt," says Meinhardt, "And if run from the secure browser, activity would be contained in the secure space." (Hopefully, the user's system will have separate security that will automatically scan any such downloads before trying being accessed other than by Secure Browser...)

Users can update FireFox and the reader plug-ins, as well as install their own plug-ins and extensions, such as NoScript. "Users can update their own instance, and we will release new installers with the latest version of FireFox," says Meinhardt.

The Secure Browser can also allow/disallow programs being invoked by a web page. "If the browser wants to start up a process, like Windows Media Player, it will ask for permission," says Meinhardt. "You say tell it, Always, Now, or Never."

Currently, resetting the Secure Browser restores it to the original state, on an "all or none" basis -- including losing any bookmarks and other settings. "We intend to provide a way to install to your own state, and to exclude things from a reset," says Meinhardt.

The new tool is intended to work in concert with a Dell KACE Dell KACE K1000 Management Appliance on the user's network, which provides the company with network-wide capabilities. However, the Secure Browser does not require a K1000 to be used as a virtualized browsing environment.

Using a K1000, IT can remotely reset or kill a Secure Browser session, and create whitelisting and blacklisting for URLs. "If a permitted site is infected with a cross-site scripting exploit, whatever is on those non-whitelisted sites won't run," says Meinhardt.

According to Meinhardt, the K1000 is intended for use in companies with anywhere from 100 to 10,000 people. "Most of these users are in the mid-100's to mid-thousands of users," says Meinhardt. (MSRP for a K1000 starts at just under $9,000, for use with up to 100 users.)

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-1032
Published: 2014-09-17
Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party inf...

CVE-2012-1417
Published: 2014-09-17
Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com.

CVE-2012-1506
Published: 2014-09-17
SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryId parameter to plugins/ajaxCalls/haltResumeHsp.php. NOTE: some of these details are obtained from th...

CVE-2012-1507
Published: 2014-09-17
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) newHspStatus parameter to plugins/ajaxCalls/haltResumeHsp.php, (2) sortOrder1 parameter to templates/hrfunct/emppop.php, or (3) uri parameter to index...

CVE-2012-2583
Published: 2014-09-17
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email.

Best of the Web
Dark Reading Radio