Browser-based Process Isolation

[mdoherty-axiom]

Many modern applications use web browsers as runtime environments. For security, Chrome and Firefox have implemented extensive process isolation techniques, including cross-origin blocking, site isolation, cookie and storage isolation, and sandboxing.

While Kernel-based Process Isolation is used to enforce some of these protections, most are implemented within the browser itself. Browser-based Process Isolation has a unique set of vulnerabilities and attacks that cannot be modeled with Kernel-based Process Isolation or Hardware-based Process Isolation.