研究人员开发了Mohabi，这是一个为Firefox浏览器实现安全沙箱化的JavaScript引擎方案 1。该项目通过软件容错隔离技术将SpiderMonkey引擎从浏览器主体分离 1，确保JavaScript引擎中的漏洞无法危及浏览器其他部分 1。
性能方面，Mohabi在JetStream基准测试中产生24.82%的性能开销，在Speedometer测试中产生24.43%的开销 1。相应的x86-64 SFI工具链在SPEC 2017基准测试中的性能开销为5.9%-6.6% 1。研究团队认为这是迄今为止最具野心的大型系统进程内沙箱改造案例 1。
该研究由德克萨斯大学奥斯汀分校、斯坦福大学、谷歌、加州大学圣地亚哥分校和Mozilla的研究人员合作完成 1，相关成果将在2026年7月举行的第20届USENIX操作系统设计与实现研讨会(OSDI '26)上发表 1。
Researchers have developed Mohabi, a modified version of Firefox that isolates the SpiderMonkey JavaScript engine in a secure sandbox to prevent vulnerabilities in the engine from compromising other browser components. 1 The approach employs software fault isolation techniques to separate the JavaScript engine from the main browser body. 1
The implementation demonstrates modest performance overhead on standard benchmarks, with Mohabi incurring 24.82% overhead on the JetStream benchmark and 24.43% on the Speedometer test. 1 The underlying x86-64 software fault isolation toolchain adds between 5.9% and 6.6% overhead on SPEC 2017 benchmarks. 1 According to the researchers, this represents the most ambitious in-process sandbox retrofitting effort undertaken on a large-scale system to date. 1
The research team comprises scientists from the University of Texas at Austin, Stanford University, Google, the University of California San Diego, and Mozilla. 1 Their findings are scheduled for presentation at the 20th USENIX Symposium on Operating System Design and Implementation (OSDI '26) in July 2026. 1
评论
还没有评论，欢迎留下第一条。