Browser security: Lessons from Google Chrome

Communications of the ACM

Volumn 52, Issue 8, 2009, Pages 45-49

  Reis, Charles ^a   Barth, Adam ^b   Pizano, Carlos ^a  

^a GOOGLE INC   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BROWSER SECURITY; KEY PROBLEMS;

INTERNET;

EID: 69149107997     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1536616.1536634     Document Type: Article

References (14)

1. Barth, A., Jackson, C., Reis, C., and Google Chrome Team. The Security Architecture of the Chromium Browser (2008); http://crypto.stanford.edu/websec/ chromium/chromium-security-architecture.pdf.
2. Douceur, J.R., Elson, J., Howell, J., and Lorch, J.R. Leveraging legacy code to deploy desktop applications on the Web. In Proceedings of Operating Systems Design and Implementation (2008).
3. Duebendorfer, T., Frei, S. Why silent updates boost security. ETH Tech Report TIK 302 (2009); http://www.techzoom.net/silent-updates.
4. Franco, R. Clarifying low-rights IE. IEBlog (June 2005); http://blogs.msdn.com/ie/archive/2005/06/09/427410. aspx.
5. Frei, S., Duebendorfer, T., and Plattner, B. Firefox (in) security update dynamics exposed. ACM SIGCOMM Computer Communication Review 39, 1 (2009).
6. Google, Omaha: Software installer and auto-updater for Windows. Google Code; http://code.google.eom/p/omaha/.
7. Grier, C., Tang, S., and King, S.T. Secure Web browsing with the OP Web browser. In Proceedings of IEEE Symposium on Security and Privacy (2008).
8. Howard, M., Thomlinson, M. Windows Vista ISV Security (2007); http://msdn.microsoft.com/en-us/library/bb430720.aspx.
9. Mayer, M. "This site may harm your computer" on every search result. The Official Google Blog (Jan. 2009); http://googleblog.blogspot.com/ 2009/01/thissite-may-harm-your-computer-on.html.
10. Provos, N., McNamee, D., Mavrommatis, P., Wang, K., and Modadugu, N. The ghost in the browser: Analysis of Web-based malware. In Proceedings of the First Usenix Workshop on Hot Topics in Botnets (April 2007).
11. Reis, C. and Gribble, S.D. Isolating Web programs in modern browser architectures. In Proceedings of European Conference on Computer Systems (April 2009).
12. Sandbox. Chromium Developer Documentation (2008); http://dev.chromium. org/developers/designdocuments/sandbox.
13. Wang, H.J., Grier, C., Moshchuk, A., King, S.T., Choudhury, P., and Venter, H. The Multi-Principal OS Construction of the Gazelle Web Browser. Microsoft Research Technical Report (MSR-TR-2009-16) 2009; http://research. microsoft.com/pubs/79655/gazelle.pdf.
14. Yee, B., Sehr, D., Dardyk, G., Chen, J. B., Muth, R., Ormandy, T., Okasaka, S., Narul, N., and Fullagar, N. Native Client: A sandbox for portable, untrusted x86 native code. In Proceedings of IEEE Symposium on Security and Privacy (2009)