A type system for checking applet isolation in java card

Authors:
Werner Dietl;Peter Müller;Arnd Poetzsch-Heffter
Affiliations:
ETH Zürich, Switzerland;ETH Zürich, Switzerland;Technische Universität Kaiserslautern, Germany
Venue:
CASSIS'04 Proceedings of the 2004 international conference on Construction and Analysis of Safe, Secure, and Interoperable Smart Devices
Year:
2004

Citing 16
Cited 5

Javalight is type-safe—definitely

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Ownership types for flexible alias protection

Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Confined types

Proceedings of the 14th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Alias annotations for program understanding

OOPSLA '02 Proceedings of the 17th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Machine-Checking the Java Specification: Proving Type-Safety

Formal Syntax and Semantics of Java
Describing the Semantics of Java and Proving Type Soundness

Formal Syntax and Semantics of Java
Context Inference for Static Analysis of Java Card Object Sharing

E-SMART '01 Proceedings of the International Conference on Research in Smart Cards: Smart Card Programming and Security
Jakarta: A Toolset for Reasoning about JavaCard

E-SMART '01 Proceedings of the International Conference on Research in Smart Cards: Smart Card Programming and Security
An Operational Semantics of the Java Card Firewall

E-SMART '01 Proceedings of the International Conference on Research in Smart Cards: Smart Card Programming and Security
The PACAP Prototype: A Tool for Detecting Java Card Illegal Flow

JavaCard '00 Revised Papers from the First International Workshop on Java on Smart Cards: Programming and Security
Logical foundations for typed object-oriented languages

PROCOMET '98 Proceedings of the IFIP TC2/WG2.2,2.3 International Conference on Programming Concepts and Methods
A Formal Executable Semantics of the JavaCard Platform

ESOP '01 Proceedings of the 10th European Symposium on Programming Languages and Systems
Checking secure interactions of smart card applets: extended version

Journal of Computer Security - Special issue on ESORICS 2000
Java Bytecode Verification: Algorithms and Formalizations

Journal of Automated Reasoning
Safejava: a unified type system for safe programming

Safejava: a unified type system for safe programming
Secure object flow analysis for java card

CARDIS'02 Proceedings of the 5th conference on Smart Card Research and Advanced Application Conference - Volume 5

Malicious Code on Java Card Smartcards: Attacks and Countermeasures

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Modular specification of encapsulated object-oriented components

FMCO'05 Proceedings of the 4th international conference on Formal Methods for Components and Objects
Formal methods for smartcard security

Foundations of Security Analysis and Design III
SCOOP: concurrency made easy

Dependable Systems
Ownership types: a survey

Aliasing in Object-Oriented Programming

Quantified Score

Hi-index	0.00

Visualization

Abstract

A Java Card applet is, in general, not allowed to access fields and methods of other applets on the same smart card. This applet isolation property is enforced by dynamic checks in the Java Card Virtual Machine. This paper describes a refined type system for Java Card that enables static checking of applet isolation. With this type system, firewall violations are detected at compile time. Only a special kind of downcast requires dynamic checks.