The MOBIUS Proof Carrying Code Infrastructure

Authors:
Gilles Barthe;Pierre Crégut;Benjamin Grégoire;Thomas Jensen;David Pichardie
Affiliations:
IMDEA Software, Madrid, Spain;France Télécom, France;INRIA Sophia-Antipolis Méditerranée, France;INRIA Rennes Bretagne, France;INRIA Rennes Bretagne, France
Venue:
Formal Methods for Components and Objects
Year:
2008

Citing 20
Cited 8

A behavioral notion of subtyping

ACM Transactions on Programming Languages and Systems (TOPLAS)
Proof-carrying code

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
The design and implementation of a certifying compiler

PLDI '98 Proceedings of the ACM SIGPLAN 1998 conference on Programming language design and implementation
A unified approach to global program optimization

POPL '73 Proceedings of the 1st annual ACM SIGACT-SIGPLAN symposium on Principles of programming languages
Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints

POPL '77 Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages
Java Virtual Machine Specification

Java Virtual Machine Specification
Logical foundations for typed object-oriented languages

PROCOMET '98 Proceedings of the IFIP TC2/WG2.2,2.3 International Conference on Programming Concepts and Methods
Foundational Proof-Carrying Code

LICS '01 Proceedings of the 16th Annual IEEE Symposium on Logic in Computer Science
Java Bytecode Verification: Algorithms and Formalizations

Journal of Automated Reasoning
Lightweight Bytecode Verification

Journal of Automated Reasoning
Proof-carrying code from certified abstract interpretation and fixpoint compression

Theoretical Computer Science - Applied semantics
Finding security vulnerabilities in java applications with static analysis

SSYM'05 Proceedings of the 14th conference on USENIX Security Symposium - Volume 14
Proof-transforming compilation of programs with abrupt termination

Proceedings of the 2007 conference on Specification and verification of component-based systems: 6th Joint Meeting of the European Conference on Software Engineering and the ACM SIGSOFT Symposium on the Foundations of Software Engineering
Preservation of Proof Obligations from Java to the Java Virtual Machine

IJCAR '08 Proceedings of the 4th international joint conference on Automated Reasoning
Modular development of certified program verifiers with a proof assistant1,2

Journal of Functional Programming
Improving the Security of Downloadable Java Applications With Static Analysis

Electronic Notes in Theoretical Computer Science (ENTCS)
A certified lightweight non-interference java bytecode verifier

ESOP'07 Proceedings of the 16th European conference on Programming
MOBIUS: mobility, ubiquity, security objectives and progress report

TGC'06 Proceedings of the 2nd international conference on Trustworthy global computing
Combining a verification condition generator for a bytecode language with static analyses

TGC'07 Proceedings of the 3rd conference on Trustworthy global computing
Language-based information-flow security

IEEE Journal on Selected Areas in Communications

An Abstract Model of Certificate Translation

ACM Transactions on Programming Languages and Systems (TOPLAS)
An extended proof-carrying code framework for security enforcement

Transactions on computational science XI
Kopitiam: modular incremental interactive full functional static verification of java code

NFM'11 Proceedings of the Third international conference on NASA Formal methods
Midlet navigation graphs in JML

SBMF'10 Proceedings of the 13th Brazilian conference on Formal methods: foundations and applications
Animating the formalised semantics of a Java-like language

ITP'11 Proceedings of the Second international conference on Interactive theorem proving
A functional framework for result checking

FLOPS'10 Proceedings of the 10th international conference on Functional and Logic Programming
A certificate infrastructure for machine-checked proofs of conditional information flow

POST'12 Proceedings of the First international conference on Principles of Security and Trust
Poporo: a formal methods tool for fast-checking of social network privacy policies

TOOLS'12 Proceedings of the 50th international conference on Objects, Models, Components, Patterns

Quantified Score

Hi-index	0.00

Visualization

Abstract

The goal of the MOBIUS project is to develop a Proof Carrying Code architecture to secure global computers that consist of Java-enabled mobile devices. In this overview, we present the consumer side of the MOBIUS Proof Carrying Code infrastructure, for which we have developed formally certified, executable checkers. We consider wholesale Proof Carrying Code scenarios, in which a trusted authority verifies the certificate before cryptographically signing the application. We also discuss retail Proof Carrying Code, where the verification is performed on the consumer device.