In September 1999, the INFOSEC (information security) Research Council
(IRC) [3] published its first INFOSEC Research Hard Problems List, [4] which
included four hard problems related to software and application security—
u Security of Foreign and Mobile Code: Provide users of IT systems with the