METHOD AND SYSTEM FOR SECURING A COMPUTER EXECUTING ENVIRONMENT AGAINST TYPE CONFUSION ATTACKS

摘要

The invention relates to securing an execution environment, in particular Java Card, against type confusion attacks. An origin reference is assigned to an object of an object-oriented programming language when it is instantiated in the runtime environment. The instantiated object is accessed using said assigned home reference. According to the invention, any reference to the instantiated object is stored in a memory area of the computer execution environment as a transformed original reference so that basic instructions executed in the runtime environment manipulate the object. object instantiated from the transformed reference. The transformation consists in applying, to the reference of origin, the function a.x + b mod p, where x is the reference of origin, a and b are two random parameters and p is the largest prime number such as p 2n, where n is the binary length of the references.