NDLI: A framework for execution of secure mobile code based on static analysis

Content Provider	IEEE Xplore Digital Library
Author	Nordio, M. Bavera, F. Medel, R. Aguirre, J. Baum, G.
Copyright Year	2004
Description	Author affiliation: Departamento de Comput., Univ. Nacional de Rio Cuarto, Argentina (Nordio, M.; Bavera, F.)
Abstract	Since its conception, proof-carrying code (PCC) woke up the interest of the research community and several methods based on this technique were developed. This technique guarantees that untrusted programs run safely in a host machine. In a PCC framework, the code producer equips the produced code with a formal proof establishing that the code satisfies the consumer's security policies. So, the code consumer only needs to verify such proof before the execution of the mobile code. On the other hand, static analysis is a technique useful for the production of the information required to construct the mentioned proof. Based on these two techniques, PCC and static analysis, we developed a framework that guarantees the safe execution of mobile code. This framework uses a high-level intermediate language to verify the security of the code. A control flow graph or an abstract syntax tree with type annotations could be used. Such intermediate representations of the code enable us to use static analysis techniques to generate and verify the type information needed. Moreover, we implemented a prototype as a proof of concept for our framework.
Sponsorship	The Chilean Comput. Sci. Soc
Starting Page	59
Ending Page	66
File Size	362983
Page Count	8
File Format	PDF
ISBN	0769521851
DOI	10.1109/QEST.2004.1
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2004-11-12
Publisher Place	Chile
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Java Certifying Compilation Engineering profession Mobile Code Flow graphs Power system security Information analysis Proof-Carrying Code Tree graphs Automated Program Verification Security Properties Information security Prototypes Production Safety
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Secure execution of mobile java using static analysis and proof carrying code.

Secure Execution of Mobile Java using Static Analysis and Proof Carrying Code (2007)

Secure information flow by self-composition (2010).

Automated Techniques for Provably Safe Mobile Code (2000)

Preservation of proof obligations for hybrid verification methods (2008)

Automated Techniques for Provably Safe Mobile Code (2000)

A Certifying Compiler for Clike Subset of C Language

2011 Ninth Annual International Conference on Privacy, Security and Trust An Implementation of a Verification Condition Generator for Foundational Proof-Carrying Code

Trust Management and Proof-Carrying Code in Secure Mobile-Code Applications (1997)

A framework for execution of secure mobile code based on static analysis

Similar Documents

Secure execution of mobile java using static analysis and proof carrying code.

Secure Execution of Mobile Java using Static Analysis and Proof Carrying Code (2007)

Secure information flow by self-composition (2010).

Automated Techniques for Provably Safe Mobile Code (2000)

Preservation of proof obligations for hybrid verification methods (2008)

Automated Techniques for Provably Safe Mobile Code (2000)

A Certifying Compiler for Clike Subset of C Language

2011 Ninth Annual International Conference on Privacy, Security and Trust An Implementation of a Verification Condition Generator for Foundational Proof-Carrying Code

Trust Management and Proof-Carrying Code in Secure Mobile-Code Applications (1997)

A framework for execution of secure mobile code based on static analysis