Empowering mobile code using expressive security policies

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2002, Pages 61-68

  Venkatakrishnan, V N ^a   Peri, Ram ^a   Sekar, R ^a  

^a Stony Brook University   (United States)

Author keywords

Code transformation; Mobile code security; Security policies

Indexed keywords

CODES (SYMBOLS); ELECTRONIC MAIL; FINITE AUTOMATA; INTERNET; JAVA PROGRAMMING LANGUAGE; MULTI AGENT SYSTEMS;

AGENT BASED SYSTEMS; EXTENDED FINITE STATE AUTOMATA; JAVA BYTE CODE; MOBILE CODE;

SECURITY OF DATA;

EID: 0242612169     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/844111.844113     Document Type: Conference Paper

References (16)

1. BCEL API Documentation available at http://bcel.sourceforge.net/docs/index.html.
2. M. Dahm. Byte code engineering. In Proceedings of JIT 99, 1999.
3. G. Edjlali, A. Acharya, and V. Chaudhary. History based access control for mobile code. In Proceedings of ACM Computer and Comunications Security conference, 1998.
4. U. Erlingsson and F. B. Schneider. Sasi enforcement of security policies: A retrospective. In Proceedings of the New Security Paradigm Workshop Ontario, Canada, 1999.
5. U. Erlingsson and F. B. Schneider. Irm enforcement of java stack inspection. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, 2000.
6. D. Evans and A. Tywman. Flexible policy directed code safety. In Proceedings of the 1999 IEEE conference on Security and Privacy, 1999.
7. L. Gong. Inside Java 2 Platform Security: Architecture, API Design, and Implementation. Addison-Wesley, 1998.
8. L. Gong, M. Mueller, H. Prafullchandra, and R. Schemers. Going beyond the sandbox: An overview of the new security architecture in the java development kit 1.2. In Proceedings of the USENIX Symposium on Internet Technologies and Systems, 1997.
9. M. Hauswirth, C. Kerer, and R. Kurmanowytsch. A secure execution framework for java. In Proceedings of the 7th ACM Conference on Computer and Communtications Security, 2000.
10. J. Hoagland, R. Pandey, and K. Levitt. Specifying security policies using a graphical approach. Technical report, University of California, 1999.
11. A. C. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering Methodology, 1999.
12. F. B. Schneider. Enforceable security polcies. Technical report, Cornell University, 1999.
13. R. Sekar, C. Ramakrishnan, I. Ramakrishnan, and S. Smolka. Model carrying code: A new paradigm for mobile code security. In Proceedings of the New Security Paradigms Workshop, 2001.
14. R. Sekar and P. Uppuluri. Synthesizing fast intrusion prevention/detection systems from high-level specifications. In Proceedings of the USENIX Security Symposium, 1999.
15. P. Uppuluri. Pattern matching based intrusion detection systems. Tech report, Computer Science, StonyBrook, 2001.
16. D. S. Wallach and E. W. Felten. Understanding java stack inspection. In 1998 IEEE Symposium on Security and Privacy, 1998.