Integrity protection for Code-on-Demand mobile agents in e-commerce

Tianhan Wang

doi:10.1016/S0164-1212(01)00093-0

Integrity protection for Code-on-Demand mobile agents in e-commerce

2002-02-01

14

OA

AI

DOI：10.1016/S0164-1212(01)00093-0

原文链接

查看原文

摘要

En 中文

The mobile agent paradigm has been proposed as a promising solution to facilitate distributed computing over open and heterogeneous networks. Mobility, autonomy, and intelligence are identified as key features of mobile agent systems and enabling characteristics for the next-generation smart electronic commerce on the Internet. However, security-related issues, especially integrity protection in mobile agent technology, still hinder the widespread use of software agents: from the agent's perspective, mobile agent integrity should be protected against attacks from malicious hosts and other agents. In this paper, we present Code-on-Demand (CoD) mobile agents and a corresponding agent integrity protection scheme. Compared to the traditional assumption that mobile agents consist of invariant code parts, we propose the use of dynamically upgradeable agent code, in which new agent function modules can be added and redundant ones can be deleted at runtime. This approach will reduce the weight of agent programs, equip mobile agents with more flexibility, enhance code privacy and help the recoverability of agents after attack. In order to meet the security challenges for agent integrity protection, we propose agent code change authorization protocols and a double integrity verification scheme. Finally, we discuss the Java implementation of CoD mobile agents and integrity protection. (C) 2002 Elsevier Science Inc. All rights reserved.

Keyword:

mobile agents

integrity protection

code-on-demand

electronic commerce

Integrity protection for Code-on-Demand mobile agents in e-commerce

摘要

AI总结

期刊

机构

引用论文