An Operational Semantics of the Java Card Firewall

This paper presents an operational semantics for a subset of Java Card bytecode, focussing on aspects of the Java Card firewall, method invocation, field access, variable access, shareable objects and contexts. The goal is to provide a precise description of the Java Card firewall using standard tools from operational semantics. Such a description is necessary for formally arguing the correctness of tools for validating the security of Java Card applications.

[1]  Guy L. Steele,et al.  The Java Language Specification , 1996 .

[2]  Peter Bertelsen,et al.  Semantics of Java Byte Code , 1997 .

[3]  Cornelia Pusch.  Formalizing the Java Virtual Machine in Isabelle/HOL , 1998 .

[4]  Tobias Nipkow,et al.  Machine-Checking the Java Specification: Proving Type-Safety , 1999, Formal Syntax and Semantics of Java.

[5]  Martin Wirsing,et al.  An Event-Based Structural Operational Semantics of Multi-Threaded Java , 1999, Formal Syntax and Semantics of Java.

[6]  Stephen N. Freund,et al.  A formal framework for the Java bytecode language and verifier , 1999, OOPSLA '99.

[7]  Laurie Hendren,et al.  Soot---a java optimization framework , 1999 .

[8]  Ewen Denney,et al.  Correctness of Java Card Method Lookup via Logical Relations , 2000, ESOP.

[9]  Guy L. Steele,et al.  Java Language Specification, Second Edition: The Java Series , 2000 .

[10]  Jean-Louis Lanet,et al.  The PACAP Prototype: A Tool for Detecting Java Card Illegal Flow , 2000, Java Card Workshop.

[11]  Peter Bertelsen,et al.  Dynamic semantics of Java bytecode , 2000, Future Gener. Comput. Syst..

[12]  Bart Jacobs,et al.  Specification of the JavaCard API in JML , 2000, CARDIS.

[13]  Z. Chen.  Java Card Technology for Smart Cards: Architecture and Programmer''s Guide. The Java Series. Addis , 2000 .

[14]  David von Oheimb.  Hoare logic for Java in Isabelle/HOL , 2001, Concurr. Comput. Pract. Exp..

[15]  Bart Jacobs,et al.  Formal specification of the JavaCard API in JML: the APDU class , 2001, Comput. Networks.