<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01059143</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T05:58:50+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Can We Support Applications' Evolution in                                    Multi-Application Smart Cards by Security-by-Contract?</title>
            <author role="aut">
              <persName>
                <forename type="first">Nicola</forename>
                <surname>Dragoni</surname>
              </persName>
              <email type="md5">e35445fd572d49929124205c0268a5d4</email>
              <email type="domain">imm.dtu.dk</email>
              <idno type="idhal" notation="numeric">867404</idno>
              <idno type="halauthorid" notation="string">443623-867404</idno>
              <affiliation ref="#struct-100967"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Olga</forename>
                <surname>Gadyatskaya</surname>
              </persName>
              <idno type="halauthorid">856331-0</idno>
              <affiliation ref="#struct-100967"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Fabio</forename>
                <surname>Massacci</surname>
              </persName>
              <email type="md5">428093b6e1edc680582002f1398dff6c</email>
              <email type="domain">dsi.unitn.it</email>
              <idno type="idhal" notation="numeric">867407</idno>
              <idno type="halauthorid" notation="string">443625-867407</idno>
              <affiliation ref="#struct-108596"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2014-08-29 14:03:08</date>
              <date type="whenModified">2024-12-04 14:44:02</date>
              <date type="whenReleased">2014-09-02 11:21:07</date>
              <date type="whenProduced">2010-04-12</date>
              <date type="whenEndEmbargoed">2014-08-29</date>
              <ref type="file" target="https://inria.hal.science/hal-01059143v1/document">
                <date notBefore="2014-08-29"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01059143v1/file/60330223.pdf" id="file-1059143-862851">
                <date notBefore="2014-08-29"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-12368-9_16.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01059143</idno>
            <idno type="halUri">https://inria.hal.science/hal-01059143</idno>
            <idno type="halBibtex">dragoni:hal-01059143</idno>
            <idno type="halRefHtml">&lt;i&gt;4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP)&lt;/i&gt;, Apr 2010, Passau, Germany. pp.221-228, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-12368-9_16"&gt;&amp;#x27E8;10.1007/978-3-642-12368-9_16&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP), Apr 2010, Passau, Germany. pp.221-228, &amp;#x27E8;10.1007/978-3-642-12368-9_16&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1059143-862851"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-LNCS-6033" corresp="IFIP-LNCS">Information Security Theory and Practices. Security and Privacy of Pervasive Systems and Smart Devices</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WISTP">IFIP-WISTP</idno>
            <idno type="stamp" n="IFIP-WG11-2">IFIP-WG11-2</idno>
            <idno type="stamp" n="IFIP-2010">IFIP-2010</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Can We Support Applications' Evolution in                                    Multi-Application Smart Cards by Security-by-Contract?</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Nicola</forename>
                    <surname>Dragoni</surname>
                  </persName>
                  <email type="md5">e35445fd572d49929124205c0268a5d4</email>
                  <email type="domain">imm.dtu.dk</email>
                  <idno type="idhal" notation="numeric">867404</idno>
                  <idno type="halauthorid" notation="string">443623-867404</idno>
                  <affiliation ref="#struct-100967"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Olga</forename>
                    <surname>Gadyatskaya</surname>
                  </persName>
                  <idno type="halauthorid">856331-0</idno>
                  <affiliation ref="#struct-100967"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Fabio</forename>
                    <surname>Massacci</surname>
                  </persName>
                  <email type="md5">428093b6e1edc680582002f1398dff6c</email>
                  <email type="domain">dsi.unitn.it</email>
                  <idno type="idhal" notation="numeric">867407</idno>
                  <idno type="halauthorid" notation="string">443625-867407</idno>
                  <affiliation ref="#struct-108596"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer                                        Science</title>
                <meeting>
                  <title>4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP)</title>
                  <date type="start">2010-04-12</date>
                  <date type="end">2009-04-14</date>
                  <settlement>Passau</settlement>
                  <country key="DE">Germany</country>
                </meeting>
                <editor>Pierangela Samarati; Michael Tunstall; Joachim Posegga;                                    Konstantinos Markantonakis; Damien Sauveron</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security Theory and Practices. Security                                    and Privacy of Pervasive Systems and Smart Devices</biblScope>
                  <biblScope unit="volume">LNCS-6033</biblScope>
                  <biblScope unit="pp">221-228</biblScope>
                  <date type="datePub">2010</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-12368-9_16</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">security policy enforcement</term>
                <term xml:lang="en">illegal information exchange</term>
                <term xml:lang="en">multi-application smart card</term>
                <term xml:lang="en">Security-by-Contract</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-dl">Computer Science [cs]/Digital Libraries [cs.DL]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Java card technology have progressed at the point of                            running web servers and web clients on a smart card. Yet concrete                            deployment of multi-applications smart cards have remained extremely                            rare because the business model of the asynchronous download and update                            of appli- cations by di erent parties requires the control of                            interactions among possible applications after the card has been elded.                            Yet the current se- curity models and techniques do not support this                            type of evolution. We propose in this paper to apply the notion of                            security-by-contract (S C), that is a speci cation of the security                            behavior of an application that must be compliant with the security                            policy of the hosting platform. This compliance can be checked at load                            time and in this way avoid the need for costly run-time monitoring. We                            show how the S C approach can be used to prevent illegal information                            exchange among several applications on a single smart card platform, and                            to deal with dynamic changes in both contracts and platform                            policy.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-100967" status="VALID">
          <orgName>Department of Informatics and Mathematical Modelling [Lyngby]</orgName>
          <orgName type="acronym">IMM</orgName>
          <desc>
            <address>
              <addrLine>DK-2800 Kgs. Lyngby</addrLine>
              <country key="DK"/>
            </address>
            <ref type="url">http://www.imm.dtu.dk/English/Research/Embedded_Systems_Engineering.aspx</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302599" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-108596" status="VALID">
          <orgName>Dipartimento di Ingegneria e Scienza dell'Informazione</orgName>
          <desc>
            <address>
              <addrLine>Via Sommarive, 14 I-38123 POVO</addrLine>
              <country key="IT"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-304024" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-302599" status="VALID">
          <idno type="ROR">https://ror.org/04qtj9h94</idno>
          <orgName>Danmarks Tekniske Universitet = Technical University of Denmark</orgName>
          <orgName type="acronym">DTU</orgName>
          <desc>
            <address>
              <addrLine>Anker Engelunds Vej 1 , Bygning 101A , 2800 Kgs. Lyngby</addrLine>
              <country key="DK"/>
            </address>
            <ref type="url">http://www.dtu.dk/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-304024" status="VALID">
          <idno type="ROR">https://ror.org/05trd4x28</idno>
          <orgName>Università degli Studi di Trento =  University of Trento</orgName>
          <orgName type="acronym">UNITN</orgName>
          <desc>
            <address>
              <addrLine>via Calepina, 14 - I-38122 Trento</addrLine>
              <country key="IT"/>
            </address>
            <ref type="url">http://www.unitn.it/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>