Transporting mobile code with internal authentication and tamper detection

Lisa M. Marvel; Edmund H. Baur; George W. Hartwig Jr.

doi:10.1117/12.438307

29 August 2001 Transporting mobile code with internal authentication and tamper detection

Lisa M. Marvel, Edmund H. Baur, George W. Hartwig Jr.

Proceedings Volume 4396, Battlespace Digitization and Network-Centric Warfare; (2001) https://doi.org/10.1117/12.438307
Event: Aerospace/Defense Sensing, Simulation, and Controls, 2001, Orlando, FL, United States

Abstract

Mobile code opens a world of possibilities for Battlespace digitization. However, due to security issues associated with transporting code over such networks, mobile code in the battlefield may present serious risks. Attackers may attempt to thwart the end-user's mission by manipulating or destroying code prior to its final destination. To combat such acts, we propose an authentication method that can reside on any Internet server/client without the typical constraints that exist for firewalls and certificates. Our method consists of the construction of a digital signature at the server based on the characteristics of the mobile code itself. This signature, or mark, is then embedded within the code in a hidden manner using steganographic methods. Upon receipt of the mobile code, the client can use the key to extract the embedded mark and regenerate a mark from the received code. The two marks are compared to verify the integrity of the code and the authenticity of the sender. This technique is implemented for HTML code and the effectiveness of tamper detection is demonstrated. Mobile code authentication techniques, such as this, can provide the security necessary to permit the exploitation of this powerful computing medium on the networked battlefield.

Citation Download Citation

Lisa M. Marvel, Edmund H. Baur, and George W. Hartwig Jr. "Transporting mobile code with internal authentication and tamper detection", Proc. SPIE 4396, Battlespace Digitization and Network-Centric Warfare, (29 August 2001); https://doi.org/10.1117/12.438307

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available