<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00706186</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-23T09:42:02+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="et">Embedded Eavesdropping on Java Card</title>
            <author role="aut">
              <persName>
                <forename type="first">Guillaume</forename>
                <surname>Barbu</surname>
              </persName>
              <email type="md5">a5a710637642db617e12844699367094</email>
              <email type="domain">oberthur.com</email>
              <idno type="idhal" notation="numeric">924593</idno>
              <idno type="halauthorid" notation="string">632031-924593</idno>
              <idno type="IDREF">https://www.idref.fr/16998026X</idno>
              <idno type="VIAF">https://viaf.org/viaf/304556746</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-9740-8966</idno>
              <affiliation ref="#struct-162010"/>
              <affiliation ref="#struct-108769"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Christophe</forename>
                <surname>Giraud</surname>
              </persName>
              <email type="md5">45f29785a6d3d49dbceef92bb4328354</email>
              <email type="domain">oberthur.com</email>
              <idno type="idhal" notation="numeric">867526</idno>
              <idno type="halauthorid" notation="string">33587-867526</idno>
              <affiliation ref="#struct-108769"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Vincent</forename>
                <surname>Guerin</surname>
              </persName>
              <idno type="halauthorid">632048-0</idno>
              <affiliation ref="#struct-108769"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Guillaume</forename>
                <surname>Barbu</surname>
              </persName>
              <email type="md5">420f599c6458a8302f13ccf258fe7dea</email>
              <email type="domain">free.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2012-06-09 10:54:16</date>
              <date type="whenWritten">2012-03-09</date>
              <date type="whenModified">2026-01-19 16:46:18</date>
              <date type="whenReleased">2012-06-11 11:27:07</date>
              <date type="whenProduced">2012-06-04</date>
              <date type="whenEndEmbargoed">2012-06-09</date>
              <ref type="file" target="https://hal.science/hal-00706186v1/document">
                <date notBefore="2012-06-09"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-00706186v1/file/main.pdf" id="file-706186-72507">
                <date notBefore="2012-06-09"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-30436-1_4.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="158449">
                <persName>
                  <forename>Guillaume</forename>
                  <surname>Barbu</surname>
                </persName>
                <email type="md5">420f599c6458a8302f13ccf258fe7dea</email>
                <email type="domain">free.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00706186</idno>
            <idno type="halUri">https://hal.science/hal-00706186</idno>
            <idno type="halBibtex">barbu:hal-00706186</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Information Security and Privacy Conference (SEC)&lt;/i&gt;, Jun 2012, Heraklion, Greece. pp.37-48, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-30436-1_4"&gt;&amp;#x27E8;10.1007/978-3-642-30436-1_4&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Greece. pp.37-48, &amp;#x27E8;10.1007/978-3-642-30436-1_4&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-706186-72507"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="ENST">Ecole Nationale Supérieure des Télécommunications</idno>
            <idno type="stamp" n="TELECOM-PARISTECH" corresp="PARISTECH">Télécom Paris</idno>
            <idno type="stamp" n="PARISTECH">ParisTech</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-376" corresp="IFIP-AICT">Information Security and Privacy Research</idno>
            <idno type="stamp" n="LTCI" corresp="TELECOM-PARISTECH">Laboratoire Traitement et Communication de l'Information</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 1: Attacks and Malicious Code</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="et">Embedded Eavesdropping on Java Card</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Guillaume</forename>
                    <surname>Barbu</surname>
                  </persName>
                  <email type="md5">a5a710637642db617e12844699367094</email>
                  <email type="domain">oberthur.com</email>
                  <idno type="idhal" notation="numeric">924593</idno>
                  <idno type="halauthorid" notation="string">632031-924593</idno>
                  <idno type="IDREF">https://www.idref.fr/16998026X</idno>
                  <idno type="VIAF">https://viaf.org/viaf/304556746</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-9740-8966</idno>
                  <affiliation ref="#struct-162010"/>
                  <affiliation ref="#struct-108769"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Christophe</forename>
                    <surname>Giraud</surname>
                  </persName>
                  <email type="md5">45f29785a6d3d49dbceef92bb4328354</email>
                  <email type="domain">oberthur.com</email>
                  <idno type="idhal" notation="numeric">867526</idno>
                  <idno type="halauthorid" notation="string">33587-867526</idno>
                  <affiliation ref="#struct-108769"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Vincent</forename>
                    <surname>Guerin</surname>
                  </persName>
                  <idno type="halauthorid">632048-0</idno>
                  <affiliation ref="#struct-108769"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>27th Information Security and Privacy Conference (SEC)</title>
                  <date type="start">2012-06-04</date>
                  <date type="end">2012-06-06</date>
                  <settlement>Heraklion</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Dimitris Gritzalis</editor>
                <editor>Steven Furnell</editor>
                <editor>Marianthi Theoharidou</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security and Privacy Research</biblScope>
                  <biblScope unit="volume">AICT-376</biblScope>
                  <biblScope unit="pp">37-48</biblScope>
                  <date type="datePub">2012-06-04</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-30436-1_4</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">APDU Buffer</term>
                <term xml:lang="en">Java Card</term>
                <term xml:lang="en">Combined Attack</term>
                <term xml:lang="en">Logical Attack</term>
                <term xml:lang="en">Fault Attack</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In this article we present the first Combined Attack on a Java Card targeting the APDU buffer itself, thus threatening both the security of the platform and of the hosted applications as well as the privacy of the cardholder. We show that such an attack, which combines malicious application and fault injection, is achievable in practice on the latest release of the Java Card specifications by presenting several case studies taking advantage for instance of the well-known GlobalPlatform and (U)SIM Application ToolKit.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-162010" status="OLD">
          <orgName>Laboratoire Traitement et Communication de l'Information</orgName>
          <orgName type="acronym">LTCI</orgName>
          <desc>
            <address>
              <addrLine>46 rue Barrault F-75634 Paris Cedex 13</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ltci.telecom-paristech.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300362" type="direct"/>
            <relation active="#struct-302102" type="direct"/>
            <relation name="UMR5141" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-108769" status="VALID">
          <orgName>Oberthur Technologies</orgName>
          <desc>
            <address>
              <addrLine>4, allée du Doyen Georges Brus 33600 PESSAC</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-301575" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300362" status="VALID">
          <idno type="ROR">https://ror.org/01naq7912</idno>
          <orgName>Télécom ParisTech</orgName>
          <date type="start">2008-01-01</date>
          <date type="end">2019-06-11</date>
          <desc>
            <address>
              <addrLine>46 rue Barrault 75634 Paris Cedex 13</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-301575" status="VALID">
          <idno type="ROR">https://ror.org/039ds3g53</idno>
          <orgName>Oberthur Technologies</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>