Risk
7/19/2010
03:58 PM
Connect Directly
RSS
E-Mail
50%
50%

Dell KACE Offers Free Secure Browser

To protect against web malware, Dell KACE's new free Secure Browser virtualizes a browser and restricts direct and cross-site access to dangerous or inappropriate websites.

To help companies increase the safety of their Windows users' web browsing from malicious code, including restricting direct and cross-site access to dangerous or inappropriate websites, Dell KACE has introduced the Dell KACE Secure Browser, available immediately as a free download.

The Dell KACE Secure Browser consists of a browser -- currently, FireFox 3.6 -- plus plug-ins -- currently, Adobe Flash and Adobe Reader -- plus proprietary Dell KACE "Virtual Kontainer" application virtualization technology developed as part of the company's K1000, all packaged into one download that uses a standard Windows installer.

"The instance of the browser is virtualized," says Rob Meinhardt, President, Dell KACE. "A process may think it is writing to the system, but that doesn't happen."

Dell KACE Secure Browser aims to proactively contain threats before they become a problem. "The UI includes a 'click and undo' for whatever's happened," says Meinhardt.

The initial release is for 32-bit versions of Windows 7, Vista and XP supports the FireFox browser. "We chose FireFox as the best fit for the verticals that our products play in, and FireFox's Open-Source was a good fit for working with -- MSIE is a black box, FireFox lets us see inside." But, Meinhardt adds, "We do intend to support Microsoft Internet Explorer. We will probably start with Internet Explorer 6, since, as a virtual instance, you could run it on Vista or on Windows 7."

According to Meinhardt, downloads do get written to the system disk. "The download isn't contained, but if it were executed, you'd get the process start prompt," says Meinhardt, "And if run from the secure browser, activity would be contained in the secure space." (Hopefully, the user's system will have separate security that will automatically scan any such downloads before trying being accessed other than by Secure Browser...)

Users can update FireFox and the reader plug-ins, as well as install their own plug-ins and extensions, such as NoScript. "Users can update their own instance, and we will release new installers with the latest version of FireFox," says Meinhardt.

The Secure Browser can also allow/disallow programs being invoked by a web page. "If the browser wants to start up a process, like Windows Media Player, it will ask for permission," says Meinhardt. "You say tell it, Always, Now, or Never."

Currently, resetting the Secure Browser restores it to the original state, on an "all or none" basis -- including losing any bookmarks and other settings. "We intend to provide a way to install to your own state, and to exclude things from a reset," says Meinhardt.

The new tool is intended to work in concert with a Dell KACE Dell KACE K1000 Management Appliance on the user's network, which provides the company with network-wide capabilities. However, the Secure Browser does not require a K1000 to be used as a virtualized browsing environment.

Using a K1000, IT can remotely reset or kill a Secure Browser session, and create whitelisting and blacklisting for URLs. "If a permitted site is infected with a cross-site scripting exploit, whatever is on those non-whitelisted sites won't run," says Meinhardt.

According to Meinhardt, the K1000 is intended for use in companies with anywhere from 100 to 10,000 people. "Most of these users are in the mid-100's to mid-thousands of users," says Meinhardt. (MSRP for a K1000 starts at just under $9,000, for use with up to 100 users.)

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6335
Published: 2014-08-26
The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and ...

CVE-2014-0480
Published: 2014-08-26
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL ...

CVE-2014-0481
Published: 2014-08-26
The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a d...

CVE-2014-0482
Published: 2014-08-26
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors relate...

CVE-2014-0483
Published: 2014-08-26
The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.