Using Coq to verify Java Card ™ applet isolation properties

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2758, Issue , 2003, Pages 335-351

  Andronick, June ^a   Chetali, Boutheina ^a   Ly, Olivier ^a  

^a SCHLUMBERGER   (United States)

Author keywords

Security; Smart Card; Theorem Proving

Indexed keywords

FORMAL LOGIC; FORMAL VERIFICATION; HARDWARE SECURITY; JAVA PROGRAMMING LANGUAGE; MOBILE SECURITY; SMART CARDS;

APPLET ISOLATION; COQ PROOF ASSISTANT; HIGH-ORDER MODELLING; JAVA CARD VIRTUAL MACHINE; SECURE DESIGNS; SECURITY; SECURITY PROPERTIES; VERIFICATION METHOD;

THEOREM PROVING;

EID: 35248858397     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/10930755_22     Document Type: Article

References (21)

1. J. Andronick, B. Chetali, and O. Ly. Formal Verification of the Confidentiality Property in Java Card™ Technology. Submitted at Journal of Logic and Algebraic Programming.
2. G. Barthe, G. Dufay, M. Huisman, and S. Melo de Sousa. Jakarta: a Toolset to Reason about the JavaCard Platform. In I. Attali and T. Jensen, editors, Proceedings of E-SMART'01, number 2140 in LNCS, pages 2-18. Springer-Verlag, 2001.
3. G. Barthe, G. Dufay, L. Jakubiec, and S. Melo de Sousa. A Formal Correspondence between Offencive and Defensive JavaCard Virtual Machine. In A. Cortesi, editor, Proceedings of VMCAI'02, number 2294 in LNCS, pages 32-45, 2002.
4. G. Barthe, G. Dufay, L. Jakubiec, B. Serpette, and S. Melo de Sousa. A Formal Executable Semantics of the JavaCard Platform. In D. Sands, editor, Proceedings of ESOP'01, number 2028 in LNCS, pages 302-319. Springer-Verlag, 2001.
5. G. Betarte, B. Chetali, E. Gimenez, and C. Loiseaux. Formavie: Formal Modelling and Verification of the JavaCard 2.1.1 Security Architecture. In E-SMART 2002, pages 213-231, 2002.
6. Z. Chen. Java Card Technology for Smart Cards: Architecture and Programmer's Guide. Addison Wesley, 2000.
7. M. Dam and P. Giambiagi. Confidentiality for Mobile Code: The Case of a Simple Payment Protocol. In 13th IEEE Computer Security Foundations Workshop, pages 233-244. IEEE Computer Society Press, July 2000.
8. J. A. Goguen and J. Meseguer. Security Policy and Security Models. In Proc. of the 1982 Symposium on Security and Privacy, pages 11-20. IEEE Computer Society Press, 1982.
9. J. A. Goguen and J. Meseguer. Unwinding and interference control. In Proc. of the 1982 Symposium on Security and Privacy, pages 75-86. IEEE Computer Society Press, 1984.
10. G. McGrow and E. Felten. Securing Java: Getting Down to Business with Mobile Code. John Wiley & Sons, 1999.
11. Sun Microsystems. Java Card 2.1.1 Specification. http://java.sun.com/products/javacard/, 2000.
12. Sun Microsystems. Java Card 2.2 API Specification. http://java.sun.com/products/javacard/, 2002.
13. P. Müller and A. Poetzsch-Heffter. A Type System for Checking Applet Isolation in Java Card. In S. Drossopoulou et al, editor, Proceedings of FTfJP'01, 2001.
14. S. Oaks. Java Security. O'Reilly, 1998.
15. E. Poll, P. Hartel, and de E. Jong. A Java Reference Model of Transacted Memory for Smart Cards. In Fifth Smart Card Research and Advanced Application Conf. (CARDIS'2002), 2002. To Appear. See http://www.cs.kun.nl/VerifiCard/files/publications.html
16. E. Poll, J. van den Berg, and B. Jacobs. Formal specification of the Java Card API in JML: the APDU class. Computer Networks, 36(4):407-421, 2001.
17. The Coq Development Team LogiCal Project. The Coq Proof Assistant Reference Manual. http://pauillac.inria.fr/coq/doc/main.html
18. J. Rushby. Noninterference, transitivity, and channel-control security policies, December 1992.
19. J. van den Berg and B. Jacobs. The LOOP compiler for Java and JML. In T. Margaria and W. Yi, editors, Tools and Algorithms for the Constructions and Analysis of Software (TACAS'2001), number 2031 in LNCS, pages 299-312. Springer, 2001.
20. J. van den Berg, B. Jacobs, and E. Poll. Formal Specification and Verification of JavaCard's Application Identifier Class. In Proceedings of the Java Card 2000 Workshop, 2000. http://www.irisa.ir/lande/jensen/jcw-program.html
21. B. Venners. Inside the Java Virtual Machine. McGraw-Hill, 1997.