Secure Information Flow in Mobile Bootstrapping Process
Zhaoyu Liu, M. Dennis Mickunas, Roy H. Campbell · 1999
The security of bootstrapping is very important for mobile computing. In this paper, we present the bootstrapping process of the Cherubim security system which uses a smartcard to allow a mobile Cherubim client to universally access remote standard services. In order to prevent any leakage of sensitive information, we apply a type system for secure ows to the bootstrapping source codes. The type system guarantees that well-typed programs satisfy a noninterference security property. This means that the program does not \\leak" sensitive data. The type system also produces principal types for typecorrect programs that characterize how programs can be called securely. The analysis demonstrates that the type system can ensure secure ow enforcement. Keywords: bootstrapping, mobile, security, type system, information ow 1