Enforcing Resource-Aware Policies Using Run-time Monitoring
Natalie Alexandra Bowles · 2004
Resource awareness is an important step towards the realization of reliable and effective communication systems, particularly in the context of mobile code. Since the amount of consumption of computing resources (file system, threads, sockets, etc.) is not monitored in most mobile execution environments such as in the Java language, some kind of change to the security model seems indispensable. It is the goal of this research to gain insight into a richer security model – one that enables monitoring of resource consumption and ensures that allowable constraints are met. Specifically, we extend an existing approach to monitoring and checking of running Java programs to the enforcement of resource-aware policies. Specifically, our work focusses on monitoring and controlling aspects of file system use. i Acknowledgments I would like to express deep appreciation to my supervisor, Prof. Juergen Dingel, for his guidance and support in this research project. I would also like to thank Prof. Oleg Sokolsky and Usa Sammapun of the University of Pennsylvania for their helpful and responsive suggestions. I am indebted to the Office of Critical Infrastructure Protection and Emergency Preparedness (OCIPEP) of the Government of Canada for their generous financial support. I am deeply grateful to my parents, Anna and Alan, and my brother Paul, for their love and support. Thank you. Finally, I would like to dedicate this thesis in memory of my Babyshka, Alexandra