A Mechanism to Avoid Collusion Attacks Based on Code Passing in Mobile Agent Systems

  • Authors:
  • Marc Jaimez;Oscar Esparza;Jose L. Muñoz;Juan J. Alins-Delgado;Jorge Mata-Díaz

  • Affiliations:
  • Departament Enginyeria Telemàtica, Universitat Politècnica de Catalunya, Barcelona, Spain C3 08034;Departament Enginyeria Telemàtica, Universitat Politècnica de Catalunya, Barcelona, Spain C3 08034;Departament Enginyeria Telemàtica, Universitat Politècnica de Catalunya, Barcelona, Spain C3 08034;Departament Enginyeria Telemàtica, Universitat Politècnica de Catalunya, Barcelona, Spain C3 08034;Departament Enginyeria Telemàtica, Universitat Politècnica de Catalunya, Barcelona, Spain C3 08034

  • Venue:
  • WISTP '09 Proceedings of the 3rd IFIP WG 11.2 International Workshop on Information Security Theory and Practice. Smart Devices, Pervasive Systems, and Ubiquitous Networks
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Mobile agents are software entities consisting of code, data, state and itinerary that can migrate autonomously from host to host executing their code. Despite its benefits, security issues strongly restrict the use of code mobility. The protection of mobile agents against the attacks of malicious hosts is considered the most difficult security problem to solve in mobile agent systems. In particular, collusion attacks have been barely studied in the literature. This paper presents a mechanism that avoids collusion attacks based on code passing. Our proposal is based on a Multi-Code agent, which contains a different variant of the code for each host. A Trusted Third Party is responsible for providing the information to extract its own variant to the hosts, and for taking trusted timestamps that will be used to verify time coherence.