Android gets new security sandboxing features

Google brings mobile site isolation to Chrome to protect against ‘Spectre-like’ attacks

Google has brought new security features to web users on Android, with the integration of browser sandboxing capabilities to its Chrome app.

As of Chrome version 77, Android users are now protected by 'Site Isolation'. This sandboxing feature involves isolating each browser tab from the other tabs in the session, and works by ensuring that web pages from different domains are run as separate processes, reducing the risk of side-channel attacks like the Spectre flaw.

Advertisement - Article continues below

This feature has been active on desktop instances of Chrome for some time, and the Android version is somewhat slimmed-down by comparison; in order to reduce performance overheads, Site Isolation is only enabled for password-protected sites, where users may be at risk of having their credentials stolen. This will help lessen the impact of the feature on smartphone speeds, particularly for cheaper devices with less RAM.

On desktop platforms, meanwhile, the existing sandboxing features have also been strengthened. In addition to side-channel attacks, Chrome can now defend against attacks involving a fully-compromised renderer process.

To coincide with this, the company is temporarily expanding its bug bounty programme to offer greater rewards for bugs involving Site Isolation, as well as including cross-site data disclosure attacks that involve compromised renderers.

Advertisement
Advertisement - Article continues below

Sandboxing is a common security measure, and refers to the process of isolating an environment from neighbouring systems in order to prevent the spread of harmful activity. Sandboxed environments are commonly used by researchers to analyse malware activity, as they allow the malware to be studied without risking the security of the rest of the network or operating system.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/software/video-conferencing/356448/google-meets-preventing-zoombombing-fueled-class-cancellations
video conferencing

Google Meet helps prevent Zoom-bombing-fueled class cancellations

14 Jul 2020
Visit/business/policy-legislation/356416/dems-ask-facebook-google-and-twitter-for-coronavirus
Policy & legislation

Dems ask Facebook, Google and Twitter for coronavirus disinformation reports

10 Jul 2020
Visit/business/policy-legislation/356413/california-launching-google-antitrust-probe
Policy & legislation

California launching Google antitrust probe

10 Jul 2020
Visit/mobile/google-android/356398/google-maps-is-testing-traffic-lights
Google Android

Google Maps is testing traffic lights

9 Jul 2020

Most Popular

Visit/business-strategy/careers-training/356422/ibm-job-ad-calls-for-12-year-experience-with-6-year-old
Careers & training

IBM job ad calls for 12-years of experience with six-year-old Kubernetes

13 Jul 2020
Visit/business/business-operations/356395/nvidia-overtakes-intel-as-most-valuable-us-chipmaker
Business operations

Nvidia overtakes Intel as most valuable US chipmaker

9 Jul 2020
Visit/security/cyber-attacks/356417/trump-confirms-cyber-attacks-on-russia-election-trolls
cyber attacks

Trump confirms US cyber attack on Russia election trolls

13 Jul 2020