The goal of this thesis is to investigate the security of memory management on cryptographic smart cards with Java Card platform. The thesis will provide a survey of protection mechanisms applied on Java Card platform for runtime memory protection and known attacks from the past.

The practical part of thesis will cover the following areas:

• Analysis of Shareable and Multiselectable interfaces with practical implementation of attacks based on type confusion.
• Development of tool for automatic measurement of all objects as allocated in applet's constructor. A tool will extract objects alocated in constructor, prepare separate applet suitable for memory consumption measurement and provides information about RAM and EEPROM requirements.
• The tool for memory consumption measurement will be used to identify the code constructions which consume disproportionate amount of memory. The behavior (if detected) will be analyzed with proposal of potential attack.
• The practicality of the described attacks will be verified on at least three different types of smart cards.

References:
Java Card Firewall Tester, W. Mostowsi, http://www.sos.cs.ru.nl/applications/smartcards/firewalltester/
Spoon Java transformation tool, Pawlak et. al. http://spoon.gforge.inria.fr/