Detailed exposure of Microsoft browser operating system Gazelle

Google is not the only vendor that attempts to create a browser-based security operating system. In February this year, Microsoft researchers leaked details about Gazelle. Gazelle is called "a secure browser built using multi-user operating system technology. Gazelle's kernel can isolate web code from different sources and manage all system resources ".

Like Chrome OS built on Linux, Gazelle is not a real operating system. It is built on a service layer at the operating system level to extend the security model of the browser. Principal consists of three parts: Protocol, domain name, and port. Different Combinations at the process level are isolated from each other. It is a key part of the entire system.

To prevent cross-site scripting attacks and other problems, the page can only render the content of the same source Principal) directly. The content of other sources will be rendered in a separate process based on the source, the content from different sources communicates with each other through the "browser kernel. The browser kernel is actually a restricted operating system process written in C # code. It coordinates the communication between processes. The browser kernel communicates with the process by sending an XML message in the named pipe named pipes. The rendering results of each process are combined by the browser kernel to form the final display result.

Gazelle has features for different browser problems, such as plug-ins, hybrid http/https, and recursive integrated attack recursive mashup attack ).