Making mobile code both safe and efficient
Michael M. Franz, Wolfram Amme, Matthew Q. Beers, Niall Dalton, P.H. Frohlich, Vivek Haldar, A. Hartmann, Peter S. Housel, Fermín Reig, Jeffery von Ronne, Christian H. Stork, S. Zhenochin · 2004
Mobile programs can potentially be malicious. To protect itself, a host that receives such mobile programs from an untrusted party or via an untrusted network connection will want some kind of guarantee that the mobile code is not about to cause any damage. The traditional solution to this problem has been verification, by which the receiving host examines the mobile program to discover all its actions even before starting execution. Unfortunately, aside from consuming computing resources in itself, verification inhibits traditional compiler optimizations, making such verifiable mobile code much less efficient than native code. We have found an alternative solution...