Secure Prolog-based mobile code

  • Authors:
  • Seng Wai Loke;Andrew Davison

  • Affiliations:
  • DSTC, Monash University, Caulfield, Victoria 3145, Australia (e-mail: swloke@dstc.monash.edu.au);Department of Computer Engineering, Prince of Songkla University, Hat Yai, Songkhla 90112, Thailand (e-mail: dandrew@ratree.psu.ac.th)

  • Venue:
  • Theory and Practice of Logic Programming
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

LogicWeb mobile code consists of Prolog-like rules embedded in Web pages, thereby adding logic programming behaviour to those pages. Since LogicWeb programs are downloaded from foreign hosts and executed locally, there is a need to protect the client from buggy or malicious code. A security model is crucial for making LogicWeb mobile code safe to execute. This paper presents such a model, which supports programs of varying trust levels by using different resource access policies. The implementation of the model derives from an extended operational semantics for the LogicWeb language, which provides a precise meaning of safety.