Abstract: To implement efficient management and secure isolation of Web application in browser,this paper proposes the lightweight isolation method of rendering process based on Chromium.It researches and analyzes multi-process mechanism and management of Chromium,as well as virtualization of Docker container,designs the solution of ZygoteDocker which is the combination of Chromium and Docker,separates the rendering process module from the browser content module,and implements lightweight browser by simplifying the browser functions.Experimental result shows that the rendering process module implements the isolation in the container,with obvious lightweight result.

Key words: Chromium browser, Docker container, virtualization, rendering process, lightweight, isolation

摘要： 为实现浏览器对Web应用的高效管理和安全隔离,提出一种新的渲染进程轻量化隔离方法。研究并分析Chromium多进程机制及管理策略与Docker容器虚拟化技术。设计Chromium与Docker相结合的ZygoteDocker方案,将渲染进程模块从浏览器核心模块中分离,同时精简浏览器功能实现浏览器的轻量化。实验结果表明,该渲染进程模块在容器内实现了隔离,轻量化结果较为明显。

关键词: Chromium浏览器, Docker容器, 虚拟化, 渲染进程, 轻量化, 隔离

CLC Number: 

• TP391