The Design And Research Of Sandbox Security Mechanism On The Android Platform

With the rapid development of the mobile Internet technology and an increase in the number of intelligent terminal users, the proportion of using a mobile terminal access the Internet is rising.Mobile browser as an important entrance into the mobile Internet has a great commercial value.When an application accesses the web,if web page contains JavaScript code,web page can call the local information,which will cause security holes.In many intelligent terminal operating systems, Android operating system as an operating system has a higher market share.So the Android operating system is studied.The browser as the breakthrough point of the research,from the application layer of the browser application,to Web View framework layer,and to the JNI,finally to its core library layser of the whole process of data transmission.Thorough studying and researching the vulnerabilities and attacks on the WebView,the experiment simulates attack modle.Then studying and doing the research of the working principle of Webkit.According to the study of the vulnerabilities and attacks of the WebView,finding JavaScript which can call the local resources that can bring a great security hidden problems.In order to learn protect methods,learning WebCore and JavaScriptCore of parsing process and JavaScript code of parsing process.On the basis of above working principles and develop design,the design concept of which is learning sandbox security mechanism and the design way of virtual browser,then using the method to design the web page content security sandbox mechanism,which can make early detection before dealing with JavaScript code.Using JNI interface calling the underly dynamic library to test the web code and getting the application layer API interface to process data.Finally testing the design of browser sandbox securtity mechanism.