A new and practical approach to secure mobile agent server development

This paper presents a secure agent server named J-SAS. J-SAS is a secure and distributed execution environment for mobile agents. The core of the J-SAS is an agent virtual machine fulfilling the same functions as a traditional host machine. J-SAS considers the agent as an autonomous entity with execution code, state, specification and certification parts. J-SAS provides mobility, state dependency, run time code altering, and communications facilities. J-SAS consists of two main parts: agent gateway (AgG) and agent server (AgS). AgG is responsible for receiving agent through HTTP, authentication and delivering it with a passport to AgS. On the other side, AgS gets the agent, checks its passport, translates its code to safe code, initializes its state and runs it in a secure environment. Using resource allocation algorithms, ACL and authentication, J-SAS shows a good defensive mood against unauthorized read/write, denial of service and masquerading attacks.