Matching Policies with Security Claims of Mobile Applications

The Security-by-Contract (S×C) framework has been recently proposed to address the trust relationship problem of the current security model adopted for mobile devices. The key idea of S×C (similar to the one of Model-Carrying Code) is to augment mobile code with a claim on its security behavior (a contract) that could be matched against a mobile platform policy before downloading the code. The rational is that, thanks to S×C, a digital signature does not just certify the origin of the code but also bind together the code with a contract. In this paper we address one of the key issue of the S×C paradigm, namely the contract-policy matching problem, proposing a prototype for matching policies with security claims of mobile applications. This result can be considered a key step towards the achievement of the S×C main goal: provide a semantics for digital signatures on mobile code, thus being a step in the transition from trusted code to trustworthy code.

• Type: Conference
• Year: 2008
• Where: IEEEARES
• Authors: Nataliia Bielova, Marco Dalla Torre, Nicola Dragoni, Ida Siahaan
• Keywords: Digital Signatures, IEEEARES 2008, Mobile Code, Mobile Platform Policy, Security Privacy