TAILIEUCHUNG - The Multi-Principal OS Construction of the Gazelle Web Browser

A spam campaign consists of many related email mes- sages. The messages in a spam campaign share a set of common features, such as similar content, or links (with or without redirection) to the same target URL. By exploit- ing this feature, we can cluster spam email messages with same or near-duplicate content together as a single spam campaign. Spammers often obfuscate the message content such that each email message in a spam campaign has slightly different text from the others. One common obfuscating technique is misspelling commonly ltered words or in- serting extra characters. HTML-based email offers addi- tional ways to obfuscate similarities in messages, such as inserting comments, including invisible text,. | The Multi-Principal OS Construction of the Gazelle Web Browser Helen J. Wang Chris Griert Alexander Moshchuk Samuel T. Kingt Piali Choudhury Herman Venter Microsoft Research t University of Illinois at Urbana-Champaign Í University of Washington helenw pialic hermanv @ grier kingst @ anm@ Abstract Original web browsers were applications designed to view static web content. As web sites evolved into dynamic web applications that compose content from multiple web sites browsers have become multi-principal operating environments with resources shared among mutually distrusting web site principals. Nevertheless no existing browsers including new architectures like IE 8 Google Chrome and OP have a multi-principal operating system construction that gives a browser-based OS the exclusive control to manage the protection of all system resources among web site principals. In this paper we introduce Gazelle a secure web browser constructed as a multi-principal OS. Gazelle s browser kernel is an operating system that exclusively manages resource protection and sharing across web site principals. This construction exposes intricate design issues that no previous work has identified such as crossprotection-domain display and events protection. We elaborate on these issues and provide comprehensive solutions. Our prototype implementation and evaluation experience indicates that it is realistic to turn an existing browser into a multi-principal OS that yields significantly stronger security and robustness with acceptable performance. 1 Introduction Web browsers have evolved into a multi-principal operating environment where a principal is a web site 43 . Similar to a multi-principal OS recent proposals 12 13 23 43 46 and browsers like IE 8 34 and Firefox 3 16 advocate and support programmer abstractions for protection . sandbox in addition to iframe 43 and cross-principal communication . PostMessage 24 43 . Nevertheless no existing .

• Tổ chức sự kiện
• Exchange Basics
• Reasons to Exchange
• Potential Role
• Diagnostics
• Insulin Like Growth
• Clinical Implications
• Back to basics in physiology
• The respiratory
• Cardiovascular systems
• Cellular respiration
• Functional anatomy of the lungs
• Blueprints of gas exchange
• The respiratory cycle
• Transnational Corporations
• Lecture Economics
• Financial crisis
• Global market economy
• Monetary policy
• Medium of exchange
• Federal reserve
• Controlling inflation