Does Windows 7 provide Browser Isolation

Question

Now that Windows 7 has RTM'd, I would like to know if I can run IE 8 isolated to protect the machine from getting a virus from the internet.

Answer 1

I think this is case since Windows Vista & IE7

According to Wikipedia

On Windows Vista, Internet Explorer operates in a special "Protected Mode", that runs the browser in a security sandbox that has no access to the rest of the operating system or file system, except the Temporary Internet Files folder. When running in Protected Mode, IE7 is a low integrity process; it cannot gain write access to files and registry keys outside of a user profile's folder. This feature aims to mitigate problems whereby newly-discovered flaws in the browser (or in Add-Ons hosted inside it) allowed hackers to subversively install software on the user's computer (typically spyware).

Answer 2

You first need to understand how a virus attacks your machine. You can isolate any browser including IE8, and you can configure any browser with unsafe options and add-ons that will allow an infection.

Finally, there are no guarantees - only precautions, the only secure system is the one that you switch off the power to.

UPDATE - Windows 7 does have a built-in Virtual Machine capability. Its called XP mode and allows for the hosting of XP for legacy application compatability. I dont think VM's keep you safer unless the VM has no access to other machines on the network without being challenged for user name and passwords first. Even then, an infection could wait undetected until such time as you invariably reach out and touch another share.

You would need to ensure that access to the VM was from more secure zone to the less secure VM and not the other way around. Also, setup the VM to be very aggressive in anti-virus setup. I recommend McAfree Enterprise, setup the usual real-time scanning plus access protection. Also, download Chrome or Safari and use these, their integration to Windows is far less extensive than IE's and so they present a smaller attack footprint, albeit with less functionality. I recommend Safari, I prefer the industrial interface over Chromes Fisher and Price look and feel, both are based on WebKit.