Memory-Constrained Security Enforcement: Evaluation Of Java Me-Cldc Security And Characterization Of Memory-Constrained Security

Talhi, Chamseddine; Talhi, Chamseddine

ISBN 10: 3838320816 / ISBN 13: 9783838320816

Editore: Lap Lambert Academic Publishing, 2009

Riguardo questo articolo

220 pages. 8.66x5.91x0.50 inches. In Stock.

Codice articolo __3838320816

Dati bibliografici

• Titolo: Memory-Constrained Security Enforcement: Evaluation Of Java Me-Cldc Security And Characterization Of Memory-Constrained Security
• Editore: Lap Lambert Academic Publishing
• Data di pubblicazione: 2009
• Lingua: Inglese
• ISBN 10: 3838320816
• ISBN 13: 9783838320816
• Rilegatura: Paperback
• Condizione: Brand New
• Peso: 0,38 chilogrammi

Descrizione articolo

Riassunto

This book aims at investigating memory-constrained security by analyzing the security of Java ME-CLDC and characterizing enforceable security policies. More precisely, the main objectives are (1) evaluating and improving the security of Java ME-CLDC and (2) characterizing memory-constrained execution monitoring; an important class of security mechanisms. We conducted a vulnerability analysis of Java ME-CLDC that revealed the presence of vulnerabilities in the platform and showed how to improve the underlying security model. In addition, we conducted a risk analysis that provided a seriousness estimation of the risks associated with the uncovered vulnerabilities. To characterize memory-constrained execution monitoring, (1) we defined a new automata class, called Bounded History Automata (BHA), to specify memory-constrained EM enforcement, (2) we identified a new memory-directed taxonomy of EM-enforceable properties, and (3) we investigated the enforcement of local properties using memory-constrained EM. Our characterization covers conventional monitors as well as more powerful monitors.

Informazioni sull?autore

Dr. Chamseddine Talhi is a postdoctoral fellow at Concordia University, Montreal, Canada. He is expert in computer security, cyber forensics, mobile and embedded platforms, Java technology security and acceleration, design and analysis, and specification and verification of safety-critical systems. He can be reached at talhi@ciise.concordia.ca.