Richard Soley, David Chizmadia, I would like to present some of the security concepts and ideas which have been put into our Jumping Beans mobilility framework. This is a brief outline of the presentation: - Definition of mobility - Assumptions in Jumping Beans security model - Multi-hop security as implemented in Jumping Beans - What is multi-hop security - Jumping Beans' approach to multi-hop security - Composite ACL - Example - Management and security - Why are monitoring and intervention critical to security of mobile systems - Management tools in Jumping Beans - Secure registration/deregistration - ACL management - Security and the Client/Server model - Secure "anchor point" - Securely save audit logs, ACLs - Client communicates with server only - Server's different personality for each client - Mobility and the CORBA Security Model - Assumptions in the CORBA Security Model. - Why the CORBA Security Model falls over when mobility is introduced. - Possible additions to the CORBA Security Model to support mobility. - CORBA and (the lack of) management - Other security features - Audit logs - Jumping Beans protection of itself - Protection of resident host software - Solution of the "most-derived-class" problem Cheers, Chris Rygaard Ad Astra Engineering, Incorporated Voice: 408-738-4616 961 The Dalles, Fax: 408-739-7372 Sunnyvale, CA 94087-4116 http://www.JumpingBeans.com/