浏览器权能监控技术研究

浏览器权能监控技术研究 The Capability Monitoring Technique of the Browser 曹志炜 CAO Zhiwei 1 first-author 黄皓 HUANG Hao 1 南京大学 计算机科学与技术系/软件新技术国家重点实验室 南京大学 计算机科学与技术系/软件新技术国家重点实验室 Department of Computer Science and Technology/State Key Laboratory for Novel Software Technology, Nanjing University Department of Computer Science and Technology/State Key Laboratory for Novel Software Technology, Nanjing University 深入分析了Chrome,IE等浏览器在Windows下的进程、线程行为,提出了基于浏览器组件的权能监控方法.利用进程地址空间分析、线程栈分析、内核监控模块等技术手段,实现了更加细粒度的对浏览器权能监控,阻止了通过浏览器攻击主机的行为,提高了主机安全性能. We deeply analyze the major browsers’ process and thread behavior in Windows operating system,such as Chrome and IE,and then put forward a method of fine-grained capability control in the web browser components.Making use of the technical methods like process address space analysis,thread stack analysis,Kernel monitoring module,etc,we realize a fine-grained IE capability security monitoring module.The module can improve the host’s security performance by stopping the web browser attacking. 权能 浏览器组件 栈分析 内核监控模块 capability browser components stack analysis kernel monitoring module 10.14188/j.1671-8836.2013.02.014 TP393.08 国家高技术研究发展计划（863）项目（2011AA01A202）;国家自然科学基金（61021062）资助项目 2013-02-01 2021-04-01 2 59