{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/24307"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/24307","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Towards secure web browsing","abstract":"The Web is now the dominant platform for delivering interactive applications to hundreds of millions of users. Correspondingly, web browsers have become the de facto operating system for hosting these web-based applications (web apps). Unfortunately, web apps, browsers, and operating systems have all become popular targets for web-based attacks, intensifying the need for secure web browsing systems. Current research efforts to retrofit today's web browsers help to improve security, but fail to address the fundamental design flaws of current browsing systems. To overcome those issues, in this dissertation, we rethink the way we build secure browsing systems, hoping to define the principles that should be followed. To achieve this goal, we strive to learn through building experimental systems for secure web browsing. Specifically, we design and implement a new operating system and a new web browser. We also investigate other generic approaches to help secure these systems even further, including formal methods and heuristics. The first system we build is called the Illinois Browser Operating System (IBOS). IBOS is an operating system co-designed with a new browser that reduces the trusted computing base for web browsing. We demonstrate that by exposing browser-level abstractions directly at the lowest software layer -- the OS kernel -- we are able to remove almost all traditional OS components and services from our trusted computing base. We show that this architecture is flexible enough to enable new browser security policies, can still support traditional applications and adds little overhead to the overall browsing experience. We also propose the OP2 secure browser architecture that can be used on top of commodity operating systems. We combine operating system design principles with formal methods to design this secure web browser by drawing on the expertise of both communities. Our design philosophy is to partition the browser into smaller subsystems and make all communications between subsystems simple and explicit. At the core of our design is a small browser kernel that manages the browser subsystems and interposes on all communications between them to enforce our new browser security features. Through the experiences of building these systems, we are able to summarize the principles of building secure browsing systems: 1) make security decisions at the lowest layer of software and make it simple; 2) enforce strong isolation between distinct browser-level components; 3) employ simple and explicit communication between components; 4) provide the right set of operating system abstractions; 5) maintain compatibility with current browser standards; 6) expose enough browser states and events to enable new browser security policies. Overall, we demonstrate in this dissertation that, by following these principles, our new browsing systems are not vulnerable to many forms of web-based attacks. We believe that the work presented in the dissertation makes one step towards secure web browsing.","abstract_html":"The Web is now the dominant platform for delivering interactive applications to hundreds of millions of users. Correspondingly, web browsers have become the de facto operating system for hosting these web-based applications (web apps). Unfortunately, web apps, browsers, and operating systems have all become popular targets for web-based attacks, intensifying the need for secure web browsing systems. Current research efforts to retrofit today's web browsers help to improve security, but fail to address the fundamental design flaws of current browsing systems. To overcome those issues, in this dissertation, we rethink the way we build secure browsing systems, hoping to define the principles that should be followed. To achieve this goal, we strive to learn through building experimental systems for secure web browsing. Specifically, we design and implement a new operating system and a new web browser. We also investigate other generic approaches to help secure these systems even further, including formal methods and heuristics. The first system we build is called the Illinois Browser Operating System (IBOS). IBOS is an operating system co-designed with a new browser that reduces the trusted computing base for web browsing. We demonstrate that by exposing browser-level abstractions directly at the lowest software layer -- the OS kernel -- we are able to remove almost all traditional OS components and services from our trusted computing base. We show that this architecture is flexible enough to enable new browser security policies, can still support traditional applications and adds little overhead to the overall browsing experience. We also propose the OP2 secure browser architecture that can be used on top of commodity operating systems. We combine operating system design principles with formal methods to design this secure web browser by drawing on the expertise of both communities. Our design philosophy is to partition the browser into smaller subsystems and make all communications between subsystems simple and explicit. At the core of our design is a small browser kernel that manages the browser subsystems and interposes on all communications between them to enforce our new browser security features. Through the experiences of building these systems, we are able to summarize the principles of building secure browsing systems: 1) make security decisions at the lowest layer of software and make it simple; 2) enforce strong isolation between distinct browser-level components; 3) employ simple and explicit communication between components; 4) provide the right set of operating system abstractions; 5) maintain compatibility with current browser standards; 6) expose enough browser states and events to enable new browser security policies. Overall, we demonstrate in this dissertation that, by following these principles, our new browsing systems are not vulnerable to many forms of web-based attacks. We believe that the work presented in the dissertation makes one step towards secure web browsing.","abstract_has_math":false,"creators":["Tang, Shuo"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Computer Science","degree_department":null,"school":null,"contributors":["King, Samuel T.","Gunter, Carl A.","Meseguer, José","Levy, Henry M.","Montesinos Ortego, Pablo"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2011,"date_issued":"2011-05-25T14:51:23Z","date_published":"2011-05-25T14:51:23Z","updated_at":"2026-07-22T22:25:23Z","subjects":["Operating System","Web Security","Web Browser","Formal Method","Security"],"languages":["en"],"rights":["Copyright 2011 Shuo Tang"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/24307","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["King, Samuel T.","Gunter, Carl A.","Meseguer, José","Levy, Henry M.","Montesinos Ortego, Pablo"]},{"key":"dc:creator","label":"Author","values":["Tang, Shuo"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2011-05-25T14:51:23Z","2011-05"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Computer Science"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Operating System","Web Security","Web Browser","Formal Method","Security"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2011 Shuo Tang"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/24307"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["The Web is now the dominant platform for delivering interactive applications to hundreds of millions of users. Correspondingly, web browsers have become the de facto operating system for hosting these web-based applications (web apps). Unfortunately, web apps, browsers, and operating systems have all become popular targets for web-based attacks, intensifying the need for secure web browsing systems. Current research efforts to retrofit today's web browsers help to improve security, but fail to address the fundamental design flaws of current browsing systems. To overcome those issues, in this dissertation, we rethink the way we build secure browsing systems, hoping to define the principles that should be followed. To achieve this goal, we strive to learn through building experimental systems for secure web browsing. Specifically, we design and implement a new operating system and a new web browser. We also investigate other generic approaches to help secure these systems even further, including formal methods and heuristics. The first system we build is called the Illinois Browser Operating System (IBOS). IBOS is an operating system co-designed with a new browser that reduces the trusted computing base for web browsing. We demonstrate that by exposing browser-level abstractions directly at the lowest software layer -- the OS kernel -- we are able to remove almost all traditional OS components and services from our trusted computing base. We show that this architecture is flexible enough to enable new browser security policies, can still support traditional applications and adds little overhead to the overall browsing experience. We also propose the OP2 secure browser architecture that can be used on top of commodity operating systems. We combine operating system design principles with formal methods to design this secure web browser by drawing on the expertise of both communities. Our design philosophy is to partition the browser into smaller subsystems and make all communications between subsystems simple and explicit. At the core of our design is a small browser kernel that manages the browser subsystems and interposes on all communications between them to enforce our new browser security features. Through the experiences of building these systems, we are able to summarize the principles of building secure browsing systems: 1) make security decisions at the lowest layer of software and make it simple; 2) enforce strong isolation between distinct browser-level components; 3) employ simple and explicit communication between components; 4) provide the right set of operating system abstractions; 5) maintain compatibility with current browser standards; 6) expose enough browser states and events to enable new browser security policies. Overall, we demonstrate in this dissertation that, by following these principles, our new browsing systems are not vulnerable to many forms of web-based attacks. We believe that the work presented in the dissertation makes one step towards secure web browsing.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2011-04-19T22:20:44Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Tang_Shuo.pdf: 1010746 bytes, checksum: fb62893f9e61f917d7c4937f4da0a3a3 (MD5)","Made available in DSpace on 2011-05-25T14:51:23Z (GMT). No. of bitstreams: 2 Tang_Shuo.pdf: 1015944 bytes, checksum: a82f498bb2a882022372f6c937187cef (MD5) license.txt: 4057 bytes, checksum: da1e3b0f30274e43f56c44fa0ac7ab28 (MD5)"]},{"key":"dc:title","label":"Title","values":["Towards secure web browsing"]}]}],"canonical_facts":{"dc:contributor":["King, Samuel T.","Gunter, Carl A.","Meseguer, José","Levy, Henry M.","Montesinos Ortego, Pablo"],"dc:creator":["Tang, Shuo"],"dc:date":["2011-05-25T14:51:23Z","2011-05"],"dc:description":["The Web is now the dominant platform for delivering interactive applications to hundreds of millions of users. Correspondingly, web browsers have become the de facto operating system for hosting these web-based applications (web apps). Unfortunately, web apps, browsers, and operating systems have all become popular targets for web-based attacks, intensifying the need for secure web browsing systems. Current research efforts to retrofit today's web browsers help to improve security, but fail to address the fundamental design flaws of current browsing systems. To overcome those issues, in this dissertation, we rethink the way we build secure browsing systems, hoping to define the principles that should be followed. To achieve this goal, we strive to learn through building experimental systems for secure web browsing. Specifically, we design and implement a new operating system and a new web browser. We also investigate other generic approaches to help secure these systems even further, including formal methods and heuristics. The first system we build is called the Illinois Browser Operating System (IBOS). IBOS is an operating system co-designed with a new browser that reduces the trusted computing base for web browsing. We demonstrate that by exposing browser-level abstractions directly at the lowest software layer -- the OS kernel -- we are able to remove almost all traditional OS components and services from our trusted computing base. We show that this architecture is flexible enough to enable new browser security policies, can still support traditional applications and adds little overhead to the overall browsing experience. We also propose the OP2 secure browser architecture that can be used on top of commodity operating systems. We combine operating system design principles with formal methods to design this secure web browser by drawing on the expertise of both communities. Our design philosophy is to partition the browser into smaller subsystems and make all communications between subsystems simple and explicit. At the core of our design is a small browser kernel that manages the browser subsystems and interposes on all communications between them to enforce our new browser security features. Through the experiences of building these systems, we are able to summarize the principles of building secure browsing systems: 1) make security decisions at the lowest layer of software and make it simple; 2) enforce strong isolation between distinct browser-level components; 3) employ simple and explicit communication between components; 4) provide the right set of operating system abstractions; 5) maintain compatibility with current browser standards; 6) expose enough browser states and events to enable new browser security policies. Overall, we demonstrate in this dissertation that, by following these principles, our new browsing systems are not vulnerable to many forms of web-based attacks. We believe that the work presented in the dissertation makes one step towards secure web browsing.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2011-04-19T22:20:44Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Tang_Shuo.pdf: 1010746 bytes, checksum: fb62893f9e61f917d7c4937f4da0a3a3 (MD5)","Made available in DSpace on 2011-05-25T14:51:23Z (GMT). No. of bitstreams: 2 Tang_Shuo.pdf: 1015944 bytes, checksum: a82f498bb2a882022372f6c937187cef (MD5) license.txt: 4057 bytes, checksum: da1e3b0f30274e43f56c44fa0ac7ab28 (MD5)"],"dc:identifier":["http://hdl.handle.net/2142/24307"],"dc:language":["en"],"dc:rights":["Copyright 2011 Shuo Tang"],"dc:subject":["Operating System","Web Security","Web Browser","Formal Method","Security"],"dc:title":["Towards secure web browsing"],"thesis:degree_discipline":["Computer Science"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:23Z"}