Embedded Java Security [electronic resource] : Security for Mobile Devices / by Mourad Debbabi, Mohamed Saleh, Chamseddine Talhi, Sami Zhioua.

Java ME Platform -- Java ME Virtual Machines -- Connected Limited Device Configuration -- Mobile Information Device Profile -- Java ME-CLDC Security -- Java ME CLDC Security Analysis -- Risk Analysis -- Common Criteria Investigation -- Standards -- Conclusion.

Whereas Java brings functionality and versatility to the world of mobile devices, at the same time it also introduces new security threats. The rapid growth of the number of mobile devices that support Java makes this a pressing issue. Embedded Java Security carefully examines the security aspects of Java and offers a security evaluation for the Java platform. After explaining background material on the architecture of embedded platforms and relating to its role in security, the book deconstructs the security model into its main components: It explains each component and relates it to the aim of securing the applications and the device. Toward this end, several implementations of the Java platform are examined and tested to relate the model to its actual implementation on devices. The security holes found are further used to clarify security issues and point out common errors. Finally, the book provides an evaluation of embedded Java security that includes security models and security tests performed on real-life implementations. Topics and features: • Presents the security model underlying Java ME • Provides a vulnerability analysis of Java CLDL and a risk analysis study of Java ME vulnerabilities • Supplies an example of a protection profile for Java ME - illustrated using the common criteria framework • Discusses the most prominent standards that are relevant for Java ME security • Reports on areas of common vulnerabilities, and considers specifications and programming mistakes • Hints and suggestions are provided as ways for hardening security This invaluable volume provides researchers and practitioners with a broader and deeper understanding of the issues involved in embedded Java security, and, as a larger view, mobile-devices security. It can also serve as an ancillary course text or helpful guide for self study in the field.