Risk Analysis and Protection for WBIS

Risk analysis and protection are very important issues in the Web based information system. This paper discusses a mechanism by which a server can determine that it is safe to execute a program come from an untrusted source. The server defines security policies and assigns them into a semantic access rule table (SART). SART is used by verify algorithm (VA) to generate a digital VA filter for the incoming binary code. The result contains a formal proof that the incoming code run within the security policy constraints enforced by SART-VA filter