- of
Will Google Chrome OS Security Be Tough Enough?
by Brian Prince
Locking Down the OS
Given that the focus is on supporting cloud applications, this should come naturally. By turning Google Chrome OS into a "toaster" and running primarily—if not only—Web apps like Google Docs and Picasa, Google can substantially reduce the attack surface, noted Scott Crawford, an analyst with Enterprise Management Associates.
Dealing with Plug-ins and Add-ons
Google could take an Apple iPhone App Store approach to plug-ins or add-ons, Gartner analyst John Pescatore said, and have a certification/vulnerability assessment vetting process rather than just letting any piece of software plug in.
Encrypting Data
Google could build in native support for encryption of any data stored through the browser, whether locally or in the cloud, said Pescatore.
Playing in a Sandbox
Google could implement a feature like SELinux, which adds mandatory access control to Linux. This would allow the OS to sandbox malicious processes to prevent them from infecting the rest of the system, said Forrester analyst Andrew Jaquith.
Focus on Securing the Browser
If most of the way the user interacts with the system or applications is through the browser, Google needs to put a focus on ensuring that its Chrome browser is secure, said Jaquith.
IT Security & Network Security News & Reviews News & Reviews 
Chrome for Android Mobile Browser Proves Speedy, Slick
Motorola Droid 4 Offers Killer QWERTY Slider Keyboard
iPad 3: 10 Design Ideas Apple Should Borrow
10 Hot Tech Products Sure to Fire Up the Market in 2012
iOS, Android App Economy Fuel 500K U.S. Jobs: TechNet
Microsoft's Windows 8 Minimized Ribbon, Sensors Among New Feature[..]
See All Slideshows
There has been no shortage of speculation on the security of Google Chrome OS, even as Google remains quiet on exactly what its plans are. What is certain is that Google's focus on the cloud means the security requirements of Chrome OS will be significantly different from those of traditional operating systems.