Android gets new security sandboxing features

Google brings mobile site isolation to Chrome to protect against ‘Spectre-like’ attacks

Google has brought new security features to web users on Android, with the integration of browser sandboxing capabilities to its Chrome app.

As of Chrome version 77, Android users are now protected by 'Site Isolation'. This sandboxing feature involves isolating each browser tab from the other tabs in the session, and works by ensuring that web pages from different domains are run as separate processes, reducing the risk of side-channel attacks like the Spectre flaw.

This feature has been active on desktop instances of Chrome for some time, and the Android version is somewhat slimmed-down by comparison; in order to reduce performance overheads, Site Isolation is only enabled for password-protected sites, where users may be at risk of having their credentials stolen. This will help lessen the impact of the feature on smartphone speeds, particularly for cheaper devices with less RAM.

On desktop platforms, meanwhile, the existing sandboxing features have also been strengthened. In addition to side-channel attacks, Chrome can now defend against attacks involving a fully-compromised renderer process.

To coincide with this, the company is temporarily expanding its bug bounty programme to offer greater rewards for bugs involving Site Isolation, as well as including cross-site data disclosure attacks that involve compromised renderers.

Sandboxing is a common security measure, and refers to the process of isolating an environment from neighbouring systems in order to prevent the spread of harmful activity. Sandboxed environments are commonly used by researchers to analyse malware activity, as they allow the malware to be studied without risking the security of the rest of the network or operating system.

Featured Resources

Preparing for AI-enabled cyber attacks

MIT technology review insights

Download now

Cloud storage performance analysis

Storage performance and value of the IONOS cloud Compute Engine

Download now

The Forrester Wave: Top security analytics platforms

The 11 providers that matter most and how they stack up

Download now

Harness data to reinvent your organisation

Build a data strategy for the next wave of cloud innovation

Download now

Recommended

Google approves majority of staff requests to work remotely or relocate
flexible working

Google approves majority of staff requests to work remotely or relocate

5 Aug 2021
Apple employee placed on indefinite leave after complaining about sexism
Careers & training

Apple employee placed on indefinite leave after complaining about sexism

5 Aug 2021
Google breaks from Qualcomm with in-house Pixel 6 chip
system on chip (SoC)

Google breaks from Qualcomm with in-house Pixel 6 chip

3 Aug 2021
Google launches Meet Progressive Web App
video conferencing

Google launches Meet Progressive Web App

2 Aug 2021

Most Popular

UK gov considers blocking Nvidia's takeover of Arm
Acquisition

UK gov considers blocking Nvidia's takeover of Arm

4 Aug 2021
RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
Preparing for AI-enabled cyber attacks
Whitepaper

Preparing for AI-enabled cyber attacks

22 Jul 2021