Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
My Menu
Saved Items

Applet Verification Strategies for RAM-Constrained Devices

Nils MaltessonContact Information, David NaccacheContact Information, Elena TrichinaContact Information and Christophe TymenContact Information

(6)  Lund Institute of Technology, Magistratsvägen 27A, 226 43 Lund, Sweden
(7)  Gemplus Card International, 34 rue Guynemer, 92447 Issy-les-Moulineaux, France
(8)  Department of Computer Science and Applied Mathematics, onUniversity of Kuopio, 1627, FIN-70211 Kuopio, Finland
Abstract
While bringing considerable flexibility and extending the horizons of mobile computing, mobile code raises major security issues. Hence, mobile code, such as Java applets, needs to be analyzed before execution. The byte-code verifier checks low-level security properties that ensure that the downloaded code cannot bypass the virtual machine’s security mechanisms. One of the statically ensured properties is type safety. The type-inference phase is the overwhelming resource-consuming part of the verification process. This paper addresses the RAM bottleneck met while verifying mobile code in memory-constrained environments such as smart-cards. We propose to modify classic type-inference in a way that significantly reduces memory consumption. Our algorithm is inspired by bit-slice data processing and consists in running the verifier on each variable in turn. In other words, instead of running the fix-point calculation algorithm once on M variables, we re-launch the algorithm M/l times, verifying each time only l variables. Parameter l can then be tuned to suit the RAM resources available on board whereas M/l upper-bounds the computational effort (expressed in re-runs of the usual fix-point calculation algorithm). The resulting RAM economy, as experimented on a number of popular applets, is around 40%.

Contact Information Nils Maltesson
Email: d99nm@efd.lth.se

Contact Information David Naccache
Email: david.naccache@gemplus.com

Contact Information Elena Trichina
Email: elena.trichina@cs.uku.fi

Contact Information Christophe Tymen
Email: christophe.tymen@gemplus.com
Fulltext Preview (Small, Large)
Image of the first page of the fulltext

References secured to subscribers.



Export this chapter
Export this chapter as RIS | Text
 
Remote Address: 38.107.191.105 • Server: mpweb20
HTTP User Agent: CCBot/1.0 (+http://www.commoncrawl.org/bot.html)