Improving the official specification of Java bytecode verification

Concurrency and Computation: Practice and Experience

Volumn 15, Issue 2, 2003, Pages 155-179

  Coglio, Alessandro ^a  

^a KESTREL INSTITUTE   (United States)

Author keywords

Bytecode verification; Java; Specification

Indexed keywords

ALGORITHMS; DATA FLOW ANALYSIS; PROGRAM COMPILERS; SECURITY OF DATA; SUBROUTINES;

BYTECODE VERIFICATION; JAVA VIRTUAL MACHINE;

JAVA PROGRAMMING LANGUAGE;

EID: 0037307180     PISSN: 15320626     EISSN: None     Source Type: Journal    
DOI: 10.1002/cpe.714     Document Type: Article

References (50)

1. Arnold K, Gosling J, Holmes D. The Java™ Programming Language (3rd edn). Addison-Wesley: Cambridge, MA, 2000.
2. Gosling J, Joy B, Steele G, Bracha G. The Java™ Language Specification (2nd edn). Addison-Wesley: Cambridge, MA, 2000.
3. Lindholm T, Yellin F. The Java™ Virtual Machine Specification (2nd edn). Addison-Wesley: Cambridge, MA, 1999.
4. Gong L. Inside Java™ 2 Platform Security. Addison-Wesley: Cambridge, MA, 1999.
5. Dean D, Felten E, Wallach D. Java security: From HotJava to Netscape and beyond. Proceedings IEEE Symposium of Security and Privacy, 1996; 190-200.
6. Gosling J. Java intermediate bytecode. Proceedings of the Workshop on Intermediate Representations (IR'95) ACM SIGPLAN Notices 1995; 30:111-118.
7. Nielson F, Nielson HR, Hankin C. Principles of Program Analysis. Springer: Berlin, 1998.
8. Saraswat V. Java is not type-safe. Technical Report, AT&T Research, 1997. http://www.research.att.com/vj/bug.html.
9. Liang S, Bracha G. Dynamic class loading in the Java™ virtual machine. Proceedings of the 13th ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA'98) ACM SIGPLAN Notices 1998; 33:36-44.
10. Qian Z, Goldberg A, Coglio A. A formal specification of Java class loading. Proceedings of the 15th ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA'00) (ACM SIGPLAN Notices, vol. 35). ACM Press: New York, 2000; 325-336. http://www.kestrel.edu/java. (Long Version)
11. Coglio A, Goldberg A. Type safety in the JVM: Some problems in Java 2 SDK 1.2 and proposed solutions. Concurrency and Computation: Practice and Experience 2001: 13(13):1153-1171.
12. Tozawa A, Hagiya M. Careful analysis of type spoofing. Proceedings of Java-Informations-Tage 1999 (JIT'99). Springer: Berlin, 1999; 290-296.
13. Goldberg A. A specification of Java loading and bytecode verification. Proceedings of the 5th ACM Conference on Computer and Communications Security (CCS'98), 1998; 49-58.
14. Qian Z. A formal specification of Java™ Virtual Machine instructions for objects, methods and subroutines. Formal Syntax and Semantics of Java™ (Lecture Notes in Computer Science, vol. 1523), Alves-Foss J (ed.). Springer: Berlin, 1999; 271-312.
15. Coglio A. Treatment of protected members in Java bytecode verification. Technical Report, Kestrel Institute, http://www.kestrel.edu/java.
16. Bracha G. Private communication, June 2001.
17. Coglio A. Java bytecode verification: Another complete formalization. Technical Report, Kestrel Institute. http://www.kestrel.edu/java.
18. Freund S, Mitchell J. A type system for object initialization in the Java bytecode language. ACM Transactions on Programming Languages and Systems 1999; 21(6):1196-1250.
19. Stata R, Abadi M. A type system for Java bytecode subroutines. ACM Transactions on Programming Languages and Systems 1999; 21(1):90-137.
20. Coglio A. Java bytecode subroutines demystified. Technical Report, Kestrel Institute. http://www.kestrel.edu/java.
21. O'Callahan R. A simple, comprehensive type system for Java bytecode subroutines. Proceedings of the 26th ACM Symposium on Principles of Programming Languages (POPL'99), 1999; 70-78.
22. Freund S, Mitchell J. A type system for Java bytecode subroutines and exceptions. Technical Note STAN-CS-TN-99-91, Computer Science Department, Stanford University, August 1999.
23. Coglio A. Simple verification technique for complex Java bytecode subroutines. Proceedings of the 4th ECOOP Workshop on Formal Techniques for Java-like Programs, June 2002; http://www.kestrel.edu/java. (Long Version)
24. Stärk R, Schmid J. The problem of bytecode verification in current implementations of the JVM. Technical Report, Department of Computer Science, ETH Zürich, 2000.
25. The Kimera project Web site. http://kimera.cs.washington.edu
26. Coglio A. Java bytecode verification: A complete formalization. Technical Report, Kestrel Institute. http://www.kestrel.edu/java.
27. Freund S. The costs and benefits of Java bytecode subroutines. Proceedings of OOPSLA'98 Workshop on Formal Underpinnings of Java, 1998.
28. Casset L, Lanet JL. A formal specification of the Java bytecode semantics using the B method. Proceedings of the 1st ECOOP Workshop on Formal Techniques for Java Programs, June 1999.
29. Coglio A, Goldberg A, Qian Z. Towards a provably-correct implementation of the JVM bytecode verifier. Proceedings of OOPSLA'98 Workshop on Formal Underpinnings of Java, October 1998.
30. Fong P, Cameron R. Proof linking: Modular verification of mobile programs in the presence of lazy, dynamic linking. ACM Transactions on Software Engineering and Methodology 2000; 9(4):379-409.
31. Freund S, Mitchell J. A formal framework for the Java bytecode language and verifier. Proceedings of the 14th ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA'99) ACM SIGPLAN Notices 1999; 34:147-166.
32. Hagiya M, Tozawa A. On a new method for dataflow analysis of Java Virtual Machine subroutines. Proceedings of the 5th Static Analysis Symposium (SAS'98) (Lecture Notes in Computer Science, vol. 1503). Springer: Berlin, 1998; 17-32.
33. Jones M. The functions of Java bytecode. Proceedings of OOPSLA'98 Workshop on Formal Underpinnings of Java, October 1998.
34. Klein G, Nipkow T. Verified lightweight bytecode verification. Proceedings of the 2nd ECOOP Workshop on Formal Techniques for Java Programs, June 2000.
35. Leroy X. Java bytecode verification: An overview. Proceedings of the 13th Conference on Computer Aided Verification (CAV'01) (Lecture Notes in Computer Science, vol. 2102). Springer: Berlin, 2001; 265-285.
36. Nipkow T. Verified bytecode verifiers. Proceedings of the 4th Conference on Foundations of Software Science and Computation Structures (FOSSACS'01) (Lecture Notes in Computer Science, vol. 2030). Springer: Berlin, 2001; 347-363.
37. Posegga J, Vogt H. Java bytecode verification using model checking. Proceedings of the OOPSLA'98 Workshop on Formal Underpinnings of Java, October 1998.
38. Pusch C. Proving the soundness of a Java bytecode verifier specification in Isabelle/HOL. Proceedings of the 5th Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'99) (Lecture Notes in Computer Science, vol. 1579). Springer: Berlin, 1999; 89-103.
39. Qian Z. Standard fixpoint iteration for Java bytecode verification. ACM Transactions on Programming Languages and Systems 2000; 22(4):638-672.
40. Requet A. A B model for ensuring soundness of a large subset of the Java Card virtual machine. Proceedings of the 5th ERCIM Workshop on Formal Methods for Industrial Critical Systems (FMICS'00), April 2000; 29-45.
41. Rose E, Rose K. Lightweight bytecode verification. Proceedings of the OOPSLA'98 Workshop on Formal Underpinnings of Java, October 1998.
42. Stärk R. Schmid J, Börger E. Java™ and the Java™ Virtual Machine: Definition, Verification, Validation. Springer: Berlin, 2001.
43. Yelland P. A compositional account of the Java Virtual Machine. Proceedings of the 26th ACM Symposium on Principles of Programming Languages (POPL'99), 1999; 57-69.
44. Drossopoulou S. An abstract model of Java dynamic linking and loading. Proceedings of the 3rd Workshop on Types In Compilation (TIC'00) (Lecture Notes in Computer Science, vol. 2071). Springer: Berlin, 2001; 53-84.
45. Fong P, Cameron R. Proof linking: Distributed verification of Java classfiles in the presence of multiple classloaders. Proceedings of the 1st Java Virtual Machine Research and Technology Symposium (JVM'01). USENIX, 2001; 53-66.
46. Jensen T, Le Métayer D, Thorn T. Security and dynamic class loading in Java: A formalisation. Proceedings 1998 IEEE International Conference on Computer Languages (ICCL'98), 1998; 4-15.
47. Tozawa A, Hagiya M. Formalization and analysis of class loading in Java. Higher-Order and Symbolic Computation (HOSC) 2002; 15:7-55.
48. Coglio A. Improving the official specification of Java bytecode verification. Proceedings of the 3rd ECOOP Workshop on Formal Techniques for Java Programs, June 2001.
49. Kestrel Institute and Kestrel Technology LLC. Specware™. http://www.specware.org.
50. Sun Microsystems. Connected, limited device configuration: Specification version 1.0a. http://java.sun.com/j2me.