面向资源泄漏的浏览器沙箱测试方法

摘要

Resource leakage is one of the important defects of sandbox escape.The existing browser sandbox testing methods are insufficient to discover leak resources.Based on the analysis that most leaking resources have same or similar attribute values,this paper designed a resource-leakage oriented browser testing method.The method firstly analyzes resources attributes and creates resource selecting rules;secondly,calculates the escape index of every resource of system and uses threshold to select testing resources;thirdly,designs and implements a prototype system-Browser Sandbox Testing System(BSTS) and analysis the capability of our method;then we select and test some browser sandboxes;in the end,we found an undisclosed resource leakage vulnerability.%资源泄漏是导致浏览器沙箱逃逸的重要缺陷之一,已有浏览器沙箱测试方法不完全适用于发现资源泄漏缺陷.基于大多数导致沙箱逃逸的资源具有相同或相似属性取值的分析,本文提出了一种面向资源泄漏的浏览器沙箱测试方法.该方法首先分析并约简敏感资源的属性来生成资源筛选规则;其次,定义资源与资源筛选规则前件的最大加权语义相似度为逃逸指数,并使用逃逸指数阈值来筛选测试资源;再次,设计并实现了原型系统BSTS(Browser Sandbox Testing System),并在BSTS内分析了方法的性能.进一步,选择多个主流浏览器沙箱来测试本文方法的资源泄漏发现能力,实验结果显示本文方法具有良好的资源泄漏发现能力.