Verification of Security-Relevant Behavior Model and Security Policy for Model-Carrying Code
- Cite this paper as:
- Wei Y., Zheng X., Ren J., Zheng X., Sun C., Li Z. (2009) Verification of Security-Relevant Behavior Model and Security Policy for Model-Carrying Code. In: Ślęzak D., Kim T., Fang WC., Arnett K.P. (eds) Security Technology. SecTech 2009. Communications in Computer and Information Science, vol 58. Springer, Berlin, Heidelberg
This article presents a method of verifying the safety of untrusted mobile code, using the model of security-relevant behaviors of code. This method verifies whether models violate users’ security policies to help users decide which programs to run and which not, and hence ensures the security of users’ systems and devices. Based on the framework of model-carrying code, we make several improvements: using the extended pushdown automaton (EPDA) as the program behavior model, reducing ambiguity in regular expressions over events (REE), proposing a new verification algorithm according to above significant improvements.
Keywordsmobile code security verification behavior model security policy model-carrying code
Unable to display preview. Download preview PDF.