JCSI: A tool for checking secure information flow in Java Card applications

Abstract

This paper describes a tool for checking secure information flow in Java Card applications. The tool performs a static analysis of Java Card CAP files and includes a CAP viewer. The analysis is based on the theory of abstract interpretation and on a multi-level security policy assignment. Actual values of variables are abstracted into security levels, and… (More)
DOI: 10.1016/j.jss.2012.05.061

13 Figures and Tables

Topics

  • Presentations referencing similar topics