Decisions regarding the development of mobile code within organizational information systems are based on the potential for the code to cause damage to the system if used maliciously. Mobile code technologies include but are not limited to: Java, JavaScript, ActiveX, PDF, Postscript, Shockwave movies, Flash animations, and VBScript.
Mobile code is obtained from remote systems, transferred over a network, downloaded and executed on a local system without explicit installation or execution by the recipient.
DoDI 8552.01 policy pertains to the use of mobile code technologies within DoD information systems.
This requirement addresses issues related to the development of mobile code. Application servers host mobile code but are not used for developing it. This requirement is NA. |