Java智能卡的安全漏洞分析与防御  

Analysis and Defense of Security Breaches of Java Smart Card

作　　者：毛永华[1] 李代平[1] 余成锋[1] 李文强[1] 

机构地区：[1]广东工业大学计算机学院,广东广州510006

出　　处：《计算机与现代化》2012年第10期99-101,124,共4页Computer and Modernization

摘　　要：智能卡由于自身较高的安全特性和易携带等优点,使其成为人们生活中被广泛使用的工具。Java智能卡凭借技术优势更是受到社会青睐。智能卡通常携带个人私密信息和重要数据,使之受到来自多方面的威胁。对Java智能卡的安全研究有助于提高卡内虚拟机的安全性。本文详细阐述JCVM(Java Card Virtual Machine)存在的安全漏洞,给出实际的病毒代码,深入分析并找出漏洞存在的根本原因,在研究学习前人的基础之上并结合实际给出对应的防御措施。Smart cards because of its own higher security characteristic and advantage of easy to carry,etc,make it become the widely use tool in our live.Java smart card relies on its technology advantage but also favored by society.The personal confidential information and important data which smart cards usually carrying make it suffer some threads come from various aspects.For the study of the security of Java smart card help to improve the safety of the virtual machine inside card.The paper expounds the existing JCVM security vulnerabilities,presents the practical virus codes,with the thorough analysis and finds out the root cause of the vulnerabilities existing,in the study on the basis of predecessors and actually gives the corresponding defense measures.

关 键 词：逻辑攻击 类型迷惑 对象重构 JCVM 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]