I'm watching all this movement around Metasploit project, the great number of different exploitation plugins, and thousands of exploit packs. Now, it is real truth, anyone could configure his own black-hole in the network. Moreover, any admin of any services in the network could attack me just for fun, while I'm reading an article on his page.
The same way Metasploit collects holes in different browsers, this Honey-Browser could collect holes to keep up an alert-system. I know FireFox and Chromium are Open-Source and would be the base for such Honey-Browser. Such an alert-system with all known exploits could detect any Http/Https/Whatelse activity against my browser as an Network-IDS.
Is there any thing what I'm talking about? For example, I know about the Mantra Security Framework. There are hundreds of attack-plugins or extensions, but no one to defend.
How does an exploit-pack work? It is a pack of exploits, and all exploits attack browser whether it is IE, FF, or Chrome, one by one, in sequence.
Once any of the exploits was detected by signature, the next part of session could be written in a kind of sandbox to protect the browser.
Such a plugin could be a nice shield for browser.