对机器语言进行检查保证移动代码安全

Machine Code Checking for Security of Mobile Code

介绍了一种在安全策略语言的指导下，对机器语言进行安全检查的方法。它使用基于编程语言的理论和实现技术，通过分析程序语义和系统调用等特征，对程序进行检查。安全策略语言提供了一种灵活、统一的安全描述手段,希望这种将安全检查的实现机制和检查内容分离的做法能给其他的研究者提供了有用的参考。

Security problem of mobile code has attracted the most attention with the rapid development of network. This work introduces a new policy-directed approach to check mobile code safety. It uses the method based on techniques of programming language theory and implementation to analyze the instructions and the system call. Security-policy language provides a flexible and uniform method to describe security properties, it separate security-policy from checking mechanism. It hopes this approach can give a useful reference to other researchers.