Research On The Security Of Mobile Agent Based On Trust

With the development of Mobile Agent, the security of Mobile Agent systems becomes one of the important reasons that restrict Mobile Agent going further. It includes mobile agent security and host security. The mobile agent security is one of the most complicated and hard to deal with problems in mobile agent. The paper focuses on the mobile agent security, and brings forward reansonable solutions on these problems. These solutions include the following content.Focusing on the untrusted executing environment of mobile agent now, using Trust Model of Mobile Agent based on Reputation Computing (TMMARC) to protect the executing environment of mobile agent is proposed. The paper describes the establishment; maintenance; update and management of trust relationships in TMMARC, reputation computing of mobile agent, and so on.Based on the pervasive research and analysis of mobile agent and trust, we designed and accomplished simulately a Practical System for the Security of Mobile-Agent based on TMMARC (PSSMATR). Focusing on security problems during the establishment, transmission and execution in mobile agent, the encrypted EOP method is proposed in PSSMATR. The main idea is that the mobile agent is encrypted when it is established; the owner of mobile agent and the first platform are authenticated during the transmission of it; and executing plationform executes the code of mobile agent without decrypting the information, so it ensures the security of mobile agent. The PSSMATR not only enhances the security of mobile agent and host, but also improves the flexibility and scalability of security operation in mobile agent.