Paper Info
Title
JCSI: A tool for checking secure information flow in Java Card applications
Abstract
This paper describes a tool for checking secure information flow in Java Card applications. The tool performs a static analysis of Java Card CAP files and includes a CAP viewer. The analysis is based on the theory of abstract interpretation and on a multi-level security policy assignment. Actual values of variables are abstracted into security levels, and bytecode instructions are executed over an abstract domain. The tool can be used for discovering security issues due to explicit or implicit information flows and for checking security properties of Java Card applications downloaded from untrusted sources.
Year
DOI
Venue
2012
10.1016/j.jss.2012.05.061
Journal of Systems and Software
Keywords
Field
DocType
secure information flow,abstract domain,security level,abstract interpretation,java card cap file,java card application,security property,multi-level security policy assignment,security issue,cap viewer,implicit information flow,java card
Programming language,Computer science,Java annotation,Real time Java,Real-time computing,Java bytecode,Generics in Java,Java Card,Java Modeling Language,Java applet,Java
Journal
Volume
Issue
ISSN
85
11
0164-1212
Citations 
PageRank 
References 
4
0.40
17
Authors
4
Name
Order
Citations
PageRank
Marco Avvenuti126724.14
Cinzia Bernardeschi222631.87
Nicoletta De Francesco333558.76
Paolo Masci418829.52