Secure and efficient mobile agent application reuse using patterns

ABSTRACT

As wide-area open networks like the Internet and intranets grow larger, mobile agent technology is attracting more attention. Mobile agents are units of software that can deal with environmental changes and the various requirements of open networks through features such as autonomy, mobility, intelligence, cooperation, and reactivity. In addition, some people consider the agent technology as a promising solution to the reuse issue because of the aspect of the agents as highly adaptable software components. However, since the usual development methods of secure mobile agent applications are not sufficiently investigated, the technology is not yet widespread. In this paper, we propose a formal framework that supports mobile agent application development and reuse with consideration of the trade-offs between the security issues and the performance issues. In our framework, we design a mobile agent application by building a computational cost model and a security model, and combining patterns so that the combination satisfies the models. Therefore we can develop the application considering the security and the performance trade-offs. Since the models and the patterns are presented according to a formal framework, we can make sure that the pattern combination satisfies the models rigorously. In addition, if the security policy of the new environment is different from the old one in reusing the system in a new organization, we can easily modify and adapt the behavior because the pattern application can be figured out automatically by an algorithm.

REFERENCES

• 1: Amund Aarsten,Davide Brugali,and Giuseppe Menga.Patterns for cooperation.In Proceedings of PLOP'96 number AI98-40,pages 55 -62,1996.
• 2: Yariv Aridor , Danny B. Lange, Agent design patterns: elements of agent application design, Proceedings of the second international conference on Autonomous agents, p.108-115, May 10-13, 1998, Minneapolis, Minnesota, United States [doi>10.1145/280765.280784]
• 3: Mario Baldi , Gian Pietro Picco, Evaluating the tradeoffs of mobile code design paradigms in network management applications, Proceedings of the 20th international conference on Software engineering, p.146-155, April 19-25, 1998, Kyoto, Japan
• 4: Shimshon Berkovits , Joshua D. Guttman , Vipin Swarup, Authentication for Mobile Agents, Mobile Agents and Security, p.114-136, January 1998
• 5: Myles Brandon Bogner , Stan Franklin, Realizing "consciousness" in software agents, 1999
• 6: Je .rey Bradshaw.Software Agents AAAI Press/The MIT Press,1997.
• 7: Antonio Carzaniga , Gian Pietro Picco , Giovanni Vigna, Designing distributed applications with mobile code paradigms, Proceedings of the 19th international conference on Software engineering, p.22-32, May 17-23, 1997, Boston, Massachusetts, United States [doi>10.1145/253228.253236]
• 8: David M. Chess, Security Issues in Mobile Code Systems, Mobile Agents and Security, p.1-14, January 1998
• 9: Premkumar T. Devanbu , Stuart Stubblebine, Software engineering for security: a roadmap, Proceedings of the Conference on The Future of Software Engineering, p.227-239, June 04-11, 2000, Limerick, Ireland [doi>10.1145/336512.336559]
• 10: A.H.Eden,Y.Hirshfeld,and A.Yehudai.Multicast -observer =typed message.C++ Report October 1998.
• 11: Erich Gamma,Richard Helm,Ralph Johnson,and John Vlissides.Design Patterns Addison-Wesley, 1995.
• 12: Birgit Geppert , Frank Roessler, Generic Engineering of Communication Protocols - Current Experience and Future Issues, Proceedings of the 1st International Conference on Formal Engineering Methods, p.70, November 12-14, 1997
• 13: Steven Y.Goldsmith,Shanon V.Spires,and Laurence R.Phillips.Object framework for agent system development.In Matthias Klusch and Gerhard Weib,editors,Proceedings of AAAI-98 Workshop on Software Tools for Developing Agents number AI98-40,pages 246 -261,1998.
• 14: Fritz Hohl, Time Limited Blackbox Security: Protecting Mobile Agents From Malicious Hosts, Mobile Agents and Security, p.92-113, January 1998
• 15: Daniel Hagimont , L. Ismail, A performance evaluation of the mobile agent paradigm, Proceedings of the 14th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications, p.306-313, November 01-05, 1999, Denver, Colorado, United States
• 16: Günter Karjoth , Danny B. Lange , Mitsuru Oshima, A Security Model for Aglets, IEEE Internet Computing, v.1 n.4, p.68-77, July 1997 [doi>10.1109/4236.612220]
• 17: Elizabeth A.Kendall,Chirag V.Pathak,P.V.Murali Krishna,and C.B.Suresh.The layered agent pattern language.In Proceedings of PLoP'97 1997.
• 18: F.Kumeno,Y.Tahara,A.Ohsuga,and S.Honiden. Flage:Field-oriented language for agents model.In W.B.Frakes,editor,Third International Conference on Software Reuse pages 198 -199,Los Alamitos, 1994.IEEE Computer Society Press.
• 19: Tommi Mikkonen, Formalizing design patterns, Proceedings of the 20th international conference on Software engineering, p.115-124, April 19-25, 1998, Kyoto, Japan
• 20: George C. Necula , Peter Lee, Safe, Untrusted Agents Using Proof-Carrying Code, Mobile Agents and Security, p.61-91, January 1998
• 21: John K. Ousterhout , Jacob Y. Levy , Brent B. Welch, The Safe-Tcl Security Model, Mobile Agents and Security, p.217-234, January 1998
• 22: Tomas Sander , Christian F. Tschudin, Protecting Mobile Agents Against Malicious Hosts, Mobile Agents and Security, p.44-60, January 1998
• 23: Alberto Silva and Jose Delgado.The agent pattern:A design pattern for dynamic and distributed applications.In Third European Conference on Pattern Languages of Programming and Computing 1998.
• 24: Yasuyuki Tahara , Akihiko Ohsuga , Shinichi Honiden, Agent system development method based on agent patterns, Proceedings of the 21st international conference on Software engineering, p.356-367, May 16-22, 1999, Los Angeles, California, United States [doi>10.1145/302405.302657]
• 25: Robert Tolksdorf, Coordinating Patterns of Mobile Information Agents, Proceedings of the Second International Workshop on Cooperative Information Agents II, Learning, Mobility and Electronic Commerce for Information Discovery on the Internet, p.246-261, July 04-07, 1998
• 26: Giovanni Vigna, Cryptographic Traces for Mobile Agents, Mobile Agents and Security, p.137-153, January 1998
• 27: Mobile Agents and Security, January 1998
• 28: N.Yoshioka,Y.Tahara,A.Ohsuga,and S.Honiden. Safety and security in mobile agents.In P.Ciancarini and M.W oldridge,editors,Draft Proceedings of AOSE2000 pages 107 -126,2000.

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

  D. Software
  D.2 SOFTWARE ENGINEERING
        D.2.11 Software Architectures
            Subjects: Patterns (e.g., client/server, pipeline, blackboard)
      D.2.4 Software/Program Verification
          Subjects: Correctness proofs
  D.3 PROGRAMMING LANGUAGES
      D.3.3 Language Constructs and Features
          Subjects: Frameworks

  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.3 Communications Applications

          Nouns: Internet

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.3 Software Management
          Subjects: Software development

General Terms:
Design, Languages, Management, Performance, Reliability, Theory, Verification