可演化网络中移动代码的安全机制

Security mechanisms for mobile code in evolutionary networks

针对可演化网络的动态可加载结构带来的潜在安全性问题，研究了移动代码的安全机制。针对移动代码在传输时表现为数据，在执行时表现为程序的特点，研究中考虑了静态的数据安全性和动态的程序安全性两个方面。提出了移动代码的完整性验证机制，利用可信计算平台生成用于加密的密钥，并验证节点的软硬件配置信息，保证了移动代码在传输、部署时的安全性。提出了运行时动态访问控制和资源监控管理的机制，保证了移动代码执行时的安全性。这些机制改善了可演化网络运行的安全性。

Considering that evolutionary networks with dynamic program loading structures introduces potential security problems, some security mechanisms for the mobile code in this kind of networks were proposed. Because the mobile code is in the form of data when in transmission while in the form of program when in execution, the research addressed both the security of static data and the security of dynamic program. A mechanism for verifying the integrity of the mobile code was proposed to ensure the safe transmitting and deploying of the mobile code. The trust platform module was used to generate the encryption key and to verify the hardware and software configurations of the node. The runtime dynamic access control mechanism and the resource monitor management mechanism were proposed to guarantee the mobile code＇ s safe execution. These mechanisms improve the security of evolutionary networks.