A security architecture for mobile agent based applications

World Wide Web

Volumn 6, Issue 1, 2003, Pages 93-122

  Varadharajan, V ^a   Foster, D ^a  

^a MACQUARIE UNIVERSITY   (Australia)

Author keywords

Mobile agents security; Secure agent application; Security architecture; Security enhanced agents

Indexed keywords

CODES (SYMBOLS); COMPUTER ARCHITECTURE; COMPUTER PROGRAMMING LANGUAGES; DATABASE SYSTEMS; INTERNET; PUBLIC POLICY; SERVERS; WIDE AREA NETWORKS;

MOBILE AGENTS SECURITY; SECURE AGENT APPLICATIONS; SECURITY ARCHITECTURE; SECURITY ENHANCED AGENTS;

SECURITY OF DATA;

EID: 3543051281     PISSN: 1386145X     EISSN: None     Source Type: Journal    
DOI: 10.1023/A:1022360516731     Document Type: Review

References (33)

1. J. Baumann, F. Hohl, K. Rothermal, and M. Fraser, "Mole: Concepts of a mobile agent system," World Wide Web 1(3), July-September 1998, 123-137.
2. S. Berkovits, J. Guttman, and V. Swarup, "Authentication for Mobile Agents," in Mobile Agents and Security, Lecture Notes in Computer Science, Vol. 1419, 1998.
3. L. Cardelli, "Abstractions of mobile computations," in Secure Internet Programming, Lecture Notes in Computer Science, Vol. 1603, 1999.
4. D. Chess, "Security issues in mobile code systems," in Mobile Agents and Security, Lecture Notes in Computer Science, Vol. 1419, 1998.
5. D. Chess et al., "Itinerant agents for mobile computing," IBM Research Report RC20010, 1995.
6. C. Fournet, G. Gonthier, J. J. Levy, L. Maranget, and D. Remy, "A calculus of mobile agents," in Proceedings of the 7th International Conference on Concurrency Theory (CONCUR'96), 1996, pp. 406-421.
7. A. Fuggetta, G. P. Picco, and G. Vigna, "Understanding code mobility," IEEE Transactions on Software Engineering 24(5), May 1998.
8. R. S. Gray, D. Kotx, G. Cybenko, and D. Rus, "D'Agents: Security in a multiple language mobile agent system," in Mobile Agents and Security, G. Vigna, Ed., Springer-Verlag, 1998, pp. 154-187.
9. A. Herzberg, Y. Mass, and J. Michaeli, "Access control meets public key infrastructure, or Assigning roles to strangers," Proceedings of the IEEE Symposium on Security and Privacy, 2000.
10. M. Hitchens and V. Varadharajan, "On the design and specification of role based access control policies," in IEE Proceedings on Computers and Digital Techniques, October 2000.
11. S. Jajodia, P. Samarti, M. Sapino and V. Subrahmanian, "Flexible support for multiple access policies," ACM Transactions on Database Systems 26(2), 2001, 214-260.
12. N. Karnik, "Security in Ajanta mobile agent system," PhD Thesis, Department of Computer Science, University of Minnesota, 2000.
13. G. Karjoth, D. Lange, and M. Oshima, "A security model for aglets," Internet Computing, July 1997.
14. N. Karnik and A. Tripathi, "Security in the Ajanta Mobile Agent System," in Software Practice and Experience, Wiley, May 2000.
15. D. Kotz, R. Gray, S. Nog, D. Rus, S. Chawala, and G. Cybenko, "Agent TCL: Targeting the needs of mobile computers," IEEE Internet Computing 1(4), July-August 1997, 58-67.
16. D. Lange and M. Oshima, Programming and Deploying Java Mobile Agents with Aglets, Addison-Wesley, 1998.
17. Microsoft Corporation, "Authenticode Technology," http://msdn.microsoft.com/library/security/authenticode
18. D. S. Milojicic, F. Douglis, and R. Wheeler (Eds.), Mobility: Processes, Computers and Agents, Addison-Wesley, Reading, 1999.
19. G. Necula and P. Lee, "Safe kernel extensions without runtime checking," in Proceedings of the Symposium on Operating System Design and Implementation, OSDI'96, 1996, pp. 229-243.
20. F. Rabitti, E. Bertino, W. Kim, and D. Woelk, "A model of authorization for next generation database systems," ??? 16(1), 1991, 88-131.
21. K. Rothermel and F. Hohl (Eds.), Mobile Agents, Proceedings of Mobile Agents Workshop. Lecture Notes in Computer Science, Vol. 1477, 1998.
22. K. Rothermel and R. Popescu-Zeletin (Eds.), Mobile Agents, Proceedings of Mobile Agents Workshop, Lecture Notes in Computer Science, Vol. 1219, 1997.
23. T. Sander and C. F. Tschudin, "Towards Mobile Cryptography," in Proceedings of the 1998 IEEE Symposium on Research in Security and Privacy, USA, 1998.
24. A. Tripathi, N. Karnik, T. Ahmed, R. D. Singh, A. Prakash, V. Kakani, M. K. Vora, and M. Pathak, "Design of the Ajanta system for mobile agent programming," Journal of Systems and Software, May 2002.
25. V. Varadharajan, "Security enhanced mobile agents," in Proceedings of the ACM Conference on Computer and Communication Security, November 2000.
26. V. Varadharajan, P. Allen, and S. Black, "An analysis of the proxy problem in distributed systems," in Proceedings of the 1991 IEEE Symposium on Research insecurity and Privacy, USA, 1991.
27. V. Varadharajan, C. Crall, and J. Pato, "Authorization in enterprise-wide distributed systems: A practical design and application," in IEEE Computer Security Applications Conference (ACSAC), 1998.
28. G. Vigna, "Protecting mobile agents thorugh tracing," in Proceedings of the ECOOP Workshop on Mobile Object Systems, 1997.
29. G. Vigna, "Cryptographic traces for mobile agents," Mobile Agent Security, Vol. 1419, 1998.
30. J. Vitek and C. D. Jensen, in Secure Internet Programming, Lecture Notes in Computer Science, Vol. 1603, 1999.
31. D. Volpano and G. Smith, "Language issues in mobile program security," in Mobile Agents and Security, Lecture Notes in Computer Science, Vol. 1419, 1998.
32. J. E. White, "Telescript technology: Mobile agents," in Software Agents, J. M. Bradshaw, Ed., AAAI/MIT Press, 1997, pp. 437-472.
33. B. Yee, "A sanctuary for mobile agents," in Secure Internet Programming, Lecture Notes in Computer Science, Vol. 1603, 1999.