SECURITY POLICY CHECKER AND GENERATOR FOR JAVA MOBILE CODES

The original publication is available at www.springerlink.comJava is one of the most famous mobile code systems, and its components can be dynamically downloaded from the other computers over the internet. Because such downloaded components are not always reliable, behaviors of each component are restricted according to the application’s policy. However, it is not so easy for the application users or developers to decide the suitable policy. In this paper, we introduce a tool for generating and checking the security policies for Java application. As we deploy Java components spatially on a window of our tool, we can check which component can be executed or not with respect to a set of security policies. In addition, our tool can generate the minimal set of policies to execute all the deployed components.ArticleEngineering Information Systems in the Internet Context. 255-264 (2002)conference pape