Improving the security of downloadable java applications with static analysis

Electronic Notes in Theoretical Computer Science

Volumn 141, Issue 1 SPEC. ISS., 2005, Pages 129-144

  Crégut, Pierre ^a   Alvarado, Cuihtlauac ^a  

^a ORANGE LABS   (France)

Author keywords

Bytecode; Mobiles; Static analysis

Indexed keywords

CODES (SYMBOLS); DATA REDUCTION; MOBILE TELECOMMUNICATION SYSTEMS; PERSONAL COMPUTERS; RISK ASSESSMENT; SECURITY OF DATA; VIRTUAL REALITY;

BYTECODE; JAVA RUNTIME ENVIRONMENT; MOBILES; STATIC ANALYSIS;

JAVA PROGRAMMING LANGUAGE;

EID: 28044457451     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2005.02.033     Document Type: Article

References (17)

1. Andersen, L.O., "Program Analysis and Specialization for the C Programming Language," Ph.D. thesis, DIKU, Department of Computer Science, University of Copenhagen (1994), available as DIKU report 94/19
2. Berners-Lee, T., L. Masinter and M. McCahill, Uniform resource locators (URL), RFC 1738, IETF (1994)
3. A.S. Christensen, A. Møller, and M.I. Schwartzbach Precise analysis of string expressions Proc. 10th International Static Analysis Symposium SAS '03 LNCS 2694 2003 1 18 URL http://www.brics.dk/JSA/
4. Corbett, J.C., Constructing compact models of concurrent Java programs, in: ISSTA '98: Proceedings of the 1998 ACM SIGSOFT international symposium on Software testing and analysis (1998), pp. 1-10
5. Elata Elata sense commercial documentation URL http://www.elata.com/ 2004
6. JSR 118 Expert Group, Mobile information device profile (MIDP), version 2.0, Java specification request, Java Community Process (2002)
7. JSR 218 Expert Group, Connected limited device configuration (CLDC), version 1.1, Java specification request, Java Community Process (2002)
8. JSR 30 Expert Group, Connected limited device configuration (CLDC), version 1.0, Java specification request, Java Community Process (2000)
9. JSR 37 Expert Group, Mobile information device profile (MIDP), version 1.0, Jav specification request, Java Community Process (2000)
10. O. Lhoták, and L. Hendren Scaling Java points-to analysis using Spark G. Hedin Compiler Construction, 12th International Conference LNCS 2622 2003 153 169
11. Liang, D., M. Pennings and M.J. Harrold, Extending and evaluating flow-insenstitive and context-insensitive points-to analyses for Java, in: PASTE '01: Proceedings of the 2001 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering (2001), pp. 73-79
12. F. Nielson, H.R. Nielson, and C.L. Hankin Principles of Program Analysis 1999 Springer
13. Rountev, A., A. Milanova and B.G. Ryder, Points-to analysis for Java using annotated constraints, in: OOPSLA '01: Proceedings of the 16th ACM SIGPLAN conference on Object oriented programming, systems, languages, and applications (2001), pp. 43-55
14. Steensgaard, B., Points-to analysis in almost linear time, in: POPL '96: Proceedings of the 23rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages (1996), pp. 32-41
15. Unified Testing Initiative Unified testing criteria for Java(tm) technology-based applications for mobile devices version 1.4, URL http://www.javaverified.com 2004
16. Vallée-Rai, R., L. Hendren, V. Sundaresan, P. Lam, E. Gagnon and P. Co, Soot - a Java optimization framework, in: CASCON conference, 1999, pp. 125-135. URL http://www.sable.mcgill.ca/publications
17. Whaley, J. and M. Rinard, Compositional pointer and escape analysis for Java programs, in: OOPSLA '99: Proceedings of the 14th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications (1999), pp. 187-206