{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,16]],"date-time":"2025-02-16T13:40:09Z","timestamp":1739713209931,"version":"3.37.1"},"reference-count":29,"publisher":"Wiley","issue":"1","license":[{"start":{"date-parts":[[2010,12,29]],"date-time":"2010-12-29T00:00:00Z","timestamp":1293580800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"funder":[{"name":"SERENITY"},{"name":"OKKAM"},{"name":"Regional Government of andalusia"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security Comm Networks"],"published-print":{"date-parts":[[2011,1]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Mobile agent is a promising paradigm for emerging ubiquitous computing and ambient intelligent scenarios. We believe that security is the most important issue for the widespread deployment of applications based on mobile agent technology. Indeed, community agrees that without the proper security mechanisms, use of mobile agent\u2010based applications will be impossible. From our perspective, the security problem in mobile agents is the gathering of two subproblems; the problem of the agent protection and the problem of the host protection. This paper presents a hardware\u2010based mechanism focused on solving the protection of the agent problem, which is a well known problem named the \u2018malicious host\u2019. The solution presented in this paper bases its security in the trust and the security functionalities provided by the trusted platform module (TPM). Thus, migration process of mobile agents is protected when it actually takes place. A complete description of the secure migration can be found in the secure migration protocol section of this paper. Moreover, a validation of this protocol was performed by means of the AVISPA tool suite. Additionally, a first study about the use of an alternative protocol as the direct anonymous attestation protocol was done. Finally, the result of this work is the Secure Migration Library for agents (SecMiLiA), which is completely described in following sections. Copyright \u00a9 2010 John Wiley &amp; Sons, Ltd.<\/jats:p>","DOI":"10.1002\/sec.158","type":"journal-article","created":{"date-parts":[[2010,1,5]],"date-time":"2010-01-05T09:55:47Z","timestamp":1262685347000},"page":"45-60","source":"Crossref","is-referenced-by-count":14,"title":["TPM\u2010based protection for mobile agents"],"prefix":"10.1002","volume":"4","author":[{"given":"Antonio","family":"Mu\u00f1oz","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Antonio","family":"Ma\u00f1a","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","published-online":{"date-parts":[[2010,12,29]]},"reference":[{"key":"e_1_2_10_2_2","unstructured":"General Magic Inc. The Telescript Language Reference. Online available athttps:\/\/2.zoppoz.workers.dev:443\/http\/www.genmagic.com\u2010Telescript\/TDE\/TDEDOCS_HTML\/telescript.html 1996"},{"key":"e_1_2_10_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/88616.88631"},{"key":"e_1_2_10_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2004.1297274"},{"key":"e_1_2_10_5_2","doi-asserted-by":"crossref","unstructured":"Ma\u00f1aA Mu\u00f1ozA SerranoD.Towards Secure Agent Computing for Ubiquitous Computing and Ambient Intelligence. InFourth International Conference Ubiquitous Intelligence and Computing Hong Kong (China)2007; LNCS.","DOI":"10.1007\/978-3-540-73549-6_117"},{"key":"e_1_2_10_6_2","unstructured":"Ma\u00f1a A.Software Protection based on Smartcards.PhD Thesis. University of Mlaga.2003."},{"key":"e_1_2_10_7_2","unstructured":"HachezG.A Comparative Study of Software Protection Tools Suited for E\u2010Commerce with Contributions to Software Watermarking and Smart Cards.PhD Thesis Universite Catholique de Louvain 2003.https:\/\/2.zoppoz.workers.dev:443\/http\/www.dice.ucl.ac.be\/hachez\/thesis_gael_hachez.pdf"},{"key":"e_1_2_10_8_2","doi-asserted-by":"crossref","unstructured":"WahbeR LuccoS AndersonT.Efficent Software\u2010Based Isolation. InProceedings of the Fourteenth ACM Symposium on Operating Systmes Principles. ACM SIGOPS Operating Systems Review 1993;203\u2013216.","DOI":"10.1145\/173668.168635"},{"volume-title":"The Java Language Specification","year":"1996","author":"Gosling J","key":"e_1_2_10_9_2"},{"key":"e_1_2_10_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/2.660187"},{"key":"e_1_2_10_11_2","unstructured":"GrayRS.Agent Tcl: A Flexible and Secure Mobile\u2010Agent System. InProceedings of the Fourth Annual Tcl\/Tk workshop (TCL 96) 1996;9\u201323."},{"key":"e_1_2_10_12_2","doi-asserted-by":"crossref","unstructured":"FarmerW GuttmanJ SwampV.Security for Mobile Agents: Authentication and State Appraisal. InProceedings of the 4th European Symposium on Research in Computer Security (ESORICS'96) September1996;118\u2013130.","DOI":"10.1007\/3-540-61770-1_31"},{"key":"e_1_2_10_13_2","unstructured":"OrdilleJJ.When agents Roam Who can You Trust?InProceedings of the First Conference on Emerging Technologies and Applications in Communications Portland Oregon May1996."},{"key":"e_1_2_10_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/98.468361"},{"key":"e_1_2_10_15_2","doi-asserted-by":"crossref","unstructured":"NeculaG.Proof\u2010CaiTying Code. InProceedings of 24th Annual Symposium on Principles of Programming Languages 1997.","DOI":"10.1145\/263699.263712"},{"key":"e_1_2_10_16_2","unstructured":"YeeBS.A Sanctuary for Mobile Agents Technical Report CS97\u2010537 University of California in San Diego April 28 1997. Online available athttps:\/\/2.zoppoz.workers.dev:443\/http\/www\u2010cse.ucsd.edu\/users\/bsy\/index.html"},{"key":"e_1_2_10_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/BF00196791"},{"key":"e_1_2_10_18_2","doi-asserted-by":"crossref","unstructured":"RothV.Secure Recording of Itineraries Through Cooperating Agents. InProceedings of the ECOOP Workshop on Distributed Object Security and 4th Workshop on Mobile Object Systems: Secure Internet Mobile Computations INRIA France 1998;147\u2013154.","DOI":"10.1007\/3-540-49255-0_76"},{"key":"e_1_2_10_19_2","doi-asserted-by":"crossref","unstructured":"ScheiderFB.Towards Fault\u2010Tolerant and Secure Agency. InProceedings 11th International Workshop on Distributed Algorithms Saarbucken Germany September1997.","DOI":"10.1007\/BFb0030670"},{"key":"e_1_2_10_20_2","unstructured":"VignaG.Secure Recording of Itineraries Through Cooperating Agents. InProceedings of the ECOOP Workshop on Distributed Object Security and 4th Workshop on Mobile Object Systems: Secure Internet Mobile Computations INRIA France1998;147\u2013154."},{"volume-title":"Mobile Agents and Security. Lecture Notes in Computer Science 1419","year":"1998","author":"Riordan J","key":"e_1_2_10_21_2"},{"volume-title":"Mobile Agents and Security, Vol. of 1419 in Lecture Notes in Computer Science","year":"1998","author":"Sander T","key":"e_1_2_10_22_2"},{"key":"e_1_2_10_23_2","first-page":"92","volume-title":"Mobile Agents and Security, Vol. of 1419 in Lecture Notes in Computer Science","author":"Hohl F","year":"1998"},{"key":"e_1_2_10_24_2","unstructured":"Trusted Computing Group:TCG Specifications.2005. Online available athttps:\/\/2.zoppoz.workers.dev:443\/https\/www.trustedcomputinggroup.org\/specs\/"},{"key":"e_1_2_10_25_2","first-page":"368","volume-title":"Information Hiding '99, vol 1768 of Lectures Notes in Computer Science (LNCS)","author":"Stem JP","year":"2000"},{"key":"e_1_2_10_26_2","unstructured":"CollbergC ThomborsonC.Watermarking Tamper\u2010Proofing and Obfuscation\u2014Tools for Software Protection.Technical Report 170 University of Auckland 2000."},{"key":"e_1_2_10_27_2","unstructured":"PearsonS.How can you trust the computer in front of you?Technical Report Trusted E\u2010Services Laboratory HP Laboratories Bristol. HPL\u20102002\u2010222 November 5th 2002."},{"key":"e_1_2_10_28_2","unstructured":"Trusted Computing Group.TCG Specification Architecture Overview Revision 1.4 (2007) https:\/\/2.zoppoz.workers.dev:443\/https\/www.trustedcomputing group.org\/groups\/TCG14ArchitectureOverview.pdf"},{"key":"e_1_2_10_29_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45657-0_27"},{"key":"e_1_2_10_30_2","doi-asserted-by":"crossref","unstructured":"HussainM SeretD.A Comparative study of Security Protocols Validation Tools: HERMES vs. AVISPA. InProceedings of International Conference on AdvancedCommunication Technology (ICACT)IEEE Communication Society 2006.","DOI":"10.1109\/ICACT.2006.205974"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fsec.158","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fsec.158","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/sec.158","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,16]],"date-time":"2025-02-16T13:17:19Z","timestamp":1739711839000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/10.1002\/sec.158"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,12,29]]},"references-count":29,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2011,1]]}},"alternative-id":["10.1002\/sec.158"],"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1002\/sec.158","archive":["Portico"],"relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"type":"print","value":"1939-0114"},{"type":"electronic","value":"1939-0122"}],"subject":[],"published":{"date-parts":[[2010,12,29]]}}}