Lecture Notes in Computer Science, 2002, Volume 2513/2002, 1-12, DOI: 10.1007/3-540-36159-6_1

Defenses against the Truncation of Computation Results of Free-Roaming Agents

Jeff S. L. Cheng and Victor K. Wei

View Related Documents

Abstract

Yee [Yee97] and Karjoth, et al. [KAG98] proposed schemes to protect the agent data. Various degrees of forward integrity were achieved by their results, among other benefits. A known vulnerability of their techniques is the truncation attack where two visited hosts (or one revisited host) can collude to discard the partial results collected between their respective visits. In this paper we propose several defenses against the truncation attack and the related growing-a-fake-stem (“stemming”) attack for the protection of the partial computation results of free-roaming agents. In Protocol N1, we use a co-signing technique to prevent the two-colluder truncation attack. Generalizations of N1 can further raise the threshold number of colluding hosts we can defend. Protocol N2 does not prevent truncation or stemming. It detects stemming and identifies the exact pair of colluders for prosecution. Protocol N2 mainly relies on mutual authentication techniques.

Keywords  mobile agent security - malicious host - truncation attack - agent route protection - cryptographic protocols

Fulltext Preview

Image of the first page of the fulltext document