Security-by-Contract: Toward a Semantics for Digital Signatures on Mobile Code

摘要: In this paper we propose the notion of security-by-contract, a mobile contract that an application carries with itself. The key idea framework is digital signature should not just certify origin code but rather bind together contract. We provide description overall lifecycle in setting describe tentative structure for contractual language and number algorithms one steps process, contract-policy matching issue. argue security-by-contract would semantics signatures on thus being step transition from trusted to trustworthy code.