Research And Solutions On Browser Security Problems

With the rapid development of Internet, the browser has become the most important Internet application tool. People use the browser to connect to the internet, view news and information, enjoy the video and audio, establish interpersonal networks, shop and pay, etc. Internet has been integrated into all aspects of people's lives, and the browser is the bridge of the connection.While brings many benefits to the user, on the other hand, the Internet security issues become increasingly prominent. Including: phishing, cross-site attacks, adware, Trojan (including the theft of private information, banking passwords, game account, personal privacy, etc.), malicious code (such as the weakness of the browser itself or the Plugin buffer overflow attack) and so on. These problems involves personal information, even bank account numbers, passwords, misleading user consumption, have caused serious economic losses. Therefore, the browser's security has become a serious problem.This paper aims to present the domestic popular browser based on IE6 kernel, to provide a viable security browser. It can removing phishing sites, Web Trojans, viruses and file download due to network security problems, such as back doors impacts on users. It could provide a safe and reliable Internet browser environment for user. The main contribution and works are as follows:1 Using the isolation characteristics of the process in Windows operating system, create a separate process for each IE kernel space. The works such as page views, HTML, CSS parsing,and interface Render have been complete in it. Using process address space independent and life-cycle independent,protect the IE individual, and avoid one IE kernel crashes and poisoning to affect others.2 Using Sandbox technology build core competence controlled process, intercept access to the system call. Some key such as DLL loaded, a local disk file access are likely to be made use of viral malicious code have been controlled. Ensure authentication DLL files loaded and limited local disk access .3 Using SafeBrowsing technology prevent from security risk such as phishing website, Trojan site, the download contains a virus back door features. Prompting the user to access risk, download risk upgrade the security level of browser.Through using of these technologies and collaboration, at present, the majority of IE6-based browser have obtained significantly improved safety performance, and at the same time, the user experience not been affected. It can effectively prevent from phishing sites, malicious DLL loaded, malicious code embedded in Web site an avoid adverse impact on users and the user's losses.