loading...
A Framework for Execution of Secure Mobile Code based on Static Analysis
Arica, Chile November 11-November 12
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/QEST.2004.1XXIV International Conference of the ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Mart? Nordio, Universidad Nacional de R?o Cuarto, Argentina
Ricardo Medel, Stevens Institute of Technology, New Jersey
Francisco Bavera, Universidad Nacional de R?o Cuarto, Argentina
Jorge Aguirre, Universidad Nacional de R?o Cuarto, Argentina
Gabriel Baum, Universidad Nacional de La Plata, LIFIA, Argentina
Since its conception, Proof-Carrying Code (PCC) woke up the interest of the research community and several methods based on this technique were developed. This technique guarantees that untrusted programs run safely in a host machine. In a PCC framework, the code producer equips the produced code with a formal proof establishing that the code satisfy the consumer's security policies. So, the code consumer only needs to verify such proof before the execution of the mobile code. On the other hand, static analysis is a technique useful for the production of the information required to construct the mentioned proof. Based on these two techniques, PCC and static analysis, we developed a framework that guarantees the safe execution of mobile code. This framework uses a high-level intermediate language to verify the security of the code. Acontrol flow graph or an abstract syntax tree with type annotations could be used. Such intermediate representations of the code enable us to use static analysis techniques to generate and verify the type information needed. Moreover, we implemented a prototype as a proof of concept for our framework.
Index Terms:
Mobile Code, Proof-Carrying Code, Certifying Compilation, Security Properties, Automated Program Verification
Citation:
Mart? Nordio, Ricardo Medel, Francisco Bavera, Jorge Aguirre, Gabriel Baum, "A Framework for Execution of Secure Mobile Code based on Static Analysis," sccc, pp.59-66, XXIV International Conference of the Chilean Computer Science Society (SCCC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.