Security Modeling and Evaluation for the Mobile Code Paradigm

There is no well-know model for mobile agent security. One of the few attempts so far is given by [1]. The model is, however, a qualitative model that does not have direct numerical measures. It would be great if there is a quantitative model that can give user an intuitive sense of “how secure an agent is”.

[1]  Tomas Olovsson,et al.  A Quantitative Model of the Security Intrusion Process Based on Attacker Behavior , 1997, IEEE Trans. Software Eng..

[2]  Fritz Hohl.  A Model of Attacks of Malicious Hosts Against Mobile Agents , 1998, ECOOP Workshops.

[3]  T. Olovsson,et al.  On measurement of operational security , 1994, IEEE Aerospace and Electronic Systems Magazine.