Security evaluation of J2ME CLDC embedded java platform

Journal of Object Technology

Volumn 5, Issue 2, 2006, Pages 125-154

  Debbabi, Mourad ^a   Saleh, Mohamed ^a   Talhi, Chamseddine ^a   Zhioua, Sami ^a  

^a University of Concordia   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 33645690480     PISSN: 16601769     EISSN: 16601769     Source Type: Journal    
DOI: 10.5381/jot.2006.5.2.a2     Document Type: Article

References (37)

1. S. Chadha. J2me issues in the real wireless world. http://www.micro java.com/articles/perspective/issues?content_id=4323, January 2003.
2. J. Eichhloz. JSR 205 Wireless Messaging API 2.0, June 2004.
3. Carl Ellison and Bruce Schneier. Ten risks of PKI: What you're not being told about Public Key Infrastructure. Computer Security Journal, 16(1):1-7, 2000.
4. Cédric Fournet and Andrew D. Gordon. Stack inspection: theory and variants. In Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 307-318. ACM Press, 2002.
5. J. Franks, P. Hallam-Baker, J. Hostetler, S. Lawrence, P. Leach, A. Luotonen, and L. Stewart. RFC 2617: HTTP Authentication: Basic and Digest Access Authentication, June 1999.
6. Ian Goldberg and David Wagner. Randomness and the Netscape browser. Dr. Dobb's Journal of Software Tools, 21(1):66, 68-70, January 1996.
7. Vipul Gupta and Sumit Gupta. KSSL: Experiments in Wireless Internet Security. Technical Report TR-2001-103, Sun Microsystems, Inc, Santa Clara, California, USA, November 2001.
8. D. Hugo. FExplorer Web Site, http://users.skynet.be/domi/fexplorer.htm.
9. Wassim Itani and Ayman Kayssi. J2me application-layer end-to-end security for m-commerce. Journal of Network and Computer Applications, 27(1): 13-32, January 2004.
10. G. Steele J. Gosling, B. Joy and G. Bracha. The Java Language Specification Second Edition. The Java Series. Addison-Wesley, Boston, Mass., 2000.
11. J. Knudsen. MIDP Application Security 1: Design Concerns and Cryptography, http://developers.sun.com/techtopics/mobility/midp/articles/security1/, September 2002.
12. J. Knudsen. MIDP Application Security 2: Understanding SSL and TLS. http://developers.sun.com/techtopics/mobility/midp/articles/security2/, October 2002.
13. J. Knudsen. MIDP Application Security 3: Authentication in MIDP. http://developers.sun.com/techtopics/mobility/midp/articles/security3/, December 2002.
14. J. Knudsen. MIDP Application Security 4: Encryption in MIDP. http://developers.sun.com/techtopics/mobility/midp/articles/security4/, June 2003.
15. O. Kolsi and T. Virtanen. MIDP 2.0 Security Enhancements. In Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 9 - Volume 9, Washington DC, USA, dec 2004.
16. Sheng Liang. Java Native Interface: Programmer's Guide and Specification. Addison-Wesley, Reading, MA, USA, 1999.
17. T. Lindholm and F. Yellin. The Java Virtual Machine Specification (Second Edition). Addison Wesley, April 1999.
18. LSD Research Group. Java and Java Virtual Machine Security, Vulner-abilities and their Exploitation Techniques. http://www.blackhat.com/presentations/bh-asia-02/LSD/bh-asia-02-lsd-article.pdf, September 2002.
19. Sun MicroSystems. Connected, Limited Device Configuration. Specification Version 1.0, Java 2 Platform Micro Edition. Technical report, Sun MicroSystems, California, USA, May 2000.
20. Sun MicroSystems. KVM Porting Guide. Technical report, Sun MicroSystems, California, USA, September 2001.
21. Nokia. Series 60 Platform, http://www.nokia.eom/nokia/0,8764,46827,00.html.
22. OMA. Implementation Best Practices for OMA DRM v1.0 Protected MIDlets, May 2004.
23. J. Van Peursem. JSR 118 Mobile Information Device Profile 2.0, November 2002.
24. Phenoelit Hackers Group, http://www.phenoelit.de/, 2003.
25. Roger Riggs, Antero Taivalsaari, Mark VandenBrink, and Jim Holliday. Programming wireless devices with the Java 2 platform, micro edition: J2ME Connected Limited Device Configuration (CLDC), Mobile Information Device Profile (MIDP). Addison-Wesley, Reading, MA, USA, 2001.
26. T. Sayeed, A. Taivalsaari, and F. Yellin. Inside The K Virtual Machine, http://java.sun.com/javaone/javaone2001/pdfs/1113.pdf, Jan 2001.
27. Bug 4824821: Return value of midpInitializeMemory is not checked, http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4824821, February 2003.
28. Bug 4959337: RSA Division by Zero, http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4959337, November 2003.
29. Bug 4963644: Basic Authentication Scheme is not fully supported. http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4963644, December 2003.
30. Bug 4802893: RI checks sockets before checking permissions, http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4802893, January 2004.
31. Sun Microsystems. Java 2 Platform Security Architecture, http://java.sun.com/j2se/1.4.2/docs/guide/security/index.html, 2002.
32. Sun Microsystems. KNI Specification K Native Interface (KNI) 1.0. http://www.carfield.com.hk/java_store/j2me/j2me_cldc/doc/kni/html/index.html, October 2002.
33. Sun Microsystems. The Recommended Security Policy for GSM/UMTS Compliant Devices, Addendum to the Mobile Information Device Profile version 2.0, 2002.
34. A. Taivalsaari. JSR 139 J2ME Connected Limited Device Configuration 1.1, March 2003.
35. The Legion of the Bouncy Castle. Bouncy Castle Cryptography API. http://www.bouncycastle.org, 2004.
36. R. Viswanathan. JSR 82 Java APIs for Bluetooth, Mars 2002.
37. Michael Juntao Yuan and Ju Long. Securing wireless j2me. http://www-106.ibm.com/developerworks/java/library/wi-secj2me.html, June 2002.