Security/Safe Browsing/Chromium Implementation Overview: Difference between revisions
< Security | Safe Browsing
Jump to navigation
Jump to search
(Fix dead links and point to pver4 code) |
(→Malware and phishing: fix dead links) |
||
| Line 23: | Line 23: | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/local_database_manager.h Local DB manager] (inherits from [https://code.google.com/p/chromium/codesearch#chromium/src/components/safe_browsing_db/database_manager.h DB manager]) | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/local_database_manager.h Local DB manager] (inherits from [https://code.google.com/p/chromium/codesearch#chromium/src/components/safe_browsing_db/database_manager.h DB manager]) | ||
** [https://code.google.com/p/chromium/codesearch#chromium/src/components/safe_browsing_db/remote_database_manager.h Remote DB manager] (in trial on Android) | ** [https://code.google.com/p/chromium/codesearch#chromium/src/components/safe_browsing_db/remote_database_manager.h Remote DB manager] (in trial on Android) | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/ | * [https://code.google.com/p/chromium/codesearch#chromium/src/components/safe_browsing_db/prefix_set.h Prefix set] | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/protocol_manager.h Protocol interactions] with service (including [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/protocol_parser.h parsing server responses]) | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/protocol_manager.h Protocol interactions] with service (including [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/protocol_parser.h parsing server responses]) | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/chunk_range.h Range parsing] | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/chunk_range.h Range parsing] | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/ping_manager.h SB stats reporting] (optional, includes [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/ | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/ping_manager.h SB stats reporting] (optional, includes [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/threat_details.h threat details reporting]) | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/safe_browsing_database.h URL classification helpers] | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/safe_browsing_database.h URL classification helpers] | ||
* [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/safe_browsing_util.h Utilities for handling chunks and hashes] | * [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/safe_browsing_util.h Utilities for handling chunks and hashes] | ||
Revision as of 21:03, 1 April 2016
Notes on the Safe Browsing implementation in Chromium.
Documentation
- Design doc that explains how Safe Browsing works in Chromium.
- Protocol version 3 (the one that Chrome implements)
Application Reputation
- Protobuf definition
- Utility functions
- Extracting signatures (also see cli tool)
- Extracting features of binary files (also windows executables)
- Mac DMGs and the sandboxed analyzer (also see dependencies)
- ZIP analyzer (and the sandboxed analyzer)
- File uploads to a download feedback service
- Download protection service
Malware and phishing
- File store (inherits from SB Store)
- Interstitial pages (will allow users to opt into reporting malware details)
- Local DB manager (inherits from DB manager)
- Remote DB manager (in trial on Android)
- Prefix set
- Protocol interactions with service (including parsing server responses)
- Range parsing
- SB stats reporting (optional, includes threat details reporting)
- URL classification helpers
- Utilities for handling chunks and hashes
Protocol Version 4
Testing
- Test server (also see this v2 test server)
- Test data (including executables and archives as well as mac binaries and a signed DLL)
Client-side malware/phishing detection (CSD)
- Protobuf definitions
- Browser feature extractor and matching renderer code
- Client model
- "Site reputation" service
Software Removal Tool (SRT)
- Code (Windows only)