Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

Recently we had proposed two untraceability protocols for mobile agents and began investigating their quality. We believe that quality evaluation of security protocols should extend a sole validation of their security and cover other quality aspects, primarily their efficiency. Thus after conducting a security analysis, we wanted to complement it with a performance analysis. For this purpose we developed a performance evaluation framework, which, as we realised, with certain adjustments, can be applied to evaluate performance of a whole class of security protocols for mobile agents. This class contains the protocols in which each host on the agent's route is responsible for providing a security function, and, inter alia, includes a big variety of integrity checking schemas and accountability mechanisms for mobile agents such as Lee's Partial Results Authentication Codes or family of Karjoth's et al protocols for protection of computation results of free-roaming agents. Finally, we used the framework to evaluate efficiency of our Untraceability Protocol I. In this paper we present the framework and the results of the evaluation.

REFERENCES

• 1: Rafał Leszczyna and Janusz Górski. Untraceability of mobile agents. Technical report, European Commission, Joint Research Centre, Institute for the Protection and security of the Citizen, December 2004.
• 2: Rafal Leszczyna , Janusz Górski, Untraceability of mobile agents, Proceedings of the fourth international joint conference on Autonomous agents and multiagent systems, July 25-29, 2005, The Netherlands [doi>10.1145/1082473.1082709]
• 3: Rafał Leszczyna. The solution for anonymous access of it services and its application to e-health counselling. In Proceedings of the 1st 2005 IEEE International Conference on Technologies for Homeland Security and Safety (TEHOSS '05), volume 1, pages 161--170, Gdańsk, Poland, September 2005. Gdańsk University of Technology.
• 4: Marek Kubale. Introduction to computational complexity and algorithmic graph coloring. Gdańsk Scientific Society, 1998.
• 5: National Institute of Standards and Technology (NIST). Common Criteria for Information Technology Security Evaluation - Part 2: Security Funtional Requirements. U.S. Government Printing Office, 1998.
• 6: Andreas Pfitzmann and Marit Hansen. Anonymity, unobservability, and pseudonymity - a proposal for terminology. draft v0.23. August 2005.
• 7: Ceki Gulcu , Gene Tsudik, Mixing Email with Babel, Proceedings of the 1996 Symposium on Network and Distributed System Security (SNDSS '96), p.2, February 22-23, 1996
• 8: Dirk Westhoff , Markus Schneider, II , Claus Unger , Firoz Kaderali, Protecting a Mobile Agent's Route against Collusions, Proceedings of the 6th Annual International Workshop on Selected Areas in Cryptography, p.215-225, August 09-10, 1999
• 9: Matthias Enzmann, Thomas Kunz, and Markus Schneider. Using mobile agents for privacy amplification in the trade with tangible goods. In 6th World Multi-Conference on Systemics, Cybernetics and Informatics (SCI), volume IV, Orlando, Florida, USA, July 2002.
• 10: Bennet S. Yee, A sanctuary for mobile agents, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001
• 11: Günter Karjoth , N. Asokan , C. Gülcü, Protecting the Computation Results of Free-Roaming Agents, Proceedings of the Second International Workshop on Mobile Agents, p.195-207, September 01, 1998
• 12: G. Vigna. Protecting mobile agents through tracing. In Third Workshop on Mobile Object Systems, 1997. Available at https://citeseer.ist.psu.edu/vigna97protecting.html.
• 13: Rafał Leszczyna. Evaluation of agent platforms. Technical report, European Commission, Joint Research Centre, Institute for the Protection and security of the Citizen, Ispra, Italy, June 2004.
• 14: David B. Stewart. Measuring execution time and real-time performance. In Embedded Systems Conference, San Francisco, April 2001. Embedded Research Solutions. http://www.embedded-zone.com/Publications/mezexec.pdf.
• 15: EU IST-2002-507591 PRIME. Requirements version 0 part 3: Application requirements.
• 16: Royal College of Physicians of London. European working time directive: European dimensions. Internet, November 2002. Available at http://www.rcplondon.ac.uk/college/statements/doc_ewtd_european.asp. Last accessed: October 2005.
• 17: International Network Health Policy & Reform. Health policy monitor: Country facts. Internet, April 2005. Available at http: //www.healthpolicymonitor.org/en/index.html. Last accessed: October 2005.

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
        I.2.11 Distributed Artificial Intelligence

Additional Classification:
  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.4 Systems and Software

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues

General Terms:
Performance, Security

Keywords:
ACM proceedings, anonymity, mobile agents, performance evaluation, privacy, security, security protocols, untraceability