METHOD AND SYSTEM FOR SECURING A COMPUTER EXECUTING ENVIRONMENT AGAINST TYPE CONFUSION ATTACKS

摘要

The invention relates to securing an execution environment, in particular Java Card, against type confusion attacks. Memory zones store data of various types (integer or reference) manipulated by Java bytecodes. Each piece of data to be stored in a memory zone is associated with type information representative of the type of this datum, for example by adding a bit to the binary representation of the stored datum, bit whose value and position in the binary representation. depend respectively on the type of the data and the storage memory area. Alternatively, a structure similar to that provided for storing data may be provided for abstractly storing the type of stored data using a bit. Then, information associated with data manipulated by an instruction is used to detect a type conflict between the data and a type of the instruction.