Can We Support Applications' Evolution in Multi-Application Smart Cards by Security-by-Contract? - Information Security Theory and Practices. Security and Privacy of Pervasive Systems and Smart Devices Access content directly
Conference Papers Year : 2010

Can We Support Applications' Evolution in Multi-Application Smart Cards by Security-by-Contract?

Abstract

Java card technology have progressed at the point of running web servers and web clients on a smart card. Yet concrete deployment of multi-applications smart cards have remained extremely rare because the business model of the asynchronous download and update of appli- cations by di erent parties requires the control of interactions among possible applications after the card has been elded. Yet the current se- curity models and techniques do not support this type of evolution. We propose in this paper to apply the notion of security-by-contract (S C), that is a speci cation of the security behavior of an application that must be compliant with the security policy of the hosting platform. This compliance can be checked at load time and in this way avoid the need for costly run-time monitoring. We show how the S C approach can be used to prevent illegal information exchange among several applications on a single smart card platform, and to deal with dynamic changes in both contracts and platform policy.
Fichier principal
Vignette du fichier
60330223.pdf (146.47 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01059143 , version 1 (29-08-2014)

Licence

Attribution

Identifiers

Cite

Nicola Dragoni, Olga Gadyatskaya, Fabio Massacci. Can We Support Applications' Evolution in Multi-Application Smart Cards by Security-by-Contract?. 4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP), Apr 2010, Passau, Germany. pp.221-228, ⟨10.1007/978-3-642-12368-9_16⟩. ⟨hal-01059143⟩
295 View
75 Download

Altmetric

Share

Gmail Facebook X LinkedIn More