New ASMS Architecture in the Mobile Agent System to Protect the Code and Data of an Agent

In recent times, mobile agent technology has attracted the attention of many researchers in different fields, due to its power in solving complex problems. Mobile agents are autonomous software entities capable of moving from one host to another in order to perform a specific task. However, this mobility is not always secure, as a malicious hosting platform can modify the mobile agent's code and data. In this paper, we address this security problem by proposing a new ASMS system (Agent Security Management System) that can protect the code and data collected by the mobile agent from attacks by malicious platforms. This system contains three subsystems. The first is the AES (Agent Evaluation System), which evaluates and validates the identity, integrity and assembly of the agent components. The second one is the SMS (Service Management System). Its role is to analyze the semantic correspondence between the security policies (platforms/agent) to create the mobile agent's itinerary. The third is the SAS (Security Adaptation System) which estimates the security level of the agent components and the trust degree of the execution platforms to define the access control rules to the agent data. This solution is based on advanced security technologies such as mutual authentication between system entities, digital signature, encryption and XACML/ABAC model to create access control policies for agent data.