Security Testing and Formal Methods for High Levels Certification of Smart Cards

We will discuss security testing and formal methods in the framework of the Common Criteria certification of smart cards. The discussion will introduce the requirements of the standard on the test activity and on the description of the design and will identify their impact on the methods and tools to use. Emphasis will be placed on the high levels of certification in which formal methods are required to demonstrate the correct design of the security. We will discuss the advantage of a mixed approach of formal model-based testing, that will allow to reach, in a pragmatic way, high levels of certification.