Automatic Integration of Counter-Measures Against Fault Injection Attacks

This paper describes a technology aiming at enforcing semiautomatically counter-measures against fault injection attacks of smart cards. This technology addresses in a generic way the whole software embedded on the card. In particular, it addresses threats going beyond cryptography-related parts of the embedded software, like threats against the firewall of the Java Card embedded virtual machine, the PIN code verification, etc. Counter-measures are automatically integrated to the source code at the pre-compilation step, according to a guideline defined by the programmer under the form of a set of directives included into the source code.