{'fraction_non_alphanumeric': 0.014763779527559055, 'fraction_numerical': 0.0006561679790026247, 'mean_word_length': 5.1595959595959595, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Utilising Component Composition for Secure Ubiquitous Computing

Security in a Ubiquitous Computing Environment Ubiquitous computing promises a major shift in our approach to the way we use and interact with computers in our everyday environment. The changes are expected to be both qualitative as well as quantitative, and they bring with them corresponding changes in the way security must be handled within such an environment [1]. In terms of the latter quantitative changes, not only will we see an increase in the number of networked computational devices populating our everyday environment, but also in the interaction between them. The relatively unrestricted flow of data between devices is central to achieving the ubiquitous vision. This brings with it obvious security problems and from a privacy perspective, in terms of the transfer of private data between devices. But there also exist wider security concerns, in that such an environment may make devices more susceptible to external malicious attack, more likely to contract viruses and worms, and have benign flaws more likely to manifest themselves in the form of serious failures or exploits. The situation is compounded by the fact that in a ubiquitous environment the data transferred between devices is likely to contain a proportionately larger amount of executable code in the form of software updates, scripts, mobile agents, programmable reconfigurations or user transfers. An automated method is therefore required to maintain the security state of the system. From a qualitative perspective the situation is made no better. Networked devices are more likely to be embedded, low power and with minimal resources, thus restricting the potential security measures that can be utilised. Equally, user interfaces that might allow a user to make suitable security choices will not be available; indeed the dream of ubiquitous computing is one in which many devices become ‘invisible’ to the average user. People will not necessarily be aware that they are using a networked computing device at all, and even if they are, the average user could never be expected to make effective security choices. For the ubiquitous dream to become reality, it is essential that the users be shielded from the effects of such security issues. It should not be necessary to rely on the expertise of a user to make suitable security decisions, whilst at the same time, they cannot be expected to tolerate the effects that a potential security problem will precipitate. Although it is clear that no easy solution to these problems currently exists, we believe that in order to capitalise on the positive security-related characteristics of a ubiquitous computing environment, it will be necessary to underpin security methods using techniques of secure component composition [2]. This view is reinforced by our current work, which has allowed us to produce an initial prototype indicating the feasibility of the technique as a security method for use in a heterogeneous ubiquitous environment.