检索结果-内蒙古大学图书馆

An integrated development environment for java card

COMPUTER NETWORKS 2001年第4期36卷 391-405页

作者： Attali, I Caromel, D Courbis, C Henrio, L Nilsson, H UNSA INRIA CNRS I3S F-06902 Sophia Antipolis France

This article describes a java card programming environment which to a large extent is generated from formal specifications of the syntax and semantics of java card, the java card Runtime Environment (JCRE), and the java card APIs. The resulting environment consists of a set of tightly integrated and somewhat smart tools, such as a java-specific structure editor and a simulator which allows an application to be tested before being downloaded to a card. Furthermore, the simulator analyses the applet in question in order to find out the structure of the accepted commands. This information is then used to automatically adapt the GUI of the simulator. (C) 2001 Elsevier Science B.V. All rights reserved.

关键词： java card development environment formal specification simulation

来源：评论

学校读者我要写书评

暂无评论

Implementation of java card Virtual Machine

引用

Journal of Computer Science & Technology 2000年第6期15卷 591-596页

作者：刘嵩岩毛志刚叶以正 Microelectronic Center Harbin Institute of Technology Harbin P.R. China

java card is a new system for programming smart cards, which is based on the java language and Virtual Machine. java card programs (applets) run in java card Runtime Environment (JCRE) including the java card Virtual Machine (JCVM), the framework, the associated native methods and the API (Ap plication Programming Interface). JCVM is implemented as two separate pieces: off-card VM (Virtual Machine) and on-card VM. The stack model and heap memory structure used by on-card VM and exception handling are introduced. Because there airs limited resources within smart card environment, and garbage collection is not supported in JCVM, the preferred way to exception handling does not directly involve the use of throw, although the throw keyword is supported. Security is the most important feature of smart card. The java card applet security feature is also discussed.

关键词： java card JCRE JCVM security

来源：评论

学校读者我要写书评

暂无评论

An efficient installation for applets to be post-issuance of java card system using an IC chip

引用

IEICE ELECTRONICS EXPRESS 2010年第20期7卷 1509-1514页

作者： Choi, Won-Ho Seok, Seung-Joon Jung, Min-Soo Univ Kyungnam Dept Comp Engn Chnagwon 631701 Kyungnam South Korea

Most smart cards based on the java card need an installer for deploying a new applet into its memory after the cards were issued. Installing the applet takes lots of time because of unique components downloading and hardware limitations. An efficient installation for applets in the java card platform is investigated. The proposed scheme could improve applet installation time significantly compared to the conventional scheme by fully utilizing available RAM space and could present the best a block size to be transferred between a terminal and JCRE.

关键词： IC card java card JCRE installation resolution post-issuance

来源：评论

学校读者我要写书评

暂无评论

Reverse engineering a java card memory management algorithm

引用

COMPUTERS & SECURITY 2017年 66卷 97-114页

作者： Mesbah, Abdelhak Lanet, Jean-Louis Mezghiche, Mohamed Univ Boumerdes LIMOSE Lab Independence Ave Boumerdes 35000 Algeria INRIA LHS PEC 263 Ave Gen Leclerc F-35042 Rennes France

Smart cards are tamper resistant devices that manipulate assets in a secure way. Among the assets, one is of a particular interest the native layers. If some attacks have succeeded in getting access to the applicative layer very few of them have had access to the native layers. We propose here to use applicative programs to perform data reverse engineering in order to understand the hidden algorithms that manage the memory allocation. We are then able to generate our own fake references on objects that can be manipulated by the system as legal objects. Then, we propose a new attack called auto-forges that leads the system to interpret its own data or program as valid java meta data. This attack provides access to new memory fragments where the native layers are stored. Getting access to this asset allows us to start the reverse engineering of these native layers. (C) 2017 Elsevier Ltd. All rights reserved.

关键词： Data reverse engineering java card Software attack 'Iype inference Vulnerability discovery

来源：评论

学校读者我要写书评

暂无评论

Hardware/software co-design for a high-performance java card interpreter in low-end embedded systems

引用

MICROPROCESSORS AND MICROSYSTEMS 2015年第8期39卷 1076-1086页

作者： Zilli, Massimiliano Raschke, Wolfgang Weiss, Reinhold Loinig, Johannes Steger, Christian Graz Univ Technol Inst Tech Informat A-8010 Graz Austria NXP Semicond Austria GmbH Gratkorn Austria

java card is a java running environment specific for smart cards. In such low-end embedded systems, the execution time of the applications is an issue of first order. One of the components of the java card Virtual Machine (JCVM) playing an important role in the execution speed is the bytecode interpreter. In java systems the main technique for speeding-up the interpreter execution is the Just-In-Time compilation am, but this resource consuming technique is inapplicable in systems with as restricted resources available as in smart cards. This paper presents a hardware/software co-design solution for the performance improvement of the interpreter. In the software domain, we adopted a pseudo-threaded code interpreter that allows a better run-time performance with a small amount of additional code. In the hardware domain, we proceeded moving parts of the interpreter into hardware, giving origin to a java card interpreter based on an application specific instruction set processor. (c) 2015 Elsevier B.V. All rights reserved.

关键词： Hardware/software co-design Smart card java card java interpreter Hardware-supported interpreter Application specific instruction set processor

来源：评论

学校读者我要写书评

暂无评论

Reverse engineering java card and vulnerability exploitation: a shortcut to ROM

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2019年第1期18卷 85-100页

作者： Mesbah, Abdelhak Lanet, Jean-Louis Mezghiche, Mohamed Univ Boumerdes Independence Ave Boumerdes 35000 Algeria INRIA LHS PEC 263 Ave Gen Leclerc F-35042 Rennes France

Secure elements store and manipulate assets in a secure way. The most attractive assets are the cryptographic keys stored into the memory that can be used to provide secure services to a system. For this reason, secure elements are prone to attacks. But retrieving assets inside such a highly secure device is a challenging task. This paper presents the process we used to gain access to the assets in the particular case of java card secure element. In a java card, the assets are stored securely, i.e., respecting confidentiality and integrity attributes. Only the native layers can manipulate these sensitive objects. Thus, the java interpreter, the API and the run time act as a firewall between the assets and the java applications that one can load into the device. Finding a vulnerability into this piece of software is of a prime importance. Finding a vulnerability into a software is often not enough to develop a complete exploit. Here, we demonstrate at the end that a java card applet can call the hidden native functions used to decipher the secure container that encapsulates a key. Some previous attacks have shown the ability to get access to the application code area. But the java card intermediate byte code detected in the dumps has shown several differences with regard to the specification, which prevents the reverse engineering of the applicative code. Thus, to avoid the execution of shell code by a hostile applet, a part of the byte code stored into the card is unknown. The transformation is done on-the-fly during the upload of an application. We present in this article a new approach for reversing the unknown instruction set of the intermediate byte code which in turn has led to reverse engineering of the java classes of the attacked card. We discovered during the reverse that some method calls have an unusual signature. Without having access to the native code, we have inferred the semantics of the called methods and their calling convention. These methods have

关键词： Smart card java card Reverse engineering Native calls Vulnerability exploitation

来源：评论

学校读者我要写书评

暂无评论

An improvement for applets download speed using transaction buffer based on RAM memory of java card system using IC chip

引用

IEICE ELECTRONICS EXPRESS 2011年第10期8卷 705-709页

作者： Oh, Se-Won Seok, Seung-Joon Jung, Min-Soo Univ Kyungnam Dept Comp Engn Changwon Si 631701 Kyungnam South Korea

java card technology is already a standard for smart cards and (U) SIM cards using an IC chip. java card technology has a problem related to slow execution speed of a program. It is also supports the transaction mechanism based on Flash memory to guarantee the integrity of data and a complete transaction during the execution of applets or downloading of applets. It is caused by too many Flash memory writing operations. In this paper, we have proposed a method to reduce the number of writing that new transaction mechanism in RAM memory.

关键词： IC card java card RAM transaction buffer JCRE transaction mechanism JCVM

来源：评论

学校读者我要写书评

暂无评论

Specification and Runtime Verification of java card Programs

引用

ELECTRONIC NOTES IN THEORETICAL COMPUTER SCIENCE 2009年第C期240卷 61-78页

作者： da Costa, Umberto Souza Moreira, Anamaria Martins Musicante, Martin A. Souza Neto, Placido A. Univ Fed Rio Grande do Norte DIMAp Campus Univ Natal RN Brazil Ctr Fed Educ Tecnol Rio Grande Norte BR-1559 Natal RN Brazil

java card is a version of java developed to run on devices with severe storage and processing restrictions. The applets that run on these devices are frequently intended for use in critical, highly distributed, mobile conditions. They are required to be portable and safe. Often, the requirements of the application impose the use of dynamic, on-card verifications, but most of the research developed to improve safety of java card applets concentrates on static verification methods. This work presents a runtime verification approach based on Design by Contract to improve the safety of java card applications. To this end, we propose JCML (java card Modeling Language) a specification language derived from JML (java Modeling Language) and its implementation: a compiler that generates runtime verification code. We also present some experiments and quality indicators.

关键词： JML java card JCML Compiler Runtime Verification

来源：评论

学校读者我要写书评

暂无评论

Generating Control Flow Graph from java card Byte Code 3

Generating Control Flow Graph from Java Card Byte Code

引用

3rd IEEE International Colloquium on Information Science and Technology (CIST)

作者： Amine, Achkar Mohammed, Benattou Jean-Louis, Lanet Ibn Tofail Univ Kenitra Morocco Univ Limoges Lab XLIM Secure Smart Devices F-87065 Limoges France

ISBN: (纸本)9781479959792

The verification process in industrial context of embedded software in smart card is considered difficult, extremely time-consuming, and costly, with very few tools and techniques available to aid in the verification process. The work proposed in this paper consist to define the main architecture of testing java card application and a specific test model which consists of reducing a given java-card application to one method which have one input and one output data which correspond with the real communication between the card and the off-card applications. The paper details the first step of testing constraint specifications which consist of modeling and generating control flow graph in inter and intra procedural level from the byte code of java-card applications.

关键词： java embedded systems flow graphs program testing program verification smart cards software architecture java card application java card byte code architecture constraint specifications testing control flow graph embedded software industrial context inter procedural level intra procedural level off-card applications smart card test model verification process Flow graphs Process control Silicon Smart cards Switches Testing Health Smart cards Flowcharts control flow diagram java java programming language experimental model Embedded software program testing program verification address byte Software architecture Process control Switches Embedded systems java card

来源：评论

学校读者我要写书评

暂无评论

JCSI: A tool for checking secure information flow in java card applications

引用

JOURNAL OF SYSTEMS AND SOFTWARE 2012年第11期85卷 2479-2493页

作者： Avvenuti, Marco Bernardeschi, Cinzia De Francesco, Nicoletta Masci, Paolo Univ Pisa Dept Informat Engn I-56126 Pisa Italy Queen Mary Univ London Sch Elect Engn & Comp Sci London E1 4NS England

This paper describes a tool for checking secure information flow in java card applications. The tool performs a static analysis of java card CAP files and includes a CAP viewer. The analysis is based on the theory of abstract interpretation and on a multi-level security policy assignment. Actual values of variables are abstracted into security levels, and bytecode instructions are executed over an abstract domain. The tool can be used for discovering security issues due to explicit or implicit information flows and for checking security properties of java card applications downloaded from untrusted sources. (c) 2012 Elsevier Inc. All rights reserved.

关键词： java card java bytecode CAP file Secure information flow Abstract interpretation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：