Formalisation and verification of java card security properties in dynamic logic

Authors:
Wojciech Mostowski
Affiliations:
Department of Computing Science, Chalmers University of Technology, Göteborg, Sweden
Venue:
FASE'05 Proceedings of the 8th international conference, held as part of the joint European Conference on Theory and Practice of Software conference on Fundamental Approaches to Software Engineering
Year:
2005

Citing 6
Cited 7

Extended static checking for Java

PLDI '02 Proceedings of the ACM SIGPLAN 2002 Conference on Programming language design and implementation
Java Card Technology for Smart Cards: Architecture and Programmer's Guide

Java Card Technology for Smart Cards: Architecture and Programmer's Guide
Dynamic Logic

Dynamic Logic
A Dynamic Logic for the Formal Verification of Java Card Programs

JavaCard '00 Revised Papers from the First International Workshop on Java on Smart Cards: Programming and Security
A program logic for handling JAVACARD's transaction mechanism

FASE'03 Proceedings of the 6th international conference on Fundamental approaches to software engineering
Verification of safety properties in the presence of transactions

CASSIS'04 Proceedings of the 2004 international conference on Construction and Analysis of Safe, Secure, and Interoperable Smart Devices

A program logic for resources

Theoretical Computer Science
Integration of a security type system into a program logic

Theoretical Computer Science
KeY: a formal method for object-oriented systems

FMOODS'07 Proceedings of the 9th IFIP WG 6.1 international conference on Formal methods for open object-based distributed systems
Verification by parallelization of parametric code

Algebraic and proof-theoretic aspects of non-classical logics
Automating verification of loops by parallelization

LPAR'06 Proceedings of the 13th international conference on Logic for Programming, Artificial Intelligence, and Reasoning
Formal reasoning about non-atomic java card methods in dynamic logic

FM'06 Proceedings of the 14th international conference on Formal Methods
A unified approach for static and runtime verification: framework and applications

ISoLA'12 Proceedings of the 5th international conference on Leveraging Applications of Formal Methods, Verification and Validation: technologies for mastering change - Volume Part I

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present how common Java Card security properties can be formalised in Dynamic Logic and verified, mostly automatically, with the KeY system. The properties we consider, are a large subset of properties that are of importance to the smart card industry. We discuss the properties one by one, illustrate them with examples of real-life, industrial size, Java Card applications, and show how the properties are verified with the KeY Prover – an interactive theorem prover for Java Card source code based on a version of Dynamic Logic that models the full Java Card standard. We report on the experience related to formal verification of Java Card programs we gained during the course of this work. Thereafter, we present the current state of the art of formal verification techniques offered by the KeY system and give an assessment of interactive theorem proving as an alternative to static analysis.