Most organizations manage computer security risk reactively by investing in technologies
designed to protect against known system vulnerabilities and monitor intrusions as they …

Mobile code---executable programs that get copied from computer-to-computer via e-mail,
web browsers, etc.---is a popular way to stage malicious attacks against users. The Windows …

The ultimate answer to the computer security problem lies in making software behave.
Current approaches, based on fixing things only after they have been exploited in fielded …

Security enforcement mechanisms for controlling the execution of untrusted component
code have evolved away from the strict sandbox confinement toward more flexible code …

Mobile code provides a highly flexible and beneficial form of computing. However, mobile
code use creates complex security considerations beyond those associated with the …

The benefits of distributed computation present complex security considerations beyond
those associated with the traditional computing paradigm. This paper describes a bandwidth …

The AFRLCornell Information Assurance Institute supports a broad spectrum of research
aimed at developing a science and technology base to enhance information assurance and …