Security Basics mailing list archives

Secure Internet Browsing


From: "Rodrigo Blanco" <rodrigo.blanco.r () gmail com>
Date: Wed, 26 Dec 2007 10:08:04 -0600

Hello list,

these days I have been taking a look at the solution for secure
Internet browsing based on VMWare player + Browser Appliance (Ubuntu
virtual image running firefox). I especially like three things of it:
apprently more resistant to virus / spyware / malware, browser does
not run with admin / root privileges and the auto-revert feature, that
will automatically revert the machine to its original state, no matter
what visited sites have added (cookies, malware...) to the client.

I had already heard of other solutions, more suitable for corporate
environments, such as a Citrix-based IE browser, on a machine that is
re-built everyday (maybe through some virtualization solution) so that
any infection is automatically eliminated daily.

While these solutions will help prevent against spyware, malware and
viruses, I still have the feeling they still would be vulnerable to
keyloggers or resident programs able to capture mouse / GUI events.
I.e. if the machine running the VMPlayer has a keylogger running, it
would still be able to capture keystrokes sent to the Browser
Appliance virtual machine.

What is your opinion? Do you know of solutions that will provide a
"reasonably complete" security for browsing? Are they suitable for
both home and corporate environments?

Thanks for any comments and kind regards,
Rodrigo.


Current thread: