Home Page
This page is under construction, you can find an old version of the site here.
STAN is a static analyser for Java bytecode. It is dedicated to information flow checking, in the context of small autonomous, embedded systems.
- STAN does not need modifications of the source code
- STAN analyses bytecode in an incremental way
STAN is a software developed by POPS team at the LIFL (University Lille 1, INRIA Lille - Nord Europe) and is part of SFINCS project.
STAN is a research software still in development and not yet publicly released. The current version of the analyser is distributed under CeCILL license and can be obtained by sending us a mail.
Related publications
D. Ghindici, and I. Simplot-Ryl. On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards. 8th Smart Card research and Advanced Application IFIP Conference (CARDIS 2008), Ehgam, UK, September 8--11, 2008, vol. 5189 of LNCS, pp. 32--47.
G. Grimaud, Y. Hodique, and I. Simplot-Ryl. A verifiable lightweight escape analysis supporting creational design patterns for small embedded systems. Proc. of the 2007 IEEE International Symposium on Ubisafe Computing (UbiSafe-07), Canada, May 21-23, 2007, pp. 440--447, IEEE CS Press.
D. Ghindici, G. Grimaud, I. Simplot-Ryl. An information flow verifier for small embedded systems. Proc. Workshop in Information Security Theory and Practices 2007, Smart Cards, Mobile and Ubiquitous Computing Systems, May 9--11, 2007 , vol. 4462 of LNCS, pp. 189--201.
D. Ghindici, G. Grimaud, I. Simplot-Ryl, I. Traore, and Y. Liu. Integrated Security Verification and Validation: Case Study. Proc. of the Second IEEE LCN Workshop on Network Security (WoNS 2006), in conjunction with the 31st Annual IEEE Conference on Local Computer Networks (LCN 2006), Tampa, Florida, Nov. 2006.
D. Ghindici, G. Grimaud, and I. Simplot-Ryl. Embedding verifiable information flow analysis. Proc. 4th Annual Conference on Privacy, Security and Trust (PST 2006), (Toronto, Canada, 2006), McGraw-Hill, pp. 343-352.
