A tool for checking secure interaction in Java Cards

Marco Avvenuti (1) , Cinzia Bernardeschi (1) , Nicoletta de Francesco (1) , Paolo Masci (1)

1 Dipartimento di Ingegneria dell'Informazione [Pisa]

We present an approach based on a multilevel security policy and the theory of abstract interpretation for checking secure interaction between applications in Java Cards. The security policy is defined by the user, which assigns security levels to Java Card applications. Actual values are abstracted into security levels, and an abstract interpreter executes the bytecode of applications in the abstract domain. We show JCSI, a tool that implements the presented approach. JCSI can be used to check the binary code of Java Card

Domaines: Génie logiciel [cs.SE]

Marco Avvenuti, Cinzia Bernardeschi, Nicoletta de Francesco, Paolo Masci. A tool for checking secure interaction in Java Cards. 12th European Workshop on Dependable Computing, EWDC 2009, May 2009, Toulouse, France. 8 p. ⟨hal-00380664⟩