Source code verification of a secure payment applet

Journal of Logic and Algebraic Programming

Volumn 58, Issue 1-2, 2004, Pages 107-120

  Jacobs, Bart ^a   Oostdijk, Martijn ^a   Warnier, Martijn ^a  

^a RADBOUD UNIVERSITY NIJMEGEN   (Netherlands)

Author keywords

Applet verification; Java; Security; Smart card

Indexed keywords

CRYPTOGRAPHY; DATA FLOW ANALYSIS; ENCODING (SYMBOLS); JAVA PROGRAMMING LANGUAGE; NETWORK PROTOCOLS; SECURITY OF DATA; THEOREM PROVING;

APPLET VERIFICATION; JAVA MODELING LANGUAGES (JML);

SMART CARDS;

EID: 0346341140     PISSN: 15678326     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jlap.2003.07.007     Document Type: Conference Paper

References (26)

1. Anderson R. The formal verification of a payment system. Hinchey M.G., Bowen J.P. Industrial Strength Formal Methods. 1999;43-52 Springer-Verlag.
2. van den Berg J., Jacobs B. The LOOP compiler for Java and JML. Margaria T., Yi W. Tools and Algorithms for the Construction and Analysis of Software (TACAS). LNCS. vol. 2031:2001;299-312 Springer-Verlag.
3. van den Berg J., Jacobs B., Poll E. Formal specification and verification of Java Card's application identifier class. Attali I., Jensen T. Java on Smart Cards: Programming and Security (JavaCard Workshop 2000). LNCS. vol. 2041:2001;137-150 Springer-Verlag.
4. C.-B. Breunesse, J. van den Berg, B. Jacobs, Specifying and verifying a decimal representation in Java for smart cards, in: Algebraic Methodology and Software Technology, LNCS, Springer, Berlin, in press.
5. R. Brinkman, J.-H. Hoepman, Secure method invocation in Jason, in: Proceedings of Cardis 2002, pp. 29-40 (USENIX Assoc., 2002).
6. Burrows M., Abadi M., Needham R. A logic of authentication. Proc. Royal Soc. Series A. 426:1989;233-271.
7. Chen Z. Java Card Technology for Smart Cards: Architecture and Programmer's Guide. 2000;Addison-Wesley. June.
8. Ernst M.D., Cockrell J., Griswold W.G., Notkin D. Dynamically discovering likely program invariants to support program evolution. IEEETSE. 27(2):2001;99-123.
9. Flanagan C., Leino K.R.M., Lillibridge M., Nelson G., Saxe J.B., Stata R. Extended static checking for Java. in: Proceedings of the 2002 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI). SIGPLAN Notices. vol. 37:2002;234-245 ACM.
10. Formal Systems (Europe) Ltd., Failures-Divergence Refinement, FDR2 user manual, May 2000.
11. Global Platform, Open platform card specification version 2.1, June 2001. Available from 〈http://www.globalplatform.org/〉.
12. Haneberg D., Reif W., Stenzel K. A method for secure smartcard applications. in: Proceedings of AMAST 2002. LNCS. vol. 2422:2002;319-333 Springer-Verlag.
13. E. Hubbers, M. Oostdijk, E. Poll, From finite state machines to provably correct Java Card applets, in: Proceedings of the 18th IFIP Information Security Conference, Kluwer Academic Publishers, in press.
14. Huisman M., Jacobs B. Java program verification via a Hoare logic with abrupt termination. Maibaum T. Fundamental Approaches to Software Engineering (FASE'00). LNCS. vol. 1783:2000;284-303 Springer-Verlag.
15. B. Jacobs, Weakest precondition reasoning for Java programs with JML annotations, J. Logic Algebraic Program., this issue.
16. B. Jacobs et al., Reasoning about classes in Java (preliminary report), in: Object-Oriented Programming, Systems, Languages and Applications (OOPSLA), ACM Press, 1998, pp. 329-340.
17. Leavens G.T., Baker A.L., Ruby C. JML: a notation for detailed design. Kilov H., Rumpe B., Harvey W. Behavioral Specifications for Businesses and Systems. 1999;175-188 Kluwer Academic Publishers.
18. G.T. Leavens, A.L. Baker, C. Ruby, Preliminary design of JML: a behavioral interface specification language for Java, Techn. Rep. 98-06q, Dep. of Comp. Sci., Iowa State Univ., 2002. Available from 〈http://www.cs.iastate.edu/̃leavens/jml.html〉
19. Lowe G. Casper: a compiler for the analysis of security protocols. J. Comp. Security. 6:1998;53-84.
20. R. Marlet, D. Le Métayer, Security properties and Java Card specificities to be studied in the SecSafe project, Technical Report SECSAFE-TL-006, Trusted Logic, August 2001.
21. W. Mostowski, Rigorous development of JavaCard applications, in: T. Clarke, A. Evans, K. Lano (Eds.), Proceedings of the Fourth Workshop on Rigorous Object-Oriented Methods, London, 2002.
22. S. Owre, N. Shankar, J.M. Rushby, D.W.J. Stringer-Calvert, PVS System Guide, Computer Science Laboratory, SRI International, Menlo Park, CA, USA, September 1999. Available from < 〈http://pvs.csl.sri.com/〉
23. Poll E., van den Berg J., Jacobs B. Specification of the Java Card API in JML. Domingo-Ferrer J., Chan D., Watson A. Fourth Smart Card Research and Advanced Application Conference (CARDIS'2000). 2000;135-154 Kluwer.
24. Poll E., van den Berg J., Jacobs B. Formal specification of the Java Card API in JML: the APDU class. Comp. Network. 36(4):2001;407-421.
25. The Krakatoa team, The Krakatoa proof tool, 2002. Available from 〈http://www.lri.fr/̃marche/krakatoa/〉
26. European IST-2000-26328 Project VerifiCard. Available from 〈http://www.verificard.org〉