Model-driven code generation for secure smart card applications

Proceedings of the Australian Software Engineering Conference, ASWEC

Volumn , Issue , 2009, Pages 44-53

  Moebius, Nina ^a   Stenzel, Kurt ^a   Grandy, Holger ^a   Reif, Wolfgang ^a  

^a UNIVERSITY OF AUGSBURG   (Germany)

Author keywords

Code generation; Java card; Model driven software development; Security; UML

Indexed keywords

CODE GENERATION; JAVA CARD; MODEL-DRIVEN SOFTWARE DEVELOPMENT; SECURITY; UML;

AUTOMATIC PROGRAMMING; FORMAL LOGIC; NETWORK COMPONENTS; SMART CARDS; SOFTWARE DESIGN; SYSTEMS ANALYSIS;

COMPUTER SOFTWARE;

EID: 70349512780     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ASWEC.2009.15     Document Type: Conference Paper

References (32)

1. Michael Balser, Wolfgang Reif, Gerhard Schellhorn, Kurt Stenzel, and Andreas Thums. Formal system development with KIV. In T. Maibaum, editor, Fundamental Approaches to Software Engineering. Springer LNCS 1783, 2000.
2. D. Basin, J. Doser, and T. Lodderstedt. Model Driven Security: From UML Models to Access Control Infrastructures. ACM Transactions on Software Engineering and Methodology, pages 39-91, 2006.
3. E. Börger and R. F. Stärk. Abstract State Machines- A Method for High-Level System Design and Analysis. Springer-Verlag, 2003.
4. Alessandro Coglio. Code generation for highassurance Java Card applets. In Proc. 3rd NSA Conference on High Confidence Software and Systems, pages 85-93, April 2003.
5. Alessandro Coglio and Cordell Green. A constructive approach to correctness, exemplified by a generator for certified Java Card appplets. In Proc. IFIPWorking Conference on Verified Software: Tools, Techniques, and Experiments, October 2005.
6. R. Eshuis. Symbolic Model Checking of UML Activity Diagrams. ACM Transactions on Software Engineering and Methodology, 15(1):1-38, 2006.
7. H. Grandy, R. Bertossi, K. Stenzel, and W. Reif. ASN1-light: A Verified Message Encoding for Security Protocols. In Software Engineering and Formal Methods, SEFM. IEEE Press, 2007.
8. H. Grandy, M. Bischof, G. Schellhorn, W. Reif, and K. Stenzel. Verification of Mondex Electronic Purses with KIV: From a Security Protocol to Verified Code. In FM2008: 15th Int. Symposium on FormalMethods. Springer LNCS 5014, 2008.
9. H. Grandy, K. Stenzel, and W. Reif. Object-Oriented Verification Kernels for Secure Java Applications. In B. Aichering and B. Beckert, editors, SEFM 2005 - 3rd IEEE International Conference on Software Engineering and Formal Methods. IEEE Press, 2005.
10. H. Grandy, K. Stenzel, and W. Reif. A Refinement Method for Java Programs. In Formal Methods for Open Object-Based Distributed Systems (FMOODS), volume 4468 of LNCS. Springer, 2007.
11. Y. Gurevich. Evolving algebras 1993: Lipari guide. In E. Börger, editor, Specification and Validation Methods, pages 9 - 36. Oxford Univ. Press, 1995.
12. D. Haneberg, H. Grandy, W. Reif, and G. Schellhorn. Verifying Smart Card Applications: An ASM Approach. In International Conference on integrated Formal Methods (iFM) 2007, volume 4591 of LNCS. Springer, 2007.
13. D. Haneberg, G. Schellhorn, H. Grandy, and W. Reif. Verification of Mondex Electronic Purses with KIV: From Transactions to a Security Protocol. Formal Aspects of Computing, 20(1), January 2008.
14. Jan Hendrik Hausmann. Dynamic META modeling. PhD thesis, Paderborn, Univ., Fakultät für Elektrotechnik, Informatik und Mathematik, 2005.
15. International Standards Organization. ISO 7816-4 - Identification Cards - Integrated cicuit(s) cards with contacts - Part 4: Organization, security and commands for interchange, 1995.
16. C. Jones and J. Woodcock, editors. Formal Aspects of Computing, volume 20 (1). Springer, January 2008.
17. S. Jurack, L. Lambers, K. Mehner, and G. Taentzer. Sufficient criteria for consistent behavior modeling with refined activity diagrams. In 11th International Conference on Model Driven Engineering Languages and Systems MoDELS 2008. Springer LNCS 5301, 2008.
18. Jan Jürjens. Secure Systems Development with UML. Springer, 2005.
19. Jan Jürjens. Security Analysis of Crypto-based Java Programs using Automated Theorem Provers. In 21st IEEE/ACM International Conference on Automated Software Engineering (ASE 2006), pages 167-176. IEEE Computer Society, 2006.
20. KIV homepage. http://www.informatik.uniaugsburg.de/swt/kiv.
21. A. Kraus, A. Knapp, and N. Koch. Model-driven generation of web applications in UWE. In Proc. 3rd Int. Wsh. Model-Driven Web Engineering (MDWE'07). volume 261 of CEUR-WS, 2007, 2007.
22. Torsten Lodderstedt, David A. Basin, and Jürgen Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. In UML 2002 - The Unified Modeling Language, 5th International Conference, pages 426-441, 2002.
23. P. Mayer, A. Schroeder, and N. Koch. MDD4SOA: Model-Driven Service Orchestration. In Proceedings of 12th IEEE International EDOC Conference (EDOC 2008), September 15-19, 2008, Munich, Germany.
24. N. Moebius, K. Stenzel, H. Grandy, and W. Reif. SecureMDD: A Model-Driven Development Method for Secure Smart Card Applications. In Third International Workshop on Secure Software Engineering, SecSE, 2009. Accepted.
25. Lawrence C. Paulson. The Inductive Approach to Verifying Cryptographic Protocols. Journal of Computer Security, 6:85-128, 1998.
26. P. Y. A. Ryan, S. A. Schneider, M. H. Goldsmith, G. Lowe, and B. Roscoe. The Modelling and Analysis of Security Protocols: the CSP Approach. Addison- Wesley, 2001.
27. Marcos López Sanz, César J. Acuña, Carlos E. Cuesta, and Esperanza Marcos. UML Profile for the Platform Independent Modelling of Service-Oriented Architectures. In Flávio Oquendo, editor, First European Conference on Software Architecture (ECSA 2007), pages 304-307. Springer LNCS 4758, 2007.
28. G. Schellhorn, H. Grandy, D. Haneberg, N. Moebius, and W. Reif. A Systematic Verification Approach for Mondex Electronic Purses using ASMs. In Dagstuhl Seminar on Rigorous Methods for Software Construction and Analysis, LNCS. Springer, 2008.
29. Sun Microsystems Inc. Application Programming Interface Java Card Platform, Version 2.2.1. URL: http://java.sun.com/products/javacard/.
30. The Object Management Group (OMG). OMG MDA Guide, 2003. http://www.omg.org/docs/omg/03-06-01.pdf.
31. G. Trombetti, A. Gokhale, D. Schmidt, J. Greenwald, J. Hatcliff, G. Jung, and G. Singh. An Integrated Model-Driven Development Environment for Composing and validating Distributed Real-Time and Embedded Systems. In Model Driven Software Development - Volume II of Research and Practice in Software Engineering, pages 363-361. Springer, 2005.
32. J.Woodcock. First steps in the verified software grand challenge. IEEE Computer, 39(10):57-64, 2006.