Towards User Online Security and Privacy Protection