Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cybersecurity
    • IT Management

    Google, Adobe Bolster Flash Player Security with Sandboxing Technology Plans

    By
    Brian Prince
    -
    December 1, 2010
    Share
    Facebook
    Twitter
    Linkedin

      Just last month, Adobe Systems released the latest version of Reader with a new sandboxing approach to improve security. Today, the company announced it has partnered with Google to extend that protection to Flash Player users running the Google Chrome browser.

      Google has long trumpeted sandboxing as an extra protective layer against attacks, and has added it to both the Chrome browser and the upcoming Chrome OS. Adobe and Google have been working together since March to allow Flash Player to take advantage of the technology in Chrome, and are now rolling the capability out in Chrome 9.0.587.0 for users on Windows XP, Vista and Windows 7.

      Chrome 9.0.587.0 is currently in Google’s dev channel.

      “This initial Flash Player sandbox is an important milestone in making Chrome even safer,” Google software engineers Justin Schuh and Carlos Pizano wrote in a joint blog post. “In particular, users of Windows XP will see a major security benefit, as Chrome is currently the only browser on the XP platform that runs Flash Player in a sandbox. This first iteration of Chrome’s Flash Player sandbox for all Windows platforms uses a modified version of Chrome’s existing sandbox technology that protects certain sensitive resources from being accessed by malicious code, while allowing applications to use less sensitive ones.

      “This implementation is a significant first step in further reducing the potential attack surface of the browser and protecting users against common malware,” they wrote.

      A spokesperson for Adobe explained that the sandbox-known as “Protected Mode”-limits the severity of exploits and helps prevent attackers from installing “persistent malware in the user’s account” because writing to the file system is prohibited.

      “Exploits also cannot read and steal arbitrary files from the user’s machine,” the spokesperson said. “In other words, if a user visits a Website hosting malicious Flash content, any exploit code designed to write to the user’s system will be blocked by the sandbox-the attacker will not be able to install malicious code on the user’s system.”

      The technology is expected to be generally available to end users between early and mid-2011, the spokesperson added. Though the Protected Mode feature currently only supports Chrome users on Windows, there are plans to make it available for all operating systems, according to Peleus Uhley, senior security strategist for the Adobe Secure Software Engineering Team.

      Flash Player already supports Protected Mode in Internet Explorer on Windows 7 and Vista, but that represents only a small subset of Windows users, Uhley blogged.

      “Over the next few months, we will be testing and receiving feedback on this project,” he wrote. “Since this is a distinctly different sandboxing code base from Internet Explorer, we are essentially starting from scratch. Therefore, we still have a few bugs that we are working through. We hope that we can use this experience as a platform for discussing sandbox approaches with the other browser vendors.”

      Brian Prince
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×