Automatic detecting system and method for extension behavior of Firefox browser

Abstract

The invention belongs to the software function detection technique, and discloses an automatic detecting system for extension behavior of a Firefox browser, which utilizes an extraction extension line of the instrumentation Firefox browser. The system comprises a browser instrumentation module (101), an extension downloading module (102), a testing site module (103), an extension information extraction module (104), an event simulation module (105), an injection object tracking module (106), a control module (107), and an extension downloading storage vault (108). Compared with the prior art, in order to know the traditional browser expansion behavior, the invention further provides a proper security policy to reduce the extension use risk of the browser, so that the user can own great freedom degree during applying the extension on the premise of guaranteeing the security. Effective judgment reference is provided for judging whether safety threat exist in the inside extension of the browser, that is, the advantages that the Firefox owns great extension function and high humanization degree are fully exerted on the basis of security.

Description

technical field [0001] The invention relates to software function detection technology, in particular to a browser function detection method. Background technique [0002] With the popularity of computers and the Internet, browsers have become an important tool for most computer users to search and obtain information. At the same time, great changes have taken place in the functions of the browser itself. For example, most mainstream browsers have supported extension mechanisms to enhance the functions of the browser itself. A browser extension mechanism is a mechanism that allows the addition of personalized features to a browser. Through this mechanism, browser extensions add new functions to the browser, allowing users to customize applications to meet their own individual needs. [0003] However, while this mechanism greatly enhances the performance of the browser, it also exposes the browser to more attacks. Specifically, while the extension mechanism of the browser ...

AI Technical Summary

Problems solved by technology

(3) JavaScript sand window: The JavaScript sand window mechanism makes there is no direct information interaction between the extension and the web page

Although the above mechanism can alleviate the security problems caused by browser extensions to a certain extent, because the signature mechanism is not mandatory, the review mechanism often has human omissions, and the JavaScript sandbox mechanism can be easily bypassed, so in the prior art These mechanisms cannot meet the security needs of users for browser extensions

Images