Security for mobile agents: Issues and challenges

Mobile Computing Handbook

Volumn , Issue , 2004, Pages 941-960

  Bellavista, Paolo ^a   Corradi, Antonio ^a   Federici, Corrado ^a   Montanari, Rebecca ^a   Tibaldi, Daniela ^a  

^a UNIVERSITY OF BOLOGNA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 77952490155     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1201/9780203504086     Document Type: Chapter

References (60)

1. P. Bellavista, D. Bottazzi, A. Corradi, R. Montanari, and S. Vecchi, Mobile Agent Middlewares for Context-Aware Applications, Section III, Handbook of Mobile Computing, Boca Raton, FL: CRC Press, 2003.
2. A. Fuggetta, G.P. Picco, and G. Vigna, Understanding Code Mobility, IEEE Transactionson Software Engineering, vol. 24, no. 5, 1998.
3. M. Baldi and G.P. Picco, Evaluating the Tradeoffs of Mobile Code Design Paradigms in Network Management Applications, 20th International Conference on Software Engineering(ICSE’98), Los Alamitos, CA, 1998.
4. R.H. Glitho and T. Magedanz, Eds., Special Issue on Applicability of Mobile Agents to Telecommunications, IEEE Network, vol. 16, no. 3, 2002.
5. M.S. Greenberg, J.C. Byington, T. Holding, and D.G. Harper, Mobile Agents and Security, IEEE Communications Magazine, vol. 36, no. 7, 1998.
6. W. Jansen, Countermeasures for Mobile Agent Security, Computer Communications, vol. 23, no. 17, 2000.
7. G. Knoll, N. Suri, and J.M. Bardshaw, Path-Based Security for Mobile Agents, ElectronicNotes in Theoretical Computer Science, vol. 58, no. 2, 2002.
8. G. Vigna, Mobile Agents and Security, Lecture Notes in Computer Science vol. 1419, New York: Springer-Verlag, 1998.
9. R. Oppliger, Security Issues Related to Mobile Code and Agent-Based Systems, Computer Communications, vol. 22, no. 12, 1999.
10. N. Borselius, Mobile Agent Security, Electronics and Communication Engineering Journal, vol. 14, no. 5, 2002.
11. J. Zachary, Protecting Mobile Code in the Wild, IEEE Internet Computing, vol. 7, no. 2, 2003.
12. V.A. Pham and A. Karmouch, Mobile Software Agents: an Overview, IEEE Communications Magazine, vol. 36, no. 7, 1998.
13. N. Negroponte, Agents: from Direct Manipulation to Delegation, Software Agents, Menlo Park, CA: AAAI Press, 1997.
14. J. Bradshaw, G. Cabri, and R. Montanari, Taking Back Cyberspace, IEEE Computer, vol. 36, no. 7, 2003.
15. P.T. Devanbu and S. Stubblebine, Software Engineering for Security: a Roadmap, International Conference on Software Engineering (ICSE’00);, Limerick, Ireland, 2000.
16. J. Howell and D. Kotz, A Formal Semantics for SPKI, 6th European Symposium on Research in Computer Security (ESORICS 2000);Lecture Notes in Computer Science vol. 1895, New York: Springer-Verlag, 2000.
17. J. Linn and M. Nystrom, Attribute Certification: an Enabling Technology for Delegation and Role-Based Controls in Distributed Environments, 4th ACM Workshop on Role-Based Access Control (RBAC’99), Fairfax, VA, 1999.
18. W.A. Jansen, A Privilege Management Scheme for Mobile Agent Systems, 5th InternationalConference on Autonomous Agents, Montreal, Canada, May 2001.
19. S. Mudumbai, A. Essiari, and W. Johnston, Anchor Toolkit — a Secure Mobile Agent System, 3rd International Symposium on Mobile Agents (ASA/MA’99), Palm Springs, CA, October 1999.
20. G. Necula, Proof Carrying Code, 24th ACM Symposium on Principle of Programming Languages, Paris, 1997.
21. D. Chess, B. Grosof, C. Harrison, D. Levine, C. Parris, and G. Tsudik, Itinerant Agents for Mobile Computing, IEEE Personal Communications, vol. 2, no. 5, 1995.
22. W. Farmer, J. Guttman, and V. Swarup, Security for Mobile Agents: Authentication and State Appraisal, 4th European Symposium on Research in Computer Security, Rome, 1996.
23. W. Ford and M. Baum,;Secure Electronic Commerce, Upper Saddle River, NJ: Prentice Hall, 1997.
24. L. Gong, Java Security: Present and Near Future, IEEE Micro, vol. 17, no. 3, 1997.
25. L. Gong, Inside Java 2 Platform Security, Boston: Addison Wesley, 1999.
26. G. Edjlali, A. Acharya, and V. Chaudhary, History-Based Access Control for Mobile Code, 5th ACM Conference on Computer and Communications Security, San Francisco, 1998.
27. M. Blaze, J. Feigenbaum, J. Ioannidis, and A.D. Keromytis, The Role of Trust Management in Distributed Systems Security, Secure Internet Programming: Issues in Distributes and Mobile Object Systems, New York: Springer-Verlag, 1999.
28. S. Jajodia, P. Samarati, and V.S. Subrahmanian, A Logical Language for Expressing Authorizations, IEEE Symposium on Security and Privacy, 1997.
29. V. Varadharajan, C. Crall, and J. Pato, Authorization in Enterprise-Wide Distributed System: a Practical Design and Application, 14th Annual Computer Security Applications Conference, 1998.
30. E. Lupu, M. Sloman, N. Dulay, and N. Damianou, Ponder: Realising Enterprise Viewpoint Concepts, 4th International Enterprise Distributed Object Computing Conference, Makuhari, Japan, 2000.
31. D. Lange and M. Oshima, Programming and Deploying Java Mobile Agents with Aglets, Boston: Addison Wesley, 1998.
32. U.G. Wilhelm, S. Staamann, and L. Butty, Introducing Trusted Third Parties to the Mobile Agent Paradigm. In J. Vitek and C. Jensen, Eds., Secure Internet Programming: Security Issues for Mobile and Distributed Objects, New York: Springer-Verlag, 1999.
33. F. Hohl, Time Limited Blackbox Security: Protecting Mobile Agents from Malicious Hosts, Mobile Agents and Security, Lecture Notes in Computer Science, vol. 1419, New York: Springer-Verlag, 1998.
34. T. Sander and C. Tschudin, Protecting Mobile Agents Against Malicious Hosts, Mobile Agents and Security, Lecture Notes in Computer Science, vol. 1419, New York: Springer-Verlag, 1998.
35. J. Riordan and B. Schneier, Environmental Key Generation toward Clueless Agents, Mobile Agents and Security, Lecture Notes in Computer Science, vol. 1419, New York: Springer-Verlag, 1998.
36. A. Corradi, M. Creminini, and C. Stefanelli, Security Models and Abstractions in a Mobile Agent Environment, IEEE Workshop on Collaboration in Presence of Mobility, Stanford, CA, 1998.
37. B. Yee, A Sanctuary for Mobile Agents, DARPA Workshop on Foundations for Secure Mobile Code, Monterey, CA, 1997.
38. G. Karjoth, N. Asokan, and C. Gülcü, Protecting the Computation Results of Free-Roaming Agents, 2nd International Workshop on Mobile Agents, Stuttgart, Germany, 1998.
39. A. Corradi, M. Cremonini, R. Montanari, and C. Stefanelli, Mobile Agents Integrity for Electronic Commerce Applications, Information Systems, vol. 24, no. 6, 1999.
40. G. Vigna, Cryptographic Traces for Mobile Agents, Mobile Agents and Security, Lecture Notes in Computer Science, vol. 1419, New York: Springer-Verlag, 1998.
41. B. Shneider, Toward Fault Tolerant and Secure Agentry, 11th International Workshop on Distributed Algorithms, Lecture Notes in Computer Science, vol. 1320, New York: Springer-Verlag, 1997.
42. D. Wong, N. Paciorek, T. Walsh, J. DiCelie, M. Young, and B. Peet, Concordia: an Infrastructure for Collaborating Mobile Agents, 1st International Workshop on Mobile Agents, Lecture Notes in Computer Science, Vol. 1219, New York: Springer-Verlag, 1997.
43. ObjectSpace — Voyager, http://www.recursionsw.com.
44. IKV++ — GrassHopper, http://www.ikv.de/products/grasshopper/.
45. R. Gray, G. Cybenko, D. Kotz, and D. Rus, D’Agents: Security in a Multiple-Language, Mobile-Agent System, Mobile Agent Security, Lecture Notes in Computer Science, vol 1419, New York: Springer-Verlag, 1998.
46. A. Tripathi, Mobile Agent Programming in Ajanta, 19th IEEE International Conference on Distributed Computing Systems Workshop (ICDCS’99), Austin, TX, 1999.
47. S. Robles, J. Mir, J. Ametller, and J. Borrell, Implementation of Secure Architectures for Mobile Agents in MARISM-A, 4th International Workshop on Mobile Agents for Telecommunication Applications (MATA’02), Lecture Notes in Computer Science, vol. 2521, New York: Springer-Verlag, 2002.
48. R. Montanari, C. Stefanelli, and N. Dulay, Flexible Security Policies for Mobile Agents Systems, Microprocessors and Microsystems, vol. 25, no. 2, 2001.
49. N. Suri, J.M. Bradshaw, M.R. Breedy, P.T. Groth, G.A. Hill, R. Jeffers, T.S. Mitrovich, B.R. Pouliot, and D.S. Smith, NOMADS: Toward a Strong and Safe Mobile Agent System, 4th International Conference on Autonomous Agents, Barcelona, 2000.
50. N. Suri, J.M. Bradshaw, M.R. Breedy, K.M. Ford, P.T. Groth, G.A. Hill, and R. Saavedra, State Capture and Resource Control for Java: the Design and Implementation of the Aroma Virtual Machine, http://nomads.coginst.uwf.edu/.
51. J. Baek, D. Lee, and R.S. Ramakrishna, A Design of Protocol for Detecting an Agent Clone in Mobile Agent Systems and its Correctness Proof, 8th Annual ACM Symposium on Principles of Distributed Computing, Atlanta, 1999.
52. P. Bellavista, A. Corradi, and C. Stefanelli, Java for On-Line Distributed Monitoring of Heterogeneous Systems and Services, The Computer Journal, vol. 45, no. 6, 2002.
53. J.M. Bradshaw, M. Greaves, H. Holmback, T. Karygiannis, W. Jansen, B.G. Silverman, N. Suri, and A. Wong, Agents for the Masses, IEEE Intelligent Systems, vol. 14, no. 2, 1999.
54. A. Patrick, Building Trustworthy Software Agents, IEEE Internet Computing, vol. 6, no. 6, 2002.
55. Y. Gidron, I. Ben-Shaul, O. Holder, and Y. Aridor, Dynamic Configuration of Access Control for Mobile Components in FarGo, Concurrency and Computation: Practice and Experience, vol. 13, no. 1, 2001.
56. S. Wright, R. Chadha, and G. Lapiotis, Special Issue on Policy Based Networking, IEEE Network, vol. 16, no. 2, 2002.
57. J.M. Bradshaw, P. Beautement, L. Bunch, and S.V. Drakunov et al., Making Agents Acceptable to People, Handbook of Intelligent Information Technology, Amsterdam: IOS Press, 2003 (in press).
58. A. Corradi, N. Dulay, R. Montanari, and C. Stefanelli, Policy-Driven Management of Mobile Agent Systems, International Workshop on Policies for Distributed Systems and Networks — Policy 2001, Lecture Notes in Computer Science, vol. 1995, New York: Springer-Verlag, 2001.
59. J.M. Bradshaw, N. Suri, A.J. Canas, R. Davis, K. Ford, R. Hoffman, R. Jeffers, and T. Reichherzer, Terraforming Cyberspace, Computer, vol. 34, no. 7, 2001.
60. P. Bellavista, R. Montanari, and D. Tibaldi, COSMOS: a Context-Centric Access Control Middleware for Mobile Environments, 5th International Worshop on Mobile Agents for Telecommunication Applications (MATA’03), Lecture Notes in Computer Science, vol. 2881, New York: Springer-Verlag, 2003.