Programming languages for mobile code

ABSTRACT

Sun's announcement of the programming language Java more that anything popularized the notion of mobile code, that is, programs traveling on a heterogeneous network and automatically executing upon arrival at the destination. We describe several classes of mobile code and extract their common characteristics, where security proves to be one of the major concerns. With these characteristics as reference points, we examine six representative languages proposed for mobile code. The conclusion of this study leads to our recommendations for future work, illustrated by examples of ongoing research.

REFERENCES

• 1: Ali-Reza Adl-Tabatabai , Geoff Langdale , Steven Lucco , Robert Wahbe, Efficient and language-independent mobile programs, Proceedings of the ACM SIGPLAN 1996 conference on Programming language design and implementation, p.127-136, May 21-24, 1996, Philadelphia, Pennsylvania, United States
• 2: Ken Arnold , James Gosling, The Java programming language (2nd ed.), ACM Press/Addison-Wesley Publishing Co., New York, NY, 1998
• 3: BALL, S. 1996. The Surflt! browser. Available at http://pastime.anu.edu.au/Surflt.
• 4: Jean-Pierre Banâtre , Ciarán Bryce , Daniel Le Métayer, Compile-Time Detection of Information Flow in Sequential Programs, Proceedings of the Third European Symposium on Research in Computer Security, p.55-73, November 07-09, 1994
• 5: BELL, D., AND LAPADULA, L. 1973. Secure computer system: Mathematical foundations and model. Tech. Rep. M74-244, MITRE Corp.
• 6: BILLON, J.-P. 1996. Java security: Weaknesses and solutions. Available at http://www.dyade.fr/actions/VI P/JS_pap2.html.
• 7: Andrew Birrell , Greg Nelson , Susan Owicki , Edward Wobber, Network objects, Proceedings of the fourteenth ACM symposium on Operating systems principles, p.217-230, December 05-08, 1993, Asheville, North Carolina, United States
• 8: BJORNER, D. 1991a. Software Architectures and Programming Systems Design; Volume I: Specification Principles--the VDM Approach. Addison-Wesley/ACM Press.
• 9: BJORNER, D. 1991b. Software Architectures and Programming Systems Design; Volume II: Implementation Principles--the VDM Approach. Addison-Wesley/ACM Press.
• 10: BORENSTEIN, N.S. 1994. Email with a mind of its own. Available at ftp://ftp.fv.com/pub/ code/other/safe-tcl.tar.gz, 1994.
• 11: Roberta Borgia , Pierpaolo Degano , Corrado Priami , Lone Leth , Bent Thomsen, Understanding Mobile Agents via a Non-Interleaving Semantics for Facile, Proceedings of the Third International Symposium on Static Analysis, p.98-112, September 24-26, 1996
• 12: BROCK, S., AND GEORGE, C.W. 1990. The RAISE method manual. Tech. Rep. LACOS/CRI/ DOC/3, CRI: Computer Resources International.
• 13: Luca Cardelli, A language with distributed scope, Proceedings of the 22nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.286-297, January 23-25, 1995, San Francisco, California, United States [doi>10.1145/199448.199516]
• 14: D. Dean , Felten , Wallach, Java Security: From HotJava to Netscape and Beyond, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.190, May 06-08, 1996
• 15: Dorothy E. Denning , Peter J. Denning, Certification of programs for secure information flow, Communications of the ACM, v.20 n.7, p.504-513, July 1977 [doi>10.1145/359636.359712]
• 16: DROSSOPOULOU, S., AND EISENBACH, S. 1996. Proving the soundness of the Java type system. Tech. Rep., Imperial College, Oct.
• 17: Robert Fox, News track, Communications of the ACM, v.39 n.2, p.9-10, Feb. 1996 [doi>10.1145/230798.358186]
• 18: FREIER, A. O., KARLTON, P., AND KOCHER, P. C. 1996. The SSL protocol. Available at http:// home.netscape.com/eng/ssl3/index.html, March.
• 19: GENERAL MAGIC. 1996. The Telescript home page. Available at http://www.genmagic.com/ Telescript.
• 20: James Gosling , Bill Joy , Guy L. Steele, The Java Language Specification, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1996
• 21: HANSEN, W.J. 1990. Enhancing documents with embedded programs: How Ness extends insets in the Andrew toolkit. In Proceedings of IEEE Computer Society 1990 International Conference on Computer Languages, (New Orleans, March) IEEE Computer Society Press, Los Alamitos, CA, 23-32.
• 22: Christian Huitema, IPv6: the new Internet protocol, Prentice-Hall, Inc., Upper Saddle River, NJ, 1995
• 23: JAVASOFT. 1996. JavaSoft products. Available at http://www.javasoft.com/nav/read/prod ucts. html.
• 24: Frederick Knabe, An Overview of Mobile Agent Programming, Selected papers from the 5th LOMAPS Workshop on Analysis and Verification of Multiple-Agent Languages, p.100-115, June 24-26, 1996
• 25: Carl E. Landwehr, Formal Models for Computer Security, ACM Computing Surveys (CSUR), v.13 n.3, p.247-278, Sept. 1981 [doi>10.1145/356850.356852]
• 26: LANO, K. 1996. The B Language and Method. Springer-Verlag.
• 27: LEROY, X. 1997. Objective Caml. Available at http://pauillac.inria.fr/ocaml/.
• 28: LUCENT TECHNOLOGIES. 1996. The Inferno home page. Available at http://inferno.bell-labs.com/ inferno/index.html.
• 29: J. Malenfant, On the semantic diversity of delegation-based programming languages, Proceedings of the tenth annual conference on Object-oriented programming systems, languages, and applications, p.215-230, October 15-19, 1995, Austin, Texas, United States
• 30: MCLEAN, J. 1994. Security models. In Encyclopedia of Software Engineering, J. Mariniak, Ed., John Wiley & Sons, New York.
• 31: MIZUNO, M., AND SCHMIDT, D.A. 1992. A security flow control algorithm and its denotational semantics correctness proof. Formal Aspects Comput. 4, 6A, 727-754.
• 32: George C. Necula , Peter Lee, Safe kernel extensions without run-time checking, Proceedings of the second USENIX symposium on Operating systems design and implementation, p.229-243, October 29-November 01, 1996, Seattle, Washington, United States
• 33: NETSCAPE. 1997. JavaScript language specification. Available at http://developer.netscape. com/library/documentation/index.html.
• 34: Hanne Riis Nielson , Flemming Nielson, Semantics with applications: a formal introduction, John Wiley & Sons, Inc., New York, NY, 1992
• 35: John K. Ousterhout, Tcl and the Tk toolkit, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1994
• 36: PIKE, R. 1997. Private communication.
• 37: RESCORLA, E., AND SCHIFFMAN, A. 1996. The secure hypertext transfer protocol. Available at ftp ://ds.internic.net/internet-d rafts/d raft-ietfwts-shttp-O3.txt, July.
• 38: ROUAIX, F. 1996a. MMM browser home page. Available at http://pauillac.inria.fr/-rouaix/ rnrnrn/.
• 39: François Rouaix, A Web navigator with applets in Caml, Proceedings of the fifth international World Wide Web conference on Computer networks and ISDN systems, p.1365-1371, May 1996, Paris, France
• 40: Deborah Russell , G. T. Gangemi, Sr., Computer security basics, O'Reilly & Associates, Inc., Sebastopol, CA, 1991
• 41: David A. Schmidt, Denotational semantics: a methodology for language development, William C. Brown Publishers, Dubuque, IA, 1986
• 42: J. M. Spivey, Understanding Z: a specification language and its formal semantics, Cambridge University Press, New York, NY, 1988
• 43: Dennis Volpano , Cynthia Irvine , Geoffrey Smith, A sound type system for secure flow analysis, Journal of Computer Security, v.4 n.2-3, p.167-187, Jan. 1996

INDEX TERMS

Primary Classification:
  D. Software
  D.3 PROGRAMMING LANGUAGES
      D.3.2 Language Classifications
          Subjects: Object-oriented languages

Additional Classification:
  A. General Literature

  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems
          Subjects: Distributed applications

  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

Keywords:
Java, Limbo, Objective Caml, Obliq, Safe-Tcl, distribution, formal methods, mobile code, network programming, object orientation, portability, safety, security, telescript