一个抗截断攻击的移动代理数据保护方案

Method for Protecting Mobile Agents Data Against Truncation

研究了如何保护自由漫游的移动代理运行结果安全问题,总结了当前已有方案的特点和不足,指出了这些方案中存在的一个共同缺陷假设,即对于路由主机,同一移动代理只能经过其一次,不能多次访问。提出了一个抗截断攻击的保护移动代理运行结果方案,满足安全要求和抗弱截断攻击,去掉了当前方案的缺陷假设,增强了协议应用的灵活性。

This paper studies how to protect the computational results of free-roaming agents and analyzes the advantages and disadvantages of the existing solutions. After that, an assumption existing in these protocols which limits the mobile agent＇s flexibility is pointed out, the mobile agent can pass a host only once and must not visit the same host many times. A new method for protecting mobile agent data against truncation is presented and its security is analyzed. The results show that this method not only satisfies security requirements but also removes the assumption in existing protocols.