Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
|
 |
Applet Verification Strategies for RAM-Constrained Devices
| |
|
Applet Verification Strategies for RAM-Constrained Devices
Nils Maltesson6 , David Naccache7 , Elena Trichina8 and Christophe Tymen7 
| (6) |
Lund Institute of Technology, Magistratsvägen 27A, 226 43 Lund, Sweden |
| (7) |
Gemplus Card International, 34 rue Guynemer, 92447 Issy-les-Moulineaux, France |
| (8) |
Department of Computer Science and Applied Mathematics, onUniversity of Kuopio, 1627, FIN-70211 Kuopio, Finland |
Abstract
While bringing considerable flexibility and extending the horizons of mobile computing, mobile code raises major security
issues. Hence, mobile code, such as Java applets, needs to be analyzed before execution. The byte-code verifier checks low-level
security properties that ensure that the downloaded code cannot bypass the virtual machine’s security mechanisms. One of the
statically ensured properties is type safety. The type-inference phase is the overwhelming resource-consuming part of the verification process. This paper addresses the
RAM bottleneck met while verifying mobile code in memory-constrained environments such as smart-cards. We propose to modify
classic type-inference in a way that significantly reduces memory consumption. Our algorithm is inspired by bit-slice data
processing and consists in running the verifier on each variable in turn. In other words, instead of running the fix-point
calculation algorithm once on M variables, we re-launch the algorithm M/l times, verifying each time only l variables. Parameter l can then be tuned to suit the RAM resources available on board whereas M/l upper-bounds the computational effort (expressed in re-runs of the usual fix-point calculation algorithm). The resulting
RAM economy, as experimented on a number of popular applets, is around 40%.
Fulltext Preview (Small, Large)
 References secured to subscribers.
|
|
|
|
|
|