Portal de Periódicos da CAPES

A Service-oriented Approach to Mobile Code Security

2011; Elsevier BV; Volume: 5; Linguagem: Inglês

10.1016/j.procs.2011.07.069

1877-0509

Micah Jones, Kevin W. Hamlen,

Distributed systems and fault tolerance

Client software for modern service-oriented web architectures is often implemented as mobile code applets made available by service-providers. Protecting clients from malicious mobile code is therefore an important concern in these architectures; however, the burden of security enforcement is typically placed entirely on the client. This approach violates the service-oriented paradigm. A method of realizing mobile code security as a separate service in a service-oriented web architecture is proposed. The security service performs in-lined reference monitoring of untrusted Java binaries on-demand for client-specified security policies. An XML format for specifying these policies is outlined, and preliminary experiments demonstrate the feasibility of the approach.