Rico: A security proxy for mobile code

Computers and Security

Volumn 23, Issue 4, 2004, Pages 338-351

  Song, Yougang ^a   Fleisch, Brett D ^a  

^a University of California Riverside   (United States)

Author keywords

Inline reference monitor; Mobile code security; Proxy server; Security policy composition; Security policy management

Indexed keywords

CODES (SYMBOLS); COMPUTER PROGRAMMING; DATABASE SYSTEMS; INTERNET; MOBILE TELECOMMUNICATION SYSTEMS; USER INTERFACES;

INLINE REFERENCE MONITORS; MOBILE CODE SECURITY; PROXY SERVERS; SECURITY POLICY COMPOSITION; SECURITY POLICY MANAGEMENT;

SECURITY OF DATA;

EID: 2942536699     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2003.09.003     Document Type: Article

References (18)

1. Arlitt M., Williamson C. Internet Web servers: workload characterization and performance implications. IEEE/ACM Trans Netw. 5:(5):October 1997.
2. Blaze M., Feignbaum J., Ioannidis J., Keromytis A. The KeyNote trust management system - version 2. September 1999;Internet Engineering Task Force.
3. Edjlali G, Acharya A, Chaudhary V. History-based access control for mobile code. Proceeding of ACM Computer and Communications Security Conference; 1998.
4. Erlingsson U, Schneider FB. IRM enforcement of Java stack inspection. IEEE Symposium on Security and Privacy, Oakland, California; May 2000.
5. Evans D., Twyman A. Flexible policy-directed code safety. IEEE Secur Privacy. May 1999.
6. Feigenbaum J, Lee P. Trust management and proof-carrying code in secure mobile code applications. DARPA Workshop on Foundations for Secure Mobile Code in Monterey, CA; March 1997.
7. Gasser M. Building a secure computer system. April 1988;162-166 Van Nostrand Reinhold International Company Limited. 93-127.
8. Java security document. http://Java.sun.com/security.
9. Kozen D. Language based security. Proceeding of Mathematical Foundations of Computer Science (MFCS'99); September 1999. p. 284-98.
10. McGrath R. Caching for large scale systems. D-Lib Magazine. January 1996.
11. Proxy servers document. http://compnetworking.about.com/library/weekly/ aa061000a.htm.
12. Schneider F. Enforceable security policies. ACM Trans Inf Syst Secur. 3:(1):February 2000;30-50.
13. Schneider F.B., Morrisett G., Harper R. A language-based approach to security. Informatics. 2001;86-101.
14. Secure Computing with Java: Now and the Future. http://java.sun.com/ marketing/collateral/security.html.
15. Sirer E, Wang K. A temporal logic-based access control mechanism for Web services. Proceedings of the Symposium on Access Control Models and Technologies (SACMAT), Monterey, CA; 2002. p. 23-32.
16. Venture development corporation (VDC) document. http://www.vdc-corp.com/ embedded/press/02/pr02-23.html.
17. Wahbe R, Luco S, Anderson TE, Graham SL. Efficient software-based fault isolation. Proceedings of the Symposium on Operation System Principles; 1993.
18. ZDNet UK News. Prank leads to fears about mobile security. http://news.zdnet.co.uk/internet/0,39020369,2080733,00.htm:August 9, 2000;