可演化网络中移动代码的安全机制  

Security mechanisms for mobile code in evolutionary networks

作　　者：刘涛[1,2] 王锐[3] 钱德沛[1,3] 

机构地区：[1]西安交通大学电子与信息工程学院,西安710049 [2]中国科学院深圳先进技术研究院,深圳518055 [3]北京航空航天大学计算机学院,北京100191

出　　处：《高技术通讯》2012年第2期147-152,共6页Chinese High Technology Letters

基　　金：863计划（2006AA01A109,2009AA01A131,2009AA012144）和国家自然科学基金（60673180,90812001）资助项目.

摘　　要：针对可演化网络的动态可加载结构带来的潜在安全性问题，研究了移动代码的安全机制。针对移动代码在传输时表现为数据，在执行时表现为程序的特点，研究中考虑了静态的数据安全性和动态的程序安全性两个方面。提出了移动代码的完整性验证机制，利用可信计算平台生成用于加密的密钥，并验证节点的软硬件配置信息，保证了移动代码在传输、部署时的安全性。提出了运行时动态访问控制和资源监控管理的机制，保证了移动代码执行时的安全性。这些机制改善了可演化网络运行的安全性。Considering that evolutionary networks with dynamic program loading structures introduces potential security problems, some security mechanisms for the mobile code in this kind of networks were proposed. Because the mobile code is in the form of data when in transmission while in the form of program when in execution, the research addressed both the security of static data and the security of dynamic program. A mechanism for verifying the integrity of the mobile code was proposed to ensure the safe transmitting and deploying of the mobile code. The trust platform module was used to generate the encryption key and to verify the hardware and software configurations of the node. The runtime dynamic access control mechanism and the resource monitor management mechanism were proposed to guarantee the mobile code＇ s safe execution. These mechanisms improve the security of evolutionary networks.

关 键 词：可演化网络 移动代码 网络安全 完整性验证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]