MobileTrust a trust enhanced security architecture for mobile精选.pdfVIP

Int. J. Inf. Secur. (2010) 9:153–178 DOI 10.1007/s10207-009-0098-x REGULAR CONTRIBUTION MobileTrust: a trust enhanced security architecture for mobile agent systems Ching Lin · Vijay Varadharajan Published online: 11 December 2009 © Springer-Verlag 2009 Abstract While offering many practical benefits for dis- model. Mobile agents are autonomous programs that migrate tributed applications, mobile agent systems pose some fun- through a network of agent-enabled nodes to accomplish damental security challenges. In this paper, we present a new tasks on behalf of their owners. This ability to move com- approach to mobile agent security which helps to address putation across the nodes on a wide area network helps to some of these challenges. We present a new technique, which achieve the deployment of services and applications in a more we refer to as trust enhanced security, and apply it to mobile flexible, dynamic and customizable way than the traditional agent-based systems; this new technique advocates a shift client-server model [22]. in security solutions from security-centric to trust-centric. However, while the mobile agent model offers these attrac- This extends the traditional security mechanisms by enabling tive features to distributed applications, it gives rise to a trust decisions through explicit specification and manage- range of new security challenges [5,35]. In addition to the ment of security-related trust relationships. The integration standard distributed security issues, such as providing secu- of the trust decisions into security decision-making process rity mechanisms for authentication, authorization, auditing, leads to our trust enhanced security performance. A for- communication, repudiation and accountability, the security mal