@CONFERENCE\{IMM2005-04323,
    author       = "R. R. Hansen",
    title        = "Non-Interference and Simple Erasure Policies for Java Card Bytecode",
    year         = "2005",
    month        = "sep",
    keywords     = "java card static analysis information flow erasure policies",
    booktitle    = "Programming Language Interference and Dependence 2005",
    volume       = "",
    series       = "",
    editor       = "",
    publisher    = "",
    organization = "",
    address      = "London, England",
    url          = "http://www.dcs.kcl.ac.uk/events/past/2005/PLID05/",
    abstract     = "In this paper we propose a notion of non-interference for an
abstract version of the Java Card bytecode language. Programs that
have the non-interference property are guaranteed to not leak any
secret information. Furthermore an information flow analysis
for verifying non-interference is developed and proved sound and
correct with respect to the formal semantics of the language. The
information flow analysis can be implemented and used to automatically
verify the absence of leaks in a program. 

Based on the definition of non-interference we propose a notion of
simple erasure policies that are useful in applications where
confidential information must be made temporarily available to
untrusted parties, e.g., in e-commerce or e-voting."
}