Security Policies as Membranes in Systems for Global Computing
Security Policies as Membranes in Systems for Global Computing
We propose a simple global computing framework, whose main concern is code migration. Systems are structured in sites, and each site is divided into two parts: a computing body, and a membrane which regulates the interactions between the computing body and the external environment. More precisely, membranes are filters which control access to the associated site, and they also rely on the well-established notion of trust between sites. We develop a basic theory to express and enforce security policies via membranes. Initially, these only control the actions incoming agents intend to perform locally. We then adapt the basic theory to encompass more sophisticated policies, where the number of actions an agent wants to perform, and also their order, are considered.
code migration, membranes, containment, finite automata, trust, foundations of distributed systems, distributed calculi
163-21
Gorla, D.
50a6c562-72c9-4512-87e9-003654d30a41
Hennessy, M.
5a87dd80-a4c2-4540-ae1e-f08fe9e51221
Sassone, V.
df7d3c83-2aa0-4571-be94-9473b07b03e7
2005
Gorla, D.
50a6c562-72c9-4512-87e9-003654d30a41
Hennessy, M.
5a87dd80-a4c2-4540-ae1e-f08fe9e51221
Sassone, V.
df7d3c83-2aa0-4571-be94-9473b07b03e7
Gorla, D., Hennessy, M. and Sassone, V.
(2005)
Security Policies as Membranes in Systems for Global Computing.
Logical Methods in Computer Science, 1 (3:2), .
Abstract
We propose a simple global computing framework, whose main concern is code migration. Systems are structured in sites, and each site is divided into two parts: a computing body, and a membrane which regulates the interactions between the computing body and the external environment. More precisely, membranes are filters which control access to the associated site, and they also rely on the well-established notion of trust between sites. We develop a basic theory to express and enforce security policies via membranes. Initially, these only control the actions incoming agents intend to perform locally. We then adapt the basic theory to encompass more sophisticated policies, where the number of actions an agent wants to perform, and also their order, are considered.
Text
membLMCSOff.pdf
- Other
More information
Published date: 2005
Additional Information:
To appear
Venue - Dates:
Foundations of Global Ubiquitous Computing, FGUC 2004., 2005-01-01
Keywords:
code migration, membranes, containment, finite automata, trust, foundations of distributed systems, distributed calculi
Organisations:
Web & Internet Science
Identifiers
Local EPrints ID: 261849
URI: http://eprints.soton.ac.uk/id/eprint/261849
PURE UUID: 59a31af0-1b12-4d11-bcd4-bb35b117c4c7
Catalogue record
Date deposited: 27 Jan 2006
Last modified: 10 Sep 2024 01:40
Export record
Contributors
Author:
D. Gorla
Author:
M. Hennessy
Author:
V. Sassone
Download statistics
Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.
View more statistics