Java卡虚拟机的安全攻击技术及防御技术研究

摘要

Java card is a smart card running a small Java based operating system that can dynamically be upgraded.This article introduce developers to the security issues of the Java card virtual machine that should be taken into account when implementing a Java card platform.This article studies vulnerabilities of the Java card virtual machine and tries to identify its shortcomings.Further studies illustrate the impact of various threats.Finally some defensive technology are presented to counteract the threats.The test results can tell the defensive technology is valid for the security of the Java card platform.%Java卡是一个基于Java的智能卡操作系统,Java卡能够动态更新.着重介绍了在Java卡系统实现过程中需要关注的各种基于Java卡虚拟机的安全点,研究了Java卡虚拟机运行过程中的脆弱性,总结了其在安全方面面临的各种威胁,并进一步研究了这些安全威胁可能产生的影响.最后针对可能出现的不同的安全攻击,提出并完成了相应的安全防御措施.实验证明,这些防御措施能够有效地保障Java卡系统的安全性.