作者: Lieven Desmet , Wouter Joosen , Fabio Massacci , Pieter Philippaerts , Frank Piessens
DOI: 10.1016/J.ISTR.2008.02.001
关键词:
摘要: Over the last few years, success of GPS-enabled PDAs has finally instigated a breakthrough mobile devices. Many people now already have device that can connect to Internet and run untrusted code, typically cell-phone or PDA. Having such large interconnected powerful computing base presents some new security issues. In order counter threats, traditional architectures need be overhauled support more flexible way securely executing code. This article describes concept security-by-contract (SxC) its implementation on .NET platform. model allows users guarantee an application remains within boundaries acceptable behavior, as defined by user herself. A number different techniques will presented employed enforce this behavior. SxC paradigm, steps introduced in development process. addition building application, developers create contract bind application. The deployment process supports legacy applications developed without contracts, but it advanced enforcement technologies for those are SxC-aware.