Prevent user from browsing internet

Question

I am trying to make an online application that will be like an online exam, But I want to ensure that no user can browse inte.net during the test. Is it possible ANYHOW? I am thinking about a fullscreen application that don't minimize. But that cannot eliminate the chances that user alt-tabs other window:(

Any direction is highly appreciated.

Technology is no bar. Having said that, the students will be taking the test from home .

Answer 1

I think this would be better solved on the.network layer in your school router. Block IP access to everything except the online test for this class room while test is being taken..

Answer 2

Technology is no bar. Having said that, the students will be taking the test from home .

Do understand the spirit of laws 1,2,3 of the 10 Immutable Laws of Security :

Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore
Law #2: If a bad guy can alter the operating system on your computer, it's not your computer anymore
Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore

The only computers that conform to your will (in your case, you want the PCs to disallow browsing) are those for which you have complete control of the hardware and software.

You can fool only the less sophisticated users. If your users are inclined, they can easily learn to bust it. From the DRM fiasco and certain personal anecdotes from school and college, its well proven that the users can be one step ahead and trying to close the gap is a black hole for money and effort .

---

Also the kids are at home. They can always use other devices or means. You can make a page with javascript that can prevent it from going out of focus, but a 10 year old can learn to open another window. Make a fullscreen desktop app that checks if the mouse is "inside", a 16 year old can run it on a virtual machine or screen session. Yes, I was that smart at that age and kids are getting more smarter than you or me.

Also, automated systems to detect wrongdoing are likely to take innocent victims and cause pain and resentment. Inte.net filters that trip on "Steve Jobs death" and "new c# jobs " for the same reason are an annoyance. Payment processors and site advertising with automated fraud detection algorithms and customer care that stonewalls have made people broke.

Answer 3

You could also set a system (IE) proxy, and write a small Proxy Server to intercept any outbound requests and return nothing
Writing such Proxy is trivial...
If you are on Windows, you could write a batch file to start your program and use the REG command to modify the registry key(s)