MOBIUS: Mobility, Ubiquity, Security

Barthe, Gilles; Beringer, Lennart; Crégut, Pierre; Grégoire, Benjamin; Hofmann, Martin; Müller, Péter; Poll, Erik; Puebla, Germán; Stark, Ian; Vetillard, Eric

doi:10.1007/978-3-540-75336-0_2

Cited by 11 publications

(3 citation statements)

References 40 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Similarly, our soundness proof can be formalized in a theorem prover and declarative typing derivations can then be used to generate formal proofs of correctness; see e.g. the Mobius project [5].…”

Section: Discussionmentioning

confidence: 99%

Enforcing Programming Guidelines with Region Types and Effects

Erbatur

Hofmann

Zălinescu

2017

Programming Languages and Systems

Self Cite

View full text Add to dashboard Cite

Abstract. We present in this paper a new type and effect system for Java which can be used to ensure adherence to guidelines for secure web programming. The system is based on the region and effect system by Beringer, Grabowski, and Hofmann. It improves upon it by being parametrized over an arbitrary guideline supplied in the form of a finite monoid or automaton and a type annotation or mockup code for external methods. Furthermore, we add a powerful type inference based on precise interprocedural analysis and provide an implementation in the Soot framework which has been tested on a number of benchmarks including large parts of the Stanford SecuriBench.

show abstract

Section: Discussionmentioning

confidence: 99%

Enforcing Programming Guidelines with Region Types and Effects

Erbatur

Hofmann

Zălinescu

2017

Programming Languages and Systems

Self Cite

View full text Add to dashboard Cite

show abstract

“…For example, the Bali project [17], the LOOP project [12], and in the Mobius project [3], all aimed at the development of fully verified verification systems. Calculus rules of the KeY verification system [5] for Java were verified using the Maude tool [1].…”

Section: Related Workmentioning

confidence: 99%

A Metric for Testing Program Verification Systems

2013

View full text Add to dashboard Cite

Abstract. The correctness of program verification systems is of great importance, and it needs to be checked and demonstrated to users and certification agencies. One of the contributing factors to the correctness of the whole verification system is the correctness of the background axiomatization, respectively the correctness of calculus rules. In this paper, we examine how testing verification systems is able to provide evidence for the correctness of the rule base or the axiomatization. For this, we present a new coverage criterion called axiomatization coverage, which allows to judge the quality of existing test suites for verification systems. We evaluate this coverage criterion at two verification tools using the test suites provided by each tool.

show abstract

“…tracing the use of critical APIs. Over the years, it has been extended mostly in collaborative research projects with information flow analysis [2] and security contract verification [4].…”

Section: Static Analysismentioning

confidence: 99%

Combined Attacks and Countermeasures

Vetillard¹,

Ferrari²

2010

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Logical attacks on smart cards have been used for many years, but their attack potential is hindered by the processes used by issuers to verify the validity of code, in particular bytecode verification. More recently, the idea has emerged to combine logical attacks with a physical attack, in order to evade bytecode verification. We present practical work done recently on this topic, as well as some countermeasures that can be put in place against such attacks, and how they can be evaluated by security laboratories. ForwardThis paper presents theoretical work 1 related to the development of attacks that combine logical attacks on the card's software with physical attacks on the card's hardware. This particular piece of work has been performed on Java Card-based smart cards. However, we will see that the new attacks can be applied to other platforms, and Java Card has mostly been chosen because it is the most common interoperable smart card application platform.

show abstract

MOBIUS: Mobility, Ubiquity, Security

Cited by 11 publications

References 40 publications

Enforcing Programming Guidelines with Region Types and Effects

Enforcing Programming Guidelines with Region Types and Effects

A Metric for Testing Program Verification Systems

Combined Attacks and Countermeasures

Contact Info

Product

Resources

About