瀏覽器擴(kuò)展行為自動測試系統(tǒng)的設(shè)計與實現(xiàn).pdf

1、天津大學(xué)碩士學(xué)位論文瀏覽器擴(kuò)展行為自動測試系統(tǒng)的設(shè)計與實現(xiàn)姓名：王建剛申請學(xué)位級別：碩士專業(yè)：計算機(jī)科學(xué)與技術(shù)指導(dǎo)教師：李曉紅201111ABSTRACTBrowserextensionisakindofmechanismforaddingnewpersonalizationfeaturestobrowserItcangreatlyenhancetheperformancecapabilitiesofthebrowserHowever，

2、italsoexposesthebrowserundermoreattacksSo，thestudyofbrowserextensionsecurityhasbecomeahottopicinthesoftwaresecurityfieldForbetterprofilingthebehaviorfeaturesofbrowserextensions，wedidalargescalestudytothebehaviorsofFirefo

3、xbrowserextensions，expectingtooffersomevaluableinfolrmationtoournextworkByanalyzingtheinterfacesprovidedtotheextensionsbyFirefox，wefirstabstractedandclassifiedtheextension’Sbehaviors，andcategorizedthemintofoursecuritylev

4、elsaccordingtotheirpotentialrisksThenbasedontheFirefoxopensourcebrowser，wedesignedandimplementedanautomatictestsystemforbrowserextension’SbehaviorsItcanautomaticdownloadallthesuitableextensionstolocalsystemfromtheMozilla

5、repository，installandtesttheextensionsONaninstrumentedFirefoxbrowseronebyone，andmonitorandrecordthebehaviorinformationduringthetestprocessAdditionally，forexposingasmuchbehaviorsofextensionsaspossible，thesystemwillsimulat

6、etheuser’Sbehaviorstotriggertheextension’SeventhandlingmodulesAtlast，weutilizedthissystemtodoalargescaletesttotheexistingextensionsonMozilla，andanalyzedtheexperimentalresultsfrommultipleperspectivesWetestedover2465extens

7、ionsonMozillaAfterthat，wedidstatisticstotheextension’Sdirectbehaviorsfrommultipleangles，deeplyinvestigatedseveraldangerousbehaviorsandbadpracticesofextensions，anddetailedlystudiedtheextension’SindirectbehaviorsTheresults