Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So my questions are:

1) Is the sandbox architecture secure?

2) How can I test that a pokki application (or any other) has met all the requirements of this architecture (certified)?

share|improve this question
    
Secure from whose point of view? From a user's point of view? –  user606723 Aug 24 '11 at 17:05
    
@user606723 of course –  garik Aug 24 '11 at 17:06
    
You may want to check out this presentation that gives you a fairly detailed overview of the google chrome sandbox and some potential security concerns. Hope you find it interesting. matasano.com/research/Escaping_The_Sandbox-2010.pdf –  Eric Ness Aug 25 '11 at 4:56
    
@Rory Alsop thank you for edit –  garik Aug 25 '11 at 15:31
    
Secure for what, from whom? –  this.josh Aug 26 '11 at 1:56

1 Answer 1

up vote 3 down vote accepted

Pokki is secure the same way that chrome is.

  1. A Pokki process is severely limited and thus no malicious software can infect your system from within a Pokki without breaking several security layers simultaneously (very unlikely).
  2. There are no tests because the application itself doesn't have anything to do with the sandbox architecture except it runs ontop of it. I fit's a Pokku app then it's secure (in this way)

These security measures only stop malicious software from infecting your system.
It does not secure against anything else.

If you could be more specific about what you're trying to prevent, I could explain further.

share|improve this answer
    
Can you please provide some sort of reference or document? I've never heard of Pokki and can't find anything on their site. What do they use to build their sandbox? What are the several layers if they do happen to use anything more than integrity levels? –  Steve DL May 26 at 18:44

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.