The Research And Implementation Of Technologies For Network Security Isolation Based On Remote Broswer

Today,web browsers have become an important tool for people to get information,also are the vehicle for many web applications such as information consultation,e-commerce,work and entertainment,etc.However,web browsers throw security threats while facilitating people's work and life.There are two major security threats.Firstly,as a type of application,browsers allow hackers to spread malicious programs by their own security vulnerabilities.Secondly,the browser domain-isolation bugs will cause some security vulnerabilities,which will leak the privacy of network users,and even cause serious economic losses.Browsers'isolation mechanism is critical to users' safety and privacy on the web.But it is very difficult.Historical data shows that,the isolation strategy based on the C/S architecture that has a relatively large performance overhead.Thus,it is necessary to design a new isolation strategy to reduce the performance overhead,also ensure the security of browser.This topic focuses on the security problems faced by browsers.By establishing a remote browser system based on virtual redirection technology,we can deal with two major security threats faced by browsers.The system features a lightweight virtual machine manager system that can be customized with the B/S architecture and WebSocket full-duplex communication protocol.Moreover,the lightweight virtual machine manager system is extended to add copy and paste function and file management function.The remote browser architecture is the new layer of trusted software that the browser executes.The system runs each web application on its remote server,providing a strong isolation between the web application and the user's local resources.The experimental results indicate that the remote browser system implements the basic functions,such as managing virtual machine,logging in virtual machine,remote interface rendering,web browsing and real-time input.Extensions are also been implemented,including copy and paste function,file management function.Our security evaluation shows that remote browsers protect users' local computer resources from theft and virus5 infections,and can protect against common domain isolation vulnerabilities.In addition,our measurements of the network performance and CPU consumption demonstrate that users need not sacrifice performance for the benefits of stronger isolation and safety.