Risk
7/19/2010
03:58 PM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Dell KACE Offers Free Secure Browser

To protect against web malware, Dell KACE's new free Secure Browser virtualizes a browser and restricts direct and cross-site access to dangerous or inappropriate websites.

To help companies increase the safety of their Windows users' web browsing from malicious code, including restricting direct and cross-site access to dangerous or inappropriate websites, Dell KACE has introduced the Dell KACE Secure Browser, available immediately as a free download.

The Dell KACE Secure Browser consists of a browser -- currently, FireFox 3.6 -- plus plug-ins -- currently, Adobe Flash and Adobe Reader -- plus proprietary Dell KACE "Virtual Kontainer" application virtualization technology developed as part of the company's K1000, all packaged into one download that uses a standard Windows installer.

"The instance of the browser is virtualized," says Rob Meinhardt, President, Dell KACE. "A process may think it is writing to the system, but that doesn't happen."

Dell KACE Secure Browser aims to proactively contain threats before they become a problem. "The UI includes a 'click and undo' for whatever's happened," says Meinhardt.

The initial release is for 32-bit versions of Windows 7, Vista and XP supports the FireFox browser. "We chose FireFox as the best fit for the verticals that our products play in, and FireFox's Open-Source was a good fit for working with -- MSIE is a black box, FireFox lets us see inside." But, Meinhardt adds, "We do intend to support Microsoft Internet Explorer. We will probably start with Internet Explorer 6, since, as a virtual instance, you could run it on Vista or on Windows 7."

According to Meinhardt, downloads do get written to the system disk. "The download isn't contained, but if it were executed, you'd get the process start prompt," says Meinhardt, "And if run from the secure browser, activity would be contained in the secure space." (Hopefully, the user's system will have separate security that will automatically scan any such downloads before trying being accessed other than by Secure Browser...)

Users can update FireFox and the reader plug-ins, as well as install their own plug-ins and extensions, such as NoScript. "Users can update their own instance, and we will release new installers with the latest version of FireFox," says Meinhardt.

The Secure Browser can also allow/disallow programs being invoked by a web page. "If the browser wants to start up a process, like Windows Media Player, it will ask for permission," says Meinhardt. "You say tell it, Always, Now, or Never."

Currently, resetting the Secure Browser restores it to the original state, on an "all or none" basis -- including losing any bookmarks and other settings. "We intend to provide a way to install to your own state, and to exclude things from a reset," says Meinhardt.

The new tool is intended to work in concert with a Dell KACE Dell KACE K1000 Management Appliance on the user's network, which provides the company with network-wide capabilities. However, the Secure Browser does not require a K1000 to be used as a virtualized browsing environment.

Using a K1000, IT can remotely reset or kill a Secure Browser session, and create whitelisting and blacklisting for URLs. "If a permitted site is infected with a cross-site scripting exploit, whatever is on those non-whitelisted sites won't run," says Meinhardt.

According to Meinhardt, the K1000 is intended for use in companies with anywhere from 100 to 10,000 people. "Most of these users are in the mid-100's to mid-thousands of users," says Meinhardt. (MSRP for a K1000 starts at just under $9,000, for use with up to 100 users.)

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-0188
Published: 2014-04-24
The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to...

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

Best of the Web