PCC技术在移动Agent系统安全中的应用初探  

Some Research on Proof-Carrying Code in Mobile Agent Security

作　　者：冯扬悦[1] 陶先平[1] 吕建[1] 

机构地区：[1]南京大学计算机软件新技术国家重点实验室,南京210093

出　　处：《计算机科学》2002年第10期20-24,5,共6页Computer Science

摘　　要：1 引言移动代码指可以在一台或多台远程主机上而不仅限于在源主机上运行的程序。从Java applet、ActiveX程序直至90年代中期提出的移动Agent技术均属于这一范畴。其思想是化远程调用为本地执行,从而具有减少网络负载、避免网络延时、动态适应、异步自主执行、支持异构体系、健壮性和容错性等优点。可以说,代码的可移动性是对传统非分布环境中可编程性的很大扩展。然而,高效与灵活的增长并非不无代价:分布式环境中代码的移动使安全威胁增多,安全保护更为复杂,安全课题也更为重要。Proof-carrying code (PCC for short)is a software mechanism that allows a host system to determine with certainty that it is safe to execute a program supplied by an untrusted source. Unlike traditional cryptography-based strategy, PCC helps a code consumer establish trust towards the code itself but not necessarily to its producer, thus it is useful for language interoperability, OS kernel and mobile code security etc. This article emphasizes on PCC as one of the technologies for the latter, introduces its primary ideas and implementing issues, and tries to exploit its application in mobile agent security.

关 键 词：移动AGENT系统 PCC 安全 携证代码 密码学 信息安全 移动代码 

分 类 号：TN918.1[电子电信—通信与信息系统] TP30[电子电信—信息与通信工程]