Abstract: | JAVA is claimed to be a system programming language having a number of advantages over traditional programming languages. These advantages stem from the fact that it is a platform - independent language, thus promising truly network oriented computing as long as a nearly universal system for distributing applications. On the other hand, although being an interpreted, much simpler, scripting language, Safe-Tcl was proposed as an executable contents type of MIME and thus as the standard language for executable contents within email. Consequently, both languages claim to be suitable for transmitting executable content over the Internet, in other words manipulating mobile code. However, the ability to download, integrate, and execute code from a remote computer raises serious concerns about JAVA's as well as Safe-Tcl's effect on network security. In this paper, the potential security risks of mobile code are discussed, a brief introduction to both programming languages is given, and the details of each of the proposed security mechanisms are presented. Finally a comparison of the two security models is given, centered upon the efficiency and flexibility of current implementations as well as upcoming extensions. |