A mechanism for secure, fine-grained dynamic provisioning of applications on small devices

Authors:
William R. Bush;Antony Ng;Doug Simon;Bernd Mathiske
Affiliations:
Sun Microsystems Laboratories, Mountain View, CA;D'Crypt Pte. Ltd;Sun Microsystems Laboratories, Mountain View, CA;Sun Microsystems Laboratories, Mountain View, CA
Venue:
CASSIS'04 Proceedings of the 2004 international conference on Construction and Analysis of Safe, Secure, and Interoperable Smart Devices
Year:
2004

Citing 9
Cited 1

Programming semantics for multiprogrammed computations

Communications of the ACM
Security Engineering: A Guide to Building Dependable Distributed Systems

Security Engineering: A Guide to Building Dependable Distributed Systems
Java Virtual Machine Specification

Java Virtual Machine Specification
Java Language Specification, Second Edition: The Java Series

Java Language Specification, Second Edition: The Java Series
Building the IBM 4758 Secure Coprocessor

Computer
A Flexible Containment Mechanism for Executing Untrusted Code

Proceedings of the 11th USENIX Security Symposium
A java virtual machine architecture for very small devices

Proceedings of the 2003 ACM SIGPLAN conference on Language, compiler, and tool for embedded systems
MIDP 2.0 Security Enhancements

HICSS '04 Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 9 - Volume 9
MAPbox: using parameterized behavior classes to confine untrusted applications

SSYM'00 Proceedings of the 9th conference on USENIX Security Symposium - Volume 9

Software, regulation, and domain specificity

Information and Software Technology

Quantified Score

Hi-index	0.00

Visualization

Abstract

As small, secure devices become more powerful and more wide spread, it has become desirable to support the dynamic provisioning and updating of multiple applications on such devices. This paper presents a simple mechanism for performing such provisioning and updating, even if the applications are mutually distrustful. The mechanism extends CLDC JavaTMtechnology with a classfile attribute that carries the certificates necessary to enable the added security.