Generate Security-relevant Behavior Model Of Java Source Code Based On Extended Push Down Automaton

With the application of java program,the security of mobile code become more and more important.Model-carrying code(MCC) provides a systematic and comprehensive framework for the security of execution of untrusted mobile code,but it still has aspects to complete.We introduce extended pushdown automaton (EPDA) as the program behavior model and show an advanced method of constructing EPDA through static analysis of Java source code.This paper shows the formal definition and abstract representation of our EPDA model, and presents the analysis method of inter-method control flow and data flow. These improvements raise the ability of static analysis so that it is more applicable to object-oriented languages. We also integratively deal with exceptions, polymorphism, classes, objects and other features of the object-oriented language.