A configurable mobile agent data protection protocol

ABSTRACT

This paper addresses the problem of protecting the data carried by mobile agents from the possible attacks of malicious execution hosts. Specifically, we consider protection mechanisms that, instead of preventing malicious hosts from tampering with the collected data, simply aim at detecting tampering attempts. The various proposals that appeared in the literature so far are characterized by several limitations, some of which have been pointed out recently. In particular, data truncations may not be detected, and a binding of the static code to the collected data is missing. This paper takes into account such criticisms and formally defines a new protocol that does not suffer from all the previous limitations. Such a protocol is also configurable, according to the protection level needed. In this way, the minimum protection level compatible with the needed security properties can be selected each time.

REFERENCES

• 1: A. Corradi, R. Montanari, and C. Stefanelli. Mobile agents integrity in E-commerce applications. In Proceedings of the 19th IEEE International Conference on Distributed Computing Systems Workshop (ICDCS'99), pages 59--64, Austin, Texas, May 31 -- June 5 1999. IEEE Computer Society Press.
• 2: Antonio Corradi , Rebecca Montanari , Cesare Stefanelli, Mobile Agents Protection in the Internet Environment, 23rd International Computer Software and Applications Conference, p.80-85, October 19-26, 1999
• 3: Günter Karjoth , N. Asokan , C. Gülcü, Protecting the Computation Results of Free-Roaming Agents, Proceedings of the Second International Workshop on Mobile Agents, p.195-207, September 01, 1998
• 4: Neeran M. Karnik , Anand R. Tripathi, A Security Architecture for Mobile Agents in Ajanta, Proceedings of the The 20th International Conference on Distributed Computing Systems ( ICDCS 2000), p.402, April 10-13, 2000
• 5: Volker Roth, On the Robustness of Some Cryptographic Protocols for Mobile Agent Protection, Proceedings of the 5th International Conference on Mobile Agents, p.1-14, December 02-04, 2001
• 6: V. Roth. Programming Satan's agents. In Proceedings of the 1st International Workshop on Secure Mobile Multi-Agent Systems, Montreal, Canada, 2001.
• 7: Volker Roth, Empowering Mobile Software Agents, Proceedings of the 6th International Conference on Mobile Agents, p.47-63, October 22-25, 2002
• 8: Paul F. Syverson , David M. Goldschlag , Michael G. Reed, Anonymous Connections and Onion Routing, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.44, May 04-07, 1997
• 9: Xiao Feng Wang , Xun Yi , Kwok-Yan Lam , Eiji Okamoto, Secure Information Gathering Agent for Internet Trading, Selected Papers from the 4th Australian Workshop on Distributed Artificial Intelligence, Multi-Agent Systems: Theories, Languages, and Applications, p.183-193, July 13, 1998
• 10: Bennet S. Yee, A sanctuary for mobile agents, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems

General Terms:
Security, Theory

Keywords:
cryptographic protocols, data authenticity, data integrity, mobile agents