瀏覽器擴展行為自動測試系統的設計與實現.pdf

1、天津大學碩士學位論文瀏覽器擴展行為自動測試系統的設計與實現姓名：王建剛申請學位級別：碩士專業(yè)：計算機科學與技術指導教師：李曉紅201111ABSTRACTBrowserextensionisakindofmechanismforaddingnewpersonalizationfeaturestobrowserItcangreatlyenhancetheperformancecapabilitiesofthebrowserHowever，

2、italsoexposesthebrowserundermoreattacksSo，thestudyofbrowserextensionsecurityhasbecomeahottopicinthesoftwaresecurityfieldForbetterprofilingthebehaviorfeaturesofbrowserextensions，wedidalargescalestudytothebehaviorsofFirefo

3、xbrowserextensions，expectingtooffersomevaluableinfolrmationtoournextworkByanalyzingtheinterfacesprovidedtotheextensionsbyFirefox，wefirstabstractedandclassifiedtheextension’Sbehaviors，andcategorizedthemintofoursecuritylev

4、elsaccordingtotheirpotentialrisksThenbasedontheFirefoxopensourcebrowser，wedesignedandimplementedanautomatictestsystemforbrowserextension’SbehaviorsItcanautomaticdownloadallthesuitableextensionstolocalsystemfromtheMozilla

5、repository，installandtesttheextensionsONaninstrumentedFirefoxbrowseronebyone，andmonitorandrecordthebehaviorinformationduringthetestprocessAdditionally，forexposingasmuchbehaviorsofextensionsaspossible，thesystemwillsimulat

6、etheuser’Sbehaviorstotriggertheextension’SeventhandlingmodulesAtlast，weutilizedthissystemtodoalargescaletesttotheexistingextensionsonMozilla，andanalyzedtheexperimentalresultsfrommultipleperspectivesWetestedover2465extens

7、ionsonMozillaAfterthat，wedidstatisticstotheextension’Sdirectbehaviorsfrommultipleangles，deeplyinvestigatedseveraldangerousbehaviorsandbadpracticesofextensions，anddetailedlystudiedtheextension’SindirectbehaviorsTheresults