浏览器安全隔离技术的研究与实现

Browser\'s isolation mechanisms are critical to users\' safety and privacy on the web, however, achieving proper security isolation is very difficult. Historical data show that even for seemingly simple isolation policies, the current browser implementations are surprisingly error-prone. This paper describes the architecture and implementation of the Remote Browser, it is a new trusted software layer on which Web browsers execute. Remote Browser runs each Web application in its own remote server. This provides strong isolation between Web application and the user\'s local resources. The security evaluation shows that Remote Browser can prevent ransomware attacks. In addition, the measurements of latency indicate that users do not need to sacrifice performance to enhance browser security.