Development of an Embedded Verifier for Java Card Byte Code Using Formal Methods

  • Authors:
  • Ludovic Casset

  • Affiliations:
  • -

  • Venue:
  • FME '02 Proceedings of the International Symposium of Formal Methods Europe on Formal Methods - Getting IT Right
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Java security policy is implemented using security components such as a Java Virtual Machine (JVM), API, verifier, and a loader. It is of prime importance to ensure that these components are implemented in accordance with their specifications. Formal methods can be used to bring the mathematical proof that their implementation corresponds to their specification. In this paper, we introduce the formal development of a complete byte code verifier for Java Card and its on-card integration. In particular, we aim to focus on the model and the proof of the complete type verifier for the Java Card language. The global architecture of the verification process implemented in this real industrial case study is described and the detailed specification of the type verifier is discusses as well as its proof. Moreover, this paper presents a comparison between formal and traditional development, summing up the pros and cons of using formal methods in industry.