Abstract: A system and method for providing assurance to a host executing a piece of software that the software possesses a particular property. A certifier determines if a piece of software possesses a particular property, and if it does, it cryptographically signs the software, producing a signature. The software and a certificate that includes the signature is then distributed to a host. The host checks the signature. If the signature is valid, then the host is provided with assurance that the software possesses the particular property. If the signature is not valid, then the host is provided with no such assurance.

Abstract: A system and method are provided for using a second resource to store a data element from a first resource in a stack. A data element XN'1 and a signature S[N] are signed at a first resource to obtain a signature S[XN+1,S[N]], where N is an integer. The data element XN+1 and the signature S[N] are sent from the first resource to the second resource to be stored in a stack. The signature S[XN+1,S[N]] is stored at the first resource.

Abstract: A system and method are provided for storing a data element from a first resource in a queue at a second resource. A combination of a data element XN+1 and a signature SQ=S[N] are signed at a first resource to obtain a signature S[XN+1,S[N]], where N is an integer. The data element data element XN+1 and the signature S[XN+1,S[N]] are sent from the first resource to the second resource to be stored in the queue at the second resource. The signature S[XN+1,S[N]] is stored at the first resource as the new value for SQ.

Abstract: A system and method for providing assurance to a host executing a piece of software that the software possesses a particular property. A certifier determines if a piece of software possesses a particular property, and if it does, it cryptographically signs the software, producing a signature. The software and a certificate that includes the signature is then distributed to a host. The host checks the signature. If the signature is valid, then the host is provided with assurance that the software possesses the particular property. If the signature is not valid, then the host is provided with no such assurance.

Abstract: A system and method are provided for using a second resource to store a data element from a first resource in a stack. A data element X.sub.N+1 and a signature S[N] are signed at a first resource to obtain a signature S[X.sub.N+1, S [N]], where N is an integer. The data element X.sub.N+1 and the signature S[N] are sent from the first resource to the second resource to be stored in a stack. The signature S[X.sub.N+1,S[N]] is stored at the first resource.

Abstract: A system and method are provided for storing a data element from a first resource in a queue at a second resource. A combination of a data element X.sub.N+1 and a signature S.sub.Q =S[N] are signed at a first resource to obtain a signature S[X.sub.N+1,S[N]], where N is an integer. The data element data element X.sub.N+1 and the signature S[X.sub.N+1,S[N]] are sent from the first resource to the second resource to be stored in the queue at the second resource. The signature S[X.sub.N+1,S[N]] is stored at the first resource as the new value for S.sub.Q.

Abstract: Techniques for obtaining information about dynamic properties of a first program. The techniques involve making a static analysis of the first program to determine what instrumentation is needed to produce the desired information and then producing a second program which causes a programmable instrumentation apparatus to produce an instrumented version of the first program. The programmable instrumentation apparatus may be a programmable binary editor or a a debugger. Execution of the instrumented program provides the information about the dynamic properties. The program for the instrumentation apparatus is produced by a source code analyzer which statically analyzes the source code. The source code analyzer is in turn produced by a code analyzer generator. Output from the instrumentation may be provided to a graphical display system.

Abstract: Techniques for obtaining information about dynamic properties of a program. The techniques involve programming a programmable execution environment such as a debugger so that when the program is executed in the execution environment, side effects of the execution provide the information about the dynamic properties. The program for the execution environment is produced by a source code analyzer which statically analyzes the source code. The source code analyzer is in turn produced by a code analyzer generator. Output from the execution environment may be provided to a graphical display system. In one use of the techniques, the code analyzer generator not only generates a source code analyzer for producing the program for the execution environment, but also a source code analyzer for producing a program which when executed by a graphical browser makes a flow graph for the program.