Secure web browsing with the OP web browser, Chris Grier, Shuo Tang, and Samuel T. King, Department of Computer Science, University of Illinois at Urbana-Champaign
providing hackers with easy access to computer systems
via browser-based attacks. Browser security efforts that retrofit
existing browsers have had limited success because the design of
modern browsers is fundamentally flawed. To enable more secure
web browsing, we design and implement a new browser, called
the OP web browser, that attempts to improve the state-of-the-art
in browser security. Our overall design approach is to combine
operating system design principles with formal methods to design
a more secure web browser by drawing on the expertise of both
communities. Our overall design philosophy is to partition the
browser into smaller subsystems and make all communication
between subsystems simple and explicit. At the core of our design
is a small browser kernel that manages the browser subsystems
and interposes on all communications between them to enforce
our new browser security features.”