MIDP 2.0 security enhancements

Proceedings of the Hawaii International Conference on System Sciences

Volumn 37, Issue , 2004, Pages 4589-4596

  Kolsi, Otto ^a   Virtanen, Teemupekka ^a  

^a AALTO UNIVERSITY   (Finland)

Author keywords

J2ME; MIDP; Security

Indexed keywords

CONNECTED DEVICE CONFIGURATION (CDC); JAVA 2 MICRO EDITION (J2ME); MOBILE DEVICES; MOBILE INFORMATION DEVICE PROFILE (MIDP);

BANDWIDTH; INFORMATION ANALYSIS; JAVA PROGRAMMING LANGUAGE; LIBRARIES; NETWORK PROTOCOLS; PERSONAL DIGITAL ASSISTANTS; PROBLEM SOLVING; VIRTUAL REALITY;

SECURITY SYSTEMS;

EID: 12344253674     PISSN: 10603425     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (29)

1. S. Microsystems, "Connected device configuration (CDC) and the foundation profile," 2001. [Online]. Available: http://java.sun.com/ products/cdc/wp/CDCwp.pdf
2. _, "The CLDC HotSpot Implementation Virtual Machine," 2002. [Online]. Available: http://java.sun.com/products/cldc/wp/CLDC_HI_WhitePaper.pdf
3. _, "J2ME Connected, Limited Device Configuration," 2002. [Online]. Available: http://jcp.org/aboutJava/communityprocess/final/jsr030/
4. _, "Programmer's Guide - J2ME Personal Basis Profile," 2002. [Online]. Available: http://java.sun.com/j2me/docs/pdf/PBP_Programmer_Guide.pdf
5. _, "Programmer's Guide - J2ME Personal Profile," 2002. [Online]. Available: http://java.sun.com/j2me/docs/pdf/PP_Programmer_Guide.pdf
6. _, "PDA Profile for the J2ME Platform (JSR-75)," 2002. [Online]. Available: http://www.jcp.org/jsr/detail/75.jsp
7. _, "Mobile Information Device Profile (JSR-37)," 2002. [Online]. Available: http://www.jcp.org/jsr/detail/37.jsp
8. P. Ala-Pietil, "At JavaOne 2001, cited in JCS International," USA. [Online]. Available: http://www.jcs.be/news/news_company_06-2001.html
9. M. J. Yuan and J. Long, "Securing wireless J2ME," 2002. [Online]. Available: http://www-106.ibm.com/developerworks/wireless/library/ wisecj2me.html
10. S. Jun-Zhao, D. Howie, A. Koivisto, and J. Sauvola, "A hierarchical framework model of mobile security," in Personal, Indoor and Mobile Radio Communications, 2001. IEEE, 2001.
11. D. Gollmann, Computer Security. USA: John Wiley & Co, 1999.
12. P. Ashley, H. Hinton, and M. Vandenwauver, "Wired versus Wireless Security: The Internet, WAP and iMode for E-Commerce," in Proc. of Computer Security Applications Conference 2001, USA, 2001.
13. A. Biryukov, A. Shamir, and D. Wagner, "Real time cryptanalysis of A5/1 on a PC," Lecture Notes in Computer Science, vol. 1978, 2001.
14. L. Tarkkala, "Attacks against A5," 2000. [Online]. Available: http://www.hut.fi/u/ltarkkal/netsec.ps
15. R. Anderson, "GSM hack - operator flunks the challenge," 1997. [Online]. Available: http://catless.ncl.ac.uk/Risks/19.48.html#subj5
16. _, Security Engineering. USA: John Wiley & Sons, 2001.
17. C. Candolin and J. Lundberg, "Attacks on GPRS," 2001. [Online]. Available: http://www.tml.hut.fi/candolin/studies/hakkeri/
18. J. Rautpalo, "GPRS security - secure remote connections over GPRS," 2000. [Online]. Available: http://citeseer.nj.nec.com/ rautpalo00gprs.html
19. A. K. Ghosh and T. M. Swaminatha, "Software Security and Privacy Risks in Mobile E-Commerce," Communications of the ACM, vol. 44, pp. 51-57, 2 2001.
20. G. McGraw and E. Felten, Securing JAVA. USA: John Wiley & Co, 1999.
21. A. Chander, J. Mitchell, and I. Shin, "Mobile code security by Java bytecode instrumentation," in Proc. of DARPA Information Survivability Conference & Exposition II 2001. USA: IEEE, 2001.
22. M. Shoffner and M. Hughes, "Java and web-executable object security," Dr.Dobb's Journal, 11 1996. [Online]. Available: http://www.ddj.com/documents/ddj9611d/
23. P. Paal, "Java 2 Platform Micro Edition," 2000. [Online]. Available: http://www.hut.fi/u/opaal/netsec/j2me.pdf
24. S. Microsystems, "Over The Air User Initiated Provisioning Recommended Practice for the Mobile Information Device Profile," 2001. [Online]. Available: http://java.sun.com/products/midp/OTAProvisioning1.0.pdf
25. _, "Mobile Information Device Profile Specification 2.0 (JSR-118)," 2002. [Online]. Available: http://jcp.org/aboutJava/ comniunityprocess/final/jsr118/index.html
26. L. of Bouncy Castle, "Bouncy Castle Crypto API." [Online]. Available: http://www.bouncycastle.org
27. C. Ellison and B. Schneier, "Ten Risks of PKI: What You're not Being Told about Public Key Infrastructure," Computer Security Journal, 1 2000.
28. C. C. Center, "CERT Advisory CA-2001-04 Unauthentic "Microsoft Corporation" Certificates," 2001. [Online]. Available: http://www.cert.org/advisories/CA-2001-04.html
29. B. Schneier, Secrets and Lies: digital security in a networked world. USA: John Wiley & Sons, 2000.