The aim of this thesis is to develop a tool for automatic detection of supported packages located on a smartcard with the JavaCard platform. The list of installed packages cannot be directly obtained from smartcard due to (intentionally) missing support for such an operation.
The theoretical part of the thesis will precisely describe the JavaCard package management system including of process of uploading new applets and its linking to on-card applet verification procedure.
The practical part will develop an automatic testing toolchain, that will cover the following functionality:
1. Generate code/applet cap using every single package from the standard JavaCard API
2. Automatically try to upload and install cap file to target card and verify if the installation was successful (package supported) or not (not supported)
3. Automatically generate results in the form of a web page displaying packages supported by multiple analyzed cards
4. Examine results for at least three real smartcards
5. An experiment to detect undocumented packages with unknown AID will be attempted with a discussion of obtained results and difficulties.

References:
GlobalPlatform specification: https://globalplatform.org
Oracle, JavaCard platform: https://www.oracle.com/technetwork/java/embedded/javacard/overview/index.html
M.Paljak, GlobalPlatformPro: https://github.com/martinpaljak/GlobalPlatformPro