The single biggest way that the bad people attack enterprise IT is via the internet browser and specifically browser-borne malware. It’s not a huge surprise, browsers are the lowest common denominator and an alluring place to focus attention – general users are, after all, more likely to visit risky sites than more savvy users, making widespread browser attacks a logical place to start. One company looking to avert this risk is Spikes Security, a company formed in 2012 by the former SpaceX and PayPal CIO Branden Spikes. Spikes’ AirGap solution is available for Windows, Mac OSX and Linux and protects browsers from attack. Well, to be honest, it removed the endpoint browser and replaces it with a protected environment.
The Spikes approach is to prevent browser‐borne malware by removing the browser from endpoint devices and deploying it on a specialized Linux Appliance outside the firewall. The Appliance creates isolated Linux Virtual Machines for each user web session and presents virtualized web content to users through a lightweight viewer installed on the endpoint. It can be thought of as analogous toBromium, another high profile security vendor. However Bromium’s approach is different, it creates an isolated Virtual Machine on each endpoint device. Bromium is distributed security while Spikes is centralized.
Spikes is today announcing an $11 million Series A funding round. Lead investors in the round include Lakewood & Company, LLC, Benhamou Global Ventures (BGV), and Javelin Venture Partners.
Security through isolation is a logical approach – there are benefits and drawbacks to both the distributed and centralized approaches that these two companies make, but notwithstanding the technical minutiae, it’s an interesting concept – the ability to discount malware and be unaffected by it due to the browser being a completely encapsulated environment is an interesting one – it will be interesting to see how enterprises feel about this approach.
Original article can be found here.