A Defensive Virtual Machine Layer to Counteract Fault Attacks on Java Cards

Michael Lackner (1) , Reinhard Berlach (1) , Wolfgang Raschke (1) , Reinhold Weiss (1) , Christian Steger (1)

1 TU Graz - Graz University of Technology [Graz]

The objective of Java Cards is to protect security-critical code and data against a hostile environment. Adversaries perform fault attacks on these cards to change the control and data flow of the Java Card Virtual Machine. These attacks confuse the Java type system, jump to forbidden code or remove run-time security checks. This work introduces a novel security layer for a defensive Java Card Virtual Machine to counteract fault attacks. The advantages of this layer from the security and design perspectives of the virtual machine are demonstrated. In a case study, we demonstrate three implementations of the abstraction layer running on a Java Card prototype. Two implementations use software checks that are optimized for either memory consumption or execution speed. The third implementation accelerates the run-time verification process by using the dedicated hardware protection units of the Java Card.

Mots clés: Java Card; Defensive Virtual Machine; Countermeasure; Fault Attack

Domaines: Informatique [cs]

Michael Lackner, Reinhard Berlach, Wolfgang Raschke, Reinhold Weiss, Christian Steger. A Defensive Virtual Machine Layer to Counteract Fault Attacks on Java Cards. 7th International Workshop on Information Security THeory and Practice (WISTP), May 2013, Heraklion, Greece. pp.82-97, ⟨10.1007/978-3-642-38530-8_6⟩. ⟨hal-01485935⟩