【作者】 赵长林；

【导师】 杨义先；

【作者基本信息】 北京邮电大学 ， 信息安全， 2012， 硕士

【摘要】 进入21世纪以来,随着Google、Facebook、百度等互联网公司的迅猛发展,互联网和人们的生活越来越分不开,如何保证Web的安全已经成为信息科学发展的新挑战,Web安全也成为近几年飞速发展的技术,因为Web安全不仅影响人们的隐私安全、金融安全,甚至还影响了政府和国防的安全。现有的许多Web安全技术主要采用传统的主动防御技术,这些技术都建立在对已知的漏洞和攻击的防御之上,而对于未来新的安全问题却束手无策。随着Web技术的迅速发展,网络上的信息量呈爆炸式地增长,新的安全问题和恶意攻击也呈指数级增加,传统的主动防御技术根本无法应对。面对这一情况,文中设计出了面向浏览器的沙盒系统,使用沙盒技术来保证Web的安全。沙盒技术与主动防御技术原理截然不同[1]。主动防御是发现程序有可疑行为时立即拦截并终止运行；文中设计的面向浏览器的沙盒系统则是让疑似病毒程序的可疑行为在浏览器虚拟的“沙盒”里充分运行,“沙盒”会记下它的每一个动作,当疑似病毒充分暴露了其病毒属性后,“沙盒”就会执行“回滚”机制,将病毒的痕迹和动作抹去,恢复系统到正常状态,从而保证Web安全[2]。文中首先是从安全领域和软件开发领域对现有的沙盒应用进行了分析,并学习这些沙盒应用中优秀的设计原理,为设计出面向浏览器的沙盒系统做了理论准备和知识准备。然后根据前面分析掌握的知识,结合到浏览器这一特殊运用场景,从算法理论和Windows操作系统编程两个方面对面向浏览器的沙盒系统的可行性和设计原理进行了分析,并重点分析了进程间通信、令牌、作业对象、可替代桌面、完整性级别和策略这几个方面。随后文章根据前面的分析,设计出了面向浏览器的沙盒系统。整个面向浏览器的沙盒系统由目标进程和代理进程通信模块、令牌模块、作业对象模块、可替代桌面模块、完整性级别模块和策略配置模块组成,文中给出了每一个模块的工作原理、流程图或伪代码设计。最后,文章对前面的分析与设计工作进行了充分的验证工作,采用由分到合的验证办法,先验证各个小模块的设计的正确性,最后再验证整个面向浏览器的沙盒系统的设计的正确性。通过这些验证,进一步增强了论文的正确性和说服力。更多还原

【Abstract】 Since the beginning of 21st century, as the rapid development of Internet companies such as as Google, Facebook, Baidu and so on, the Internet and people’s lives are increasingly inseparable, how to ensure that Web security has become the new challenges in the development of information science, Web security has also become a rapidly developing technology in recent years, because the Web security not only affect people’s privacy, financial security, and even affect the Government’s security and defense.Many existing Web security technology is mainly made of traditional active defense technology, these technologies are based on known vulnerabilities and attacks and helpless for new security issues for the future. With the rapid development of Web technologies on the Web to grow the amount of explosive, new security and malicious attacks are exponential increases, traditional active defense technology simply cannot cope with. Faced with this situation,in this paper put forward browser-oriented sandbox system, using the sandbox technology to guarantee the security of Web.Sandbox technology distinct from the active defense technology principle. Active defense is to discover a suspicious program behavior blocks and terminate immediately when run. sandbox technology let suspected virus program of suspicious behavior in browser virtual of " sanbox " in full run, "sandbox " will note it of each a action; when suspected virus full exposure its virus property, "sandbox" will implementation "back roll" mechanism,wipe out traces and action of virus, regenerate system to normal state, and guarantee Web security.First in this paper analysis on existing sandbox applications and learn about these principles of good design in the application sandbox from the area of security and software development in the field, to design a browser-oriented sandbox system did a theory-oriented preparation and knowledge. And then follow the preceding analysis of knowledge, combined with the application to the browser, a special scene, from the theory of algorithms and system calls two aspects of the Windows operating system to analyze the browser-oriented sandbox system, and focused analysis of interprocess communication, tokens, job objects, alternative desktop, integrity levels, and policy aspects.In the end, this paper based on the preceding analysis, designed for browser sandbox system. Entire browser sandbox system by goal-oriented processes and communications modules, the agent process token and job object modules, alternative desktop module, the module integrity levels, and policy configuration modules, of each module are given in the text flow chart design or code.更多还原