Leadership Instincts: IIT Hyderabad -ICAT MoU for Collaboration in Autonomous Navigation  |  Education Information: IIT Hyderabad Retains Top 10 Rank in QS Rankings in India  |  Cover Story: Elimination Round or Aptitude Test- How to Align CUET with NEP 2020 Goals  |  Life Inspirations: Master of a Dog House  |  Education Information: Climate Predictions: Is it all a Piffle!  |  Leadership Instincts: Raj Mashruwala Establishes CfHE Vagbhata Chair in Medical Devices at IITH   |  Parent Interventions: 10 Tricks to Help You Prepare for This Year's IB Chemistry Test  |  National Edu News: TiHAN supports a Chair for Prof Srikanth Saripalli at IIT Hyderabad  |  Teacher Insights: How To Build Competitive Mindset in Children Without Stressing Them  |  Parent Interventions: What Books Children Must Read this Summer Vacation   |  Policy Indications: CUET Mandatory for Central Universities  |  Teacher Insights: Classroom Dialogue for a Better World  |  Rajagiri Round Table: Is Time Ripe for Entrepreneurial Universities in India?  |  Life Inspirations: How to Overcome Fear of Public Speaking  |  Parent Interventions: Wide Ranging Problems of Preterm Infants  |  
February 26, 2020 Wednesday 03:28:07 PM IST

Researchers develop framework that improves Firefox security

Technology Inceptions

Researchers from the University of California San Diego, University of Texas at Austin, Stanford University and Mozilla have developed a new framework to improve web browser security. The framework, called RLBox, has been integrated into Firefox to complement Firefox's other security-hardening efforts.

RLBox increases browser security by separating third-party libraries that are vulnerable to attacks from the rest of the browser to contain potential damage--a practice called sandboxing. The study will be published in the proceedings of the USENIX Security Symposium.

Browsers, like Firefox, rely on third-party libraries to support media decoding (e.g., rendering images or playing audio files) among many other functionalities. These libraries are often written in low-level programming languages, like C, and highly optimized for performance.

RLBox allows browsers to continue to use off-the-shelf, highly tuned libraries without worrying about the security impact of these libraries. A key piece of RLBox is the underlying sandboxing mechanism, which keeps a buggy library from interfering with the rest of the browser. The study investigates various sandboxing techniques with different trade-offs. But the team ultimately partnered with the engineering team at San Francisco-based Fastly to adopt a sandboxing technique based on WebAssembly, a new intermediate language designed with sandboxing in mind. The team believes that WebAssembly will be a key part of future secure browsers and secure systems more broadly. The WebAssembly sandboxing effort is detailed in a recent Mozilla Hacks blog post. RLBox has been integrated into Mozilla's Firefox and will be shipping to Linux users in Firefox 74 and Mac users in Firefox 75, with plans to implement in other platforms.


In the study, the team isolated half a dozen libraries using RLBox. To start, Firefox will ship with their sandboxed Graphite font shaping library. Mozilla plans to apply the sandboxing more broadly in the future, ultimately making millions of users' browsers more secure.



(Content Courtesy: https://www.eurekalert.org/pub_releases/2020-02/uoc--rdf022420.php)


Comments