On-Device Control Flow Verification for Java Programs - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

On-Device Control Flow Verification for Java Programs


While mobile devices have become ubiquitous and generally multi-application capable, their operating systems provide few high level mechanisms to protect services offered by application vendors against potentially hostile applications coexisting on the device. In this paper, we tackle the issue of controlling application interactions including col- lusion in Java-based systems running on open, constrained devices such as smart cards or mobile phones. We present a model specially designed to be embedded in constrained devices to verify on-device at loading- time that interactions between applications abide by the security policies of each involved application without resulting in run-time computation overheads; this model deals with application (un)installations and policy changes in an incremental fashion. We sketch the application of our ap- proach and its security enhancements on a multi-application use case for GlobalPlatform/Java Card smart cards.
No file

Dates and versions

inria-00562611 , version 1 (03-02-2011)


  • HAL Id : inria-00562611 , version 1


Arnaud Fontaine, Samuel Hym, Isabelle Simplot-Ryl. On-Device Control Flow Verification for Java Programs. International Symposium on Engineering Secure Software and Systems (ESSoS 2011), Feb 2011, Madrid, Spain. pp.43--57. ⟨inria-00562611⟩
47 View
0 Download


Gmail Facebook X LinkedIn More