Tuesday, September 05, 2006

"You really don't want to go there today..."

It's a bug zapper for web browsing. It's a cool idea. How it will be secured and made solid I am not sure, but this is good news and a positive step toward solving zero-day exploits and quite possibly many vulnerabilities on unpatched browsers in the future.

Microsoft Research is working on something they call BrowserShield, which will allow Internet Explorer to detect malicious code and rewrite it, then displaying the cleaned version of any static or dynamic page in the browser to the end user.

From eWeek:

Researchers at the Redmond, Wash., company have completed work on a prototype framework called BrowserShield that promises to allow IE to intercept and remove, on the fly, malicious code hidden on Web pages, instead showing users safe equivalents of those pages.

"We basically intercept the Web page, inject our logic and transform the page that is eventually rendered on the browser," Wang said. "We're inserting our layer of code at run-time to make the Web page safe for the end user."

More on eWeek.com

Tags: , , , , , , ,



Add/Read: Comments [1]
IT Security | Tech
Tuesday, September 05, 2006 10:29:11 AM (Pacific Daylight Time, UTC-07:00)
#  
Monday, September 11, 2006 4:34:37 AM (Pacific Daylight Time, UTC-07:00)
Am I the only one to think that this could be the death knell for Internet Exploder? IE can't handle properly written pages reliably, so how will it behave once that code has been interfered with? I know this is only supposed to interfere with malicious code, but that is a little hard to define technically, isn't it?
Name
E-mail
Home page

Comment (Some html is allowed: a@href@title, b, blockquote@cite, em, i, strike, strong, sub, super, u) where the @ means "attribute." For example, you can use <a href="" title=""> or <blockquote cite="Scott">.  

Live Comment Preview