Run-time Monitoring and Formal Analysis of Information Flows in Chromium
Run-time Monitoring and Formal Analysis of Information Flows in Chromium
复制标题
DOI：
10.14722/ndss.2015.23295
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Lujo Bauer;Shaoying Cai;Limin Jia;Timothy Passaro;Michael Stroucken;Yuan Tian
中科院分区：
文献类型：
--
作者：
Lujo Bauer;Shaoying Cai;Limin Jia;Timothy Passaro;Michael Stroucken;Yuan Tian
网络浏览器是各种在线服务的关键推动者，从购物和电子邮件到银行和健康服务。由于这些服务经常涉及处理敏感数据，因此已经实施或提出了广泛的 Web 浏览器安全策略和机制，以减轻恶意代码和站点造成的危险。本文介绍了一种在 Chromium Web 浏览器上指定和实施灵活信息流策略的方法。我们的方法专注于现有浏览器并涵盖广泛的浏览器功能，从页面和脚本到 DOM 元素、事件、持久状态和扩展，作为对 JavaScript 信息流实施的补充。在我们的方法中，这是一种粗粒度、轻量级的污点跟踪实现，浏览器中的实体用指定策略和跟踪信息流的信息流标签进行注释。我们为我们的方法开发了一个详细的正式模型，并为此证明了不干涉性。我们还开发了一个基于 Chromium 的相应原型系统。我们证明并通过实验证实，该系统可以执行许多现有的浏览器策略，以及标准 Web 浏览器中可执行的策略之外的实际有用的策略。
Web browsers are a key enabler of a wide range of online services, from shopping and email to banking and health services. Because these services frequently involve handling sensitive data, a wide range of web browser security policies and mechanisms has been implemented or proposed to mitigate the dangers posed by malicious code and sites. This paper describes an approach for specifying and enforcing flexible information-flow policies on the Chromium web browser. Complementing efforts that focus on information-flow enforcement on JavaScript, our approach focuses on an existing browser and encompasses a broad range of browser features, from pages and scripts to DOM elements, events, persistent state, and extensions. In our approach, which is a coarse-grained, light-weight implementation of taint tracking, entities in the browser are annotated with information-flow labels that specify policy and track information flows. We develop a detailed formal model of our approach, for which we prove noninterference. We also develop a corresponding prototype system built on top of Chromium. We demonstrate, and experimentally confirm, that the system can enforce many existing browser policies, as well as practically useful policies beyond those enforceable in standard web browsers.