[jade-develop] Security test

Caire Giovanni

2014-03-20 15:52:41 UTC

Hi,

If you need to simulate an attacker that modifies the content of a message, you can create a JADE Kernel Service that intercepts the messages exchanged by your agents and modifies them. You can look at the examples.service.MessageTracingService (included in the Jade examples distribution) for an example of a service similar to what you need. For a complete explanation on how JADE kernel services work refer to chapter 7 of the book Developing Multi Agent Systems with JADE.
Note that the Sniffer relies on the NotificationService that does something similar (do not look at it howevere since it is much more complex than what you need).

Bye,

Giovanni

Da: jade-develop-bounces at avalon.tilab.com [mailto:jade-develop-bounces at avalon.tilab.com] Per conto di rana_hassaan
Inviato: mercoled? 19 marzo 2014 20:19
A: jade-develop at avalon.tilab.com
Oggetto: [jade-develop] Security test

Hi
I had developed a simulation for a secure e.business mobile agent application for an academic degree
To finish this research I have to make sure that the application security is working fine. And this can be done by trying to attack the application. Specifically I need to attack the message and modify its content which is encrypted(not encrypted using jade msg encryption). I am trying to modify the message content because I am not able to crack it and all i need to do is to corrupt the cycle and when the msg content is corrupted the trading won't be done.
My question is , can I implement a Malicious sniffer it is exactly a copy of jade sniffer with some modifications to make it modify the message when it captures it?
And if it is not possible do u have any clue how to solve this issue.
Thanks :)

Sent from Samsung Mobile
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://avalon.cselt.it/pipermail/jade-develop/attachments/20140320/5c5c1d55/attachment.html>