HP computers and Bromium have co-produced HP SureClick which is the first laptop with Bromium’s virtualization-based security built-in that is uber-secure, built-in and hands-off for end users. But only Chromium and Internet Explorer are supported in this product which acts as a defence against malware.
Sure-Click means that each tab launched in either Chrome or Internet Explorer will launch as its own, fully contained micro-VM. This micro-VM doesn’t carry with it a lot of overhead, relying upon the existing filesystem and memory instead of having to create new, individual virtual machines. Instead, it creates an isolation bubble around the code that is executing, presenting to it a full instance of Windows without actually giving it access to anything that can cause harm. If a malicious site is visited, all users have to do is close the tab, destroying the virtual machine forever and the malware along with it. The technology is designed to prevent the malware escaping a micro-VM.
The idea is that Sure-Click will trigger without the user’s intervention. Every time a user visits a website, Sure-Click will engage, providing a small virtualization layer between the browser and the rest of the system which in turn will protect the Elite 360 and its user data.
The hardware-based, isolated browsing session will initially be available on HP’s EliteBook x360 1030 G2 on general availability in Spring where it will make its debut as a web download. Other Elite PCs will add support for Sure-Click during the second half of the year. The tech was launched at RSA Conference.
More and more browsers, such as Google Chrome, are implementing sandboxing to prevent any malware from escaping the browser.
The most important element of this is that Bromium’s micro visor-based security model is continuing its move towards mainstream adoption.
HP partnered with Bromium, a maker of “virtual hardware,” to create Sure-Click. Bromium has said that it believes virtualization can be an answer to securing the PC but that creating an actual virtual machine can be too unwieldy.