The Multi-Principal OS Construction of the Gazelle Web Browser

DMCA

The Multi-Principal OS Construction of the Gazelle Web Browser

Cached

Download Links

by Helen J. Wang , Chris Grier , Er Moshchuk , Samuel T. King , Piali Choudhury , Herman Venter

Citations:

85 - 7 self

BibTeX

@MISC{Wang_themulti-principal,
    author = {Helen J. Wang and Chris Grier and Er Moshchuk and Samuel T. King and Piali Choudhury and Herman Venter},
    title = {The Multi-Principal OS Construction of the Gazelle Web Browser},
    year = {}
}

OpenURL

Abstract

Original web browsers were applications designed to view static web content. As web sites evolved into dynamic web applications that compose content from multiple web sites, browsers have become multi-principal operating environments with resources shared among mutually distrusting web site principals. Nevertheless, no existing browsers, including new architectures like IE 8, Google Chrome, and OP, have a multi-principal operating system construction that gives a browser-based OS the exclusive control to manage the protection of all system resources among web site principals. In this paper, we introduce Gazelle, a secure web browser constructed as a multi-principal OS. Gazelle’s browser kernel is an operating system that exclusively manages resource protection and sharing across web site principals. This construction exposes intricate design issues that no previous work has identified, such as crossprotection-domain display and events protection. We elaborate on these issues and provide comprehensive solutions. Our prototype implementation and evaluation experience indicates that it is realistic to turn an existing browser into a multi-principal OS that yields significantly stronger security and robustness with acceptable performance. 1

Keyphrases

gazelle web browser web site principal multi-principal o construction multi-principal o intricate design issue acceptable performance browser-based o multi-principal operating environment multi-principal operating system construction google chrome resource protection multiple web site new architecture crossprotection-domain display prototype implementation previous work system resource original web browser static web content comprehensive solution event protection dynamic web application exclusive control operating system secure web evaluation experience

DMCA