Earticle

초록

영어

Side-channel Analysis (SCA) has become a reliable method for cryptanalysts to break cryptographic algorithms. Recently, SCA is used to reverse engineer the applet bytecodes on Java based smart cards. In addition of Power Analysis, other techniques of SCA exist, such as Electromagnetic Analysis (EMA). EMA of smart cards is a powerful technique that allows extracting information about the executed bytecode as well as about the processed data. In our work, we study the possibility to apply reverse engineering upon a Java Card applet in which the virtual machine is obfuscated by using SCA techniques. Even if this process of bytecode obfuscation is an effective way to prevent execution of an arbitrary and malicious bytecode, we believe that it can be systematically bypassed regardless the level of the platform encryption under the reverse engineering trails. In this paper, we present a methodology that could be used to find out the encryption key of the obfuscation process using the reverse engineering process through SCA. To perform reverse engineering, a white box approach providing access to the Java Card is needed in a learning stage, and then the technique used can be used on a black box approach where the code of applications is not accessible at the matching stage.

목차

Abstract
 1. Introduction
 2. Issue Raised by Code Injection
 3. Logical attack « EMAN2 »
 4. The Bfuscation Process
 5. Reverse Engineering Methodology
  5.1. Related Work in Term of Reverse Engineering
  5.2. Our Acquisition Platform
 6. Reverse Engineering Process
  6.1. Learning Stage
  6.2. Matching Stage
  6.3. New Idea for the Reverse Engineering Process
  6.4. Find the Encryption Key
 7. Conclusion and Perspectives
 Appendix
 References

키워드

저자

• Mohammed Amine Kasmi [ Lab MATSI, ESTO, Mohammed First University Oujda, 60000, Morocco ] Corresponding author
• Mostafa Azizi [ Lab MATSI, ESTO, Mohammed First University Oujda, 60000, Morocco University of Limoges, Limoges, France ]
• Jean-Louis Lanet [ Lab MATSI, ESTO, Mohammed First University Oujda, 60000, Morocco University of Limoges, Limoges, France ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605