Validating Firewalls in Mobile Ambients

  • Authors:
  • Flemming Nielson;Hanne Riis Nielson;René Rydhof Hansen;Jacob Grydholt Jensen

  • Affiliations:
  • -;-;-;-

  • Venue:
  • CONCUR '99 Proceedings of the 10th International Conference on Concurrency Theory
  • Year:
  • 1999

Quantified Score

Hi-index 0.00

Visualization

Abstract

The ambient calculus is a calculus of computation that allows active processes (mobile ambients) to move between sites. A firewall is said to be protective whenever it denies entry to attackers not possessing the required passwords. We devise a polynomial time algorithm for rejecting proposed firewalls that are not guaranteed to be protective. This is based on a control flow analysis for recording what processes may turn up inside what other processes; in particular, we develop a syntax-directed system for specifying the acceptability of an analysis, we prove that all acceptable analyses are semantically sound, and we demonstrate that each process admits a least analysis.