A Pessimistic Approach to Trust

The problem of protecting an execution environment from possibly malicious mobile agents has been studied extensively, but the reverse problem—protecting the agent from malicious execution environments—has not. The authors propose an approach that relies on trusted and tamper-resistant hardware to prevent breaches of trust, rather than correcting them after the fact