Google's Native Client (NaCl) is a technology designed to allow untrusted code to run securely in a Web browser [332]. The primary advantage is speed, but there are many security issues, some of which...

Google's Native Client (NaCl) is a technology designed to allow untrusted code to run securely in a Web browser [332]. The primary advantage is speed, but there are many security issues, some of which are reminiscent of issues faced by NGSCB.

a. Outline the NaCl security architecture.

b. NaCl uses a "trampoline" to transfer control from untrusted code to trusted code. Explain how this works.

c. Compare and contrast the security approach used in NaCl with each of the following: Xax, CFI, Active X.