在 Lambda the Ultimate - The Programming Languages Weblog 裡看到這篇《Language-based security for mobile code, with applications to smart cards》，裡面介紹一篇 TECS Week 2005 的 lecture：《Language-based security for mobile code with applications to smart cards》。有在做 mobile code 或 agent 的人，都值得看一看。稍微作一下筆記：

Language-based security (model) for mobile code:

  • The sandbox model (how to execute untrusted code securely)
  • Access control in API (Java stack inspection)
  • Security implications of type safety (or, ensuring that API access control is not bypassed)
  • Bytecode verification (ensuring type safety of untrusted compiled code)
  • Information flow analysis (another security-relevant static analysis)