<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="6.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Marco Avvenuti</style></author><author><style face="normal" font="default" size="100%">Cinzia Bernardeschi</style></author><author><style face="normal" font="default" size="100%">Nicoletta De Francesco</style></author><author><style face="normal" font="default" size="100%">Paolo Masci</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">JCSI: A tool for checking secure information flow in Java Card applications</style></title><secondary-title><style face="normal" font="default" size="100%">Journal of Systems and Software</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2012</style></year></dates><number><style face="normal" font="default" size="100%">11</style></number><volume><style face="normal" font="default" size="100%">85</style></volume><pages><style face="normal" font="default" size="100%">2479 - 2493</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">&lt;p&gt;This paper describes a tool for checking secure information flow in Java Card applications. The tool performs a static analysis of Java Card CAP files and includes a CAP viewer. The analysis is based on the theory of abstract interpretation and on a multi-level security policy assignment. Actual values of variables are abstracted into security levels, and bytecode instructions are executed over an abstract domain. The tool can be used for discovering security issues due to explicit or implicit information flows and for checking security properties of Java Card applications downloaded from untrusted sources.&lt;/p&gt;
</style></abstract></record></records></xml>