Title :
Project TRANSPROSE: reconciling mobile-code security with execution efficiency
Author :
Amme, Wolfram ; Dalton, Niall ; Frohlich, Peter H. ; Haldar, Vivek ; Housel, Peter S. ; Von Ronne, Jeffery ; Stork, Christian H. ; Zhenochin, Sergiy ; Franz, Michael
Author_Institution :
Dept. of Inf. & Comput. Sci., California Univ., Irvine, CA, USA
Abstract :
Project TRANSPROSE is a comprehensive research project investigating techniques for transporting programs securely over potentially insecure channels. The central focus of this project is the development of a blueprint for a next-generation mobile code distribution format. A problem of previous approaches to mobile code security has been that the additional provisions for security lead to a loss of efficiency, often to the extent of making an otherwise virtuous security scheme unusable for all but trivial programs. TRANSPROSE strives to deviate from the common approach of studying security in isolation and instead focuses simultaneously on multiple aspects of mobile code quality. Besides security, such aspects include encoding density, speed of dynamic code generation and the eventual execution performance. This paper gives a high-level overview of Project TRANSPROSE and presents initial results, which include a highly effective syntax-based compression scheme for Java programs, as well as a performance-oriented intermediate program representation providing guaranteed security
Keywords :
data compression; distributed programming; security of data; software performance evaluation; software quality; telecommunication channels; telecommunication security; Java programs; Project TRANSPROSE; dynamic code generation speed; efficiency; encoding density; guaranteed security; insecure channels; mobile code distribution format; mobile code quality; mobile code security; performance-oriented intermediate program representation; secure program transportation; software execution performance; syntax-based compression scheme; Computer science; Computer security; Encoding; Government; Information security; Internet; Java; Law; Legal factors; Mobile computing;
Conference_Titel :
DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings
Conference_Location :
Anaheim, CA
Print_ISBN :
0-7695-1212-7
DOI :
10.1109/DISCEX.2001.932172