Lightweight Bytecode Verification

Journal of Automated Reasoning

Volumn 31, Issue 3-4, 2003, Pages 303-334

  Rose, Eva ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Bytecode verification; Data flow analysis; Proof carrying code

Indexed keywords

ALGORITHMS; COMPUTER SIMULATION; DATA FLOW ANALYSIS; DATA REDUCTION; JAVA PROGRAMMING LANGUAGE; MICROPROCESSOR CHIPS; PROBLEM SOLVING; SMART CARDS;

BYTECODE VERIFICATION; PROOF-CARRYING CODE;

SECURITY OF DATA;

EID: 1942516273     PISSN: 01687433     EISSN: None     Source Type: Journal    
DOI: 10.1023/b:jars.0000021015.15794.82     Document Type: Article

References (39)

1. Abadi, M. and Cardelli, L.: A Theory of Objects, Monographs in Computer Science, Springer-Verlag, 1996.
2. Anderson, R.: Why cryptosystems fail, Comm. ACM 37(11) (1994), 32-40.
3. Barthe, G., Dufay, G., Jakubiec, L., Serpette, B., Sousa, S. and Yu, S.: Formalization in Coq of the Java Card Virtual Machine, in S. Drossopoulou, S. Eisenbach, B. Jacobs, G. T. Leavens, P. Müller, and A. Poetzsch-Heffter (eds.), Formal Techniques for Java Programs (ECOOP 2000 workshop), Sophia-Antipolis, France, 2000.
4. Bracha, G.: Java class file specification update, http://jcp.org/en/jsr/ detail?id=202, 2000.
5. Chen, Z.: Java Card Technology for Smart Cards, The Java Series, Addison-Wesley, 2000.
6. Colby, C., Lee, P., Necula, G. C., Blau, F., Plesko, M. and Cline, K.: A certifying compiler for Java, ACM SIGPLAN Notices 35(5) (2000a), 95-107. Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '00).
7. Colby, C., Necula, G. C. and Lee, P.: A proof-carrying code architecture for Java, in Proceedings of the 12th International Conference on Computer Aided Verification (CAV00), Chicago, IL, 2000b.
8. Drossopoulou, S., Eisenbach, S. and Khurshid, S.: Is the Java type system sound?, Theory and Practice of Object Systems 5(1) (1999), 3-24.
9. Freund, S.: The costs and benefits of Java bytecode subroutines, in S. Eisenbach (ed.), Formal Underpinnings of Java (an OOPSLA workshop), Vancouver, BC, Canada, 1998.
10. Freund, S. and Mitchell, J.: A formal framework for the Java bytecode language and verifier, in ACM Conference on Object-Oriented Programming: Systems, Languages and Applications, 1999.
11. Hartel, P. and Moreau, L.: Formalizing the safety of Java, the Java Virtual Machine and Java Card, ACM Computing Surveys 33(4) (2001), 517-558.
12. Jensen, T., Le Métayer, D. and Thorn, T.: A formalisation of visibility and dynamic loading in Java, in ICCL '98, 1998. Also published as a IRISA Technical Report no. 1137, October 1997.
13. Jensen, T., Le Métayer, D. and Thorn, T.: A formalisation of visibility and dynamic loading in Java, in ICCL '98, 1998. Also published as a IRISA Technical Report no. 1137, October 1997.
14. Kildall, G. A.: A unified approach to global program optimization, in Conference Record of the ACM Symposium on Principles of Programming Languages, Boston, Mass., 1973, pp. 194-206.
15. Klein, G.: Verified Java bytecode verification, Ph.D. thesis, Institut für Informatik, Technische Universität München, 2003.
16. Klein, G. and Nipkow, T.: Verified lightweight bytecode verification, Concurrency and Computation: Practice and Experience 13(13) (2001), 1133-1151. Invited contribution to special issue of papers from Formal Techniques for Java Programs (ECOOP 2000 workshop).
17. Klein, G. and Nipkow, T.: Verified bytecode verifiers, Theoret. Comput. Sci. (2002). To appear.
18. Leroy, X.: Java bytecode verification: An overview, in Computer Aided Verification, CAV 2001, Lecture Notes in Comput. Sci., Springer-Verlag, 2001, pp. 265-285.
19. Leroy, X.: Bytecode verification for Java smart card, Software Practice & Experience 32 (2002), 319-340.
20. Liang, S.: Sun's new verifier, Personal Communication (e-mail). Explains how the KVM's verifier implements lightweigt verification, 1999.
21. Lindholm, T. and Yellin, F.: The Java Virtual Machine Specification, The Java Series, Addison-Wesley, 1996.
22. Lindholm, T. and Yellin, F.: The Java Virtual Machine Specification, 2nd edn, The Java Series, Addison-Wesley, 1999.
23. McGraw, G. and Felten, E. W.: Java Security: Hostile Applets, Holes, and Antidotes, Wiley, 1997.
24. Necula, G. C.: Proof-carrying code, in POPL '97 - 24th Annual ACM Symposium on Principles of Programming Languages, SIGPLAN Notices, 1997.
25. Necula, G. C. and Lee, P.: Safe kernel extensions without run-time checking, in OSDI '96 - Second Symposium on Operating Systems Design and Implementation, Seattle, Washington, 1996.
26. Nielson, F., Nielson, H. R. and Hankin, C.: Principles of Program Analysis, Springer-Verlag, 1999.
27. O'Connell, M.: Java: The inside story, SunWorld. http://sunsite.uakom.sk/ sunworldonline/swol-07-1995-swol-07-java.html, 1995.
28. Rose, E.: Towards bytecode verification on a Java card, in M. Abadi (ed.), Workshop on Security and Languages, Palo Alto, California, 1997.
29. Rose, E.: Vérification de code d'octet de la machine virtuelle Java. Formalisation et implantation, Ph.D. thesis, SE. RoseUniversité Paris VII, 2, Place de Jussieu, 75251 Paris Cedex 05, France, 2002. Available from http://www.evarose.net/thesis-submitted.pdf.
30. Rose, E. and Rose, K. H.: Lightweight bytecode verification, in S. Eisenbach (ed.), Formal Underpinnings of Java (an OOPSLA workshop), Vancouver, BC, Canada, 1998.
31. Rose, E. and Rose, K. H.: Java access protection through typing, Concurrency and Computation: Practice and Experience 13(13) (2001), 1125-1132. First presented at the ECOOP 2000 workshop on Formal Techniques for Java Programs.
32. Stärk, R., Schmid, J. and Börger, E.: Java and the Java Virtual Machine - Definition, Verification, Validation, Springer-Verlag, 2001.
33. Stata, R. and Abadi, M.: A type system for Java bytecode subroutines, in L. Cardelli (ed.), Proceedings of the Twenty-Fifth Annual ACM Symposium on Principles of Programming Languages, San Diego, California, ACM, 1998.
34. Sun: Java frequently asked question 1.1: Where did Java come from? http://www.ibiblio.org/javafaq/javafaq.html, 1997.
35. Sun: Java 2 platform, micro edition, http://Java.sun.com/j2me, 1999a.
36. Sun: Java Card 2.1 platform, http://java.sun.com/products/javacard/ javacard21.html, 1999b.
37. Sun: Java 2 platform micro edition (J2ME) technology for creating mobile devices, http://Java.sun.com/products/cldc/wp/KVMwp.pdf, 2000.
38. Sun: Secure computing with Java: Now and the future, http://java.sun.com/ marketing/collateral/security, html, 2002. White paper.
39. Taivalsaari, A.: J2ME connected, limited device configuration, http://jcp.org/en/jsr/detail?id=30, 2000.