Resource Protection in a Mobile Agent System
Date of Submission:
January 2, 1998
In this paper we present a scheme for protecting server resources in a mobile agent sytem. This scheme allows a server to grant different access privileges to the agents hosted by it. An agent is bound to a server resource through a proxy object which acts as an identity-based capability. Such capabilities are dynamically customized on a per-agent basis. The privileges granted to an agent can also be changed dynamically and selectively by the agent server. Our design is based on Java's security model, and based on this model we establish the integrity of this scheme under various kinds of potential attacks.