Rico: a security proxy for mobile code

Security technology suitable for the burgeoning embedded system market has not been widespread. Untrusted code downloaded from the Internet poses numerous security risks due to the possible presence of viruses or other malicious entities. System administrators typically administer one or more administrative domains making policy management for mobile code a challenge because of the diverse security rules that must be adhered to. In this paper, we introduce Rico, a binary rewriting, security policy and code management database that sits between clients and servers. The system interposes itself between a client that downloads mobile code and the target server to provide the system administrator a means to secure untrusted code by rewriting it. The system supports the following features: (1) A security policy editor that simplifies policy writing with frame wizards, syntax reminders and error checking. (2) Third-party policy incorporation enabling reuse of security policies created by tr...

• Type: Journal
• Year: 2004
• Where: COMPSEC
• Authors: Yougang Song, Brett D. Fleisch
• Keywords: COMPSEC 2004, Policy, Security, Security Policies